Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5dc411d9-6915-49ea-8d8e-e0fbdb7782a2.roa
File:                     5dc411d9-6915-49ea-8d8e-e0fbdb7782a2.roa (raw, json)
Hash identifier:          9iq4ttHH7fdr3f6ieRr9DL79smaiLw4n29ksKtNXHb4=
Subject key identifier:   7C:12:AD:09:4D:4B:CE:21:46:7A:13:50:56:FC:E2:FA:0F:DA:F2:62
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       161A26DCC00EE8626421F8277D214AA37F5A2AA1
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5dc411d9-6915-49ea-8d8e-e0fbdb7782a2.roa
Signing time:             Tue 04 Aug 2026 01:21:02 +0000
ROA not before:           Tue 04 Aug 2026 01:21:02 +0000
ROA not after:            Mon 02 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff1:8000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:1a:26:dc:c0:0e:e8:62:64:21:f8:27:7d:21:4a:a3:7f:5a:2a:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  4 01:21:02 2026 GMT
            Not After : Nov  2 23:59:59 2026 GMT
        Subject: serialNumber=e297b266158dde01b70f0dbd3758ce690ae65579940a7e0a564f9c8d4d51f63f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:8d:6e:ec:74:01:c1:1d:92:a6:a0:17:69:92:
                    1d:d7:3f:22:e3:7d:f5:1a:29:c9:b6:99:94:fe:5f:
                    0b:0c:2d:ec:e3:8a:10:b6:3b:50:12:ac:9d:a0:c5:
                    92:b2:a1:47:40:6b:71:60:56:5b:64:02:66:61:31:
                    e4:23:01:73:9d:41:59:f8:5b:82:69:a9:4a:f8:cf:
                    aa:7f:7c:00:c7:a4:db:85:57:88:c0:2d:cf:06:d8:
                    89:70:41:35:35:cc:64:d1:e0:6b:ce:c5:57:28:b1:
                    77:15:93:91:ba:4c:77:e1:4e:9e:5d:59:36:cb:0c:
                    60:b8:c9:6a:73:e1:18:6d:01:85:59:e8:7a:32:db:
                    5a:83:3d:ba:e5:06:a9:22:37:9a:34:93:6a:2b:0d:
                    13:f7:3f:92:73:0f:2a:00:e0:6b:17:a9:c6:65:c8:
                    a6:ff:91:20:50:14:8b:20:b6:b1:ed:6a:e8:28:fb:
                    30:b1:5a:c4:7d:ac:6c:b0:2f:4f:dd:5c:05:22:ef:
                    9b:0a:ce:07:27:71:07:94:20:55:26:8c:fe:23:c8:
                    60:bf:fd:96:ac:bc:c7:b4:64:2c:57:c2:97:cb:76:
                    a4:61:b1:9b:18:f3:a3:17:a9:d7:86:03:e7:38:b6:
                    53:fd:e5:9b:42:80:46:46:a3:d3:93:58:9a:f8:09:
                    00:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:12:AD:09:4D:4B:CE:21:46:7A:13:50:56:FC:E2:FA:0F:DA:F2:62
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5dc411d9-6915-49ea-8d8e-e0fbdb7782a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff1:8000::/40

    Signature Algorithm: sha256WithRSAEncryption
         5c:47:26:f1:d6:2b:35:7b:29:0d:f2:33:11:05:dd:4b:5d:bf:
         a8:a7:74:69:37:d9:fc:1d:c9:13:c0:34:ff:70:ac:70:14:2c:
         02:75:89:fb:7e:7c:70:cf:55:7d:45:39:69:4a:f3:a9:c7:76:
         85:99:21:f3:a4:8e:87:cb:36:3e:f9:bd:37:d3:5e:9b:95:ea:
         ae:92:24:0c:87:67:7e:0a:1a:bd:f8:41:e7:d7:cd:01:ba:d6:
         ab:8c:1f:48:1b:1b:6a:24:63:63:bc:ee:39:d2:4a:c0:cf:d6:
         49:e8:69:74:34:16:a0:34:0f:22:0a:11:a7:ee:7c:a6:73:5f:
         a6:69:2f:8a:2b:ce:dd:2d:bd:71:81:50:de:88:91:04:70:95:
         14:1c:21:8c:78:bf:54:b1:8c:77:a0:c6:e3:0e:99:c0:37:e2:
         71:fb:4c:31:ba:a7:a7:ec:ec:c9:93:ae:73:b8:ff:a5:ce:f9:
         03:37:38:2c:72:f2:23:ae:c1:c5:36:f5:b0:06:49:d4:d9:d8:
         34:6f:7c:eb:97:d6:0c:95:8f:29:14:ae:f7:4c:bf:46:cd:d3:
         e6:08:ff:d3:c9:42:89:40:fe:d1:2a:b3:28:3a:ae:1e:cc:27:
         61:52:01:e7:1e:7b:81:77:83:f4:64:39:a1:96:00:c3:d9:08:
         82:0e:36:b6
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Sep 15 13:18:58 2026 by rpki-client