Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5ea5b7ae-7572-4cb6-ad11-f441a34761fe.roa
File:                     5ea5b7ae-7572-4cb6-ad11-f441a34761fe.roa (raw, json)
Hash identifier:          8yw5SSmjx96gOsHHRFC4RS6Y1bgwLhmZpZeL/+g6g9s=
Subject key identifier:   F9:C1:F4:F1:B1:71:79:C0:DC:24:7B:3D:8B:E3:EE:38:C1:C2:7E:92
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4995BB58D438623B47E477117819D64AACFAAFE8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5ea5b7ae-7572-4cb6-ad11-f441a34761fe.roa
Signing time:             Fri 23 Oct 2026 00:30:48 +0000
ROA not before:           Fri 23 Oct 2026 00:30:48 +0000
ROA not after:            Thu 21 Jan 2027 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1f2c:c800::/37 maxlen: 37
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Nov 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:95:bb:58:d4:38:62:3b:47:e4:77:11:78:19:d6:4a:ac:fa:af:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 23 00:30:48 2026 GMT
            Not After : Jan 21 23:59:59 2027 GMT
        Subject: serialNumber=114446d5c611d647c314c82884fa7bd6bc7e2d3feaa4c200dd76a12abef4c45f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:de:16:55:0d:39:f1:7d:67:9c:ae:49:67:83:
                    d0:c5:a5:36:ff:87:26:59:a9:4b:b7:9a:1c:c2:fd:
                    03:50:c9:38:90:84:06:33:c3:0c:37:d9:f0:5d:d7:
                    b3:06:b9:a2:da:b9:19:4a:29:17:52:97:cd:47:da:
                    64:ae:86:9a:6d:3c:de:7f:6d:63:18:c1:07:30:f7:
                    88:0f:8f:56:8f:9b:65:66:f4:ac:30:8f:ae:72:7a:
                    2f:51:4a:27:05:bd:47:5a:7f:d9:c2:9e:00:b4:25:
                    75:0f:5b:24:1c:52:7b:b6:72:4f:6a:50:26:62:0f:
                    84:18:f5:66:50:8b:2a:ea:b8:29:de:dd:c8:d3:9f:
                    45:95:26:0f:d7:c7:3f:dc:23:e2:90:a6:68:f7:5f:
                    e6:43:a2:41:05:20:1c:9e:dd:da:39:b4:3a:78:c3:
                    57:7f:5c:b6:b0:27:83:2d:e1:f8:30:ae:bd:ea:4c:
                    9e:24:cb:30:93:c4:f1:dd:e3:a9:76:a3:4f:71:85:
                    e2:d7:da:c7:90:e8:58:7c:b6:0d:bd:2a:54:c4:2c:
                    e0:84:ad:89:59:fb:24:2f:fa:1d:60:16:8b:af:09:
                    1f:bf:3e:b0:a0:48:92:e2:8c:4c:10:2f:d2:be:b4:
                    66:e6:f4:ac:b7:0f:7c:12:c3:2e:a4:e7:f1:1b:db:
                    28:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:C1:F4:F1:B1:71:79:C0:DC:24:7B:3D:8B:E3:EE:38:C1:C2:7E:92
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5ea5b7ae-7572-4cb6-ad11-f441a34761fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f2c:c800::/37

    Signature Algorithm: sha256WithRSAEncryption
         7f:a7:20:b7:12:eb:73:69:45:4d:ba:c4:56:f7:89:4f:ca:64:
         c4:ae:ed:6c:b1:fe:18:de:1d:4b:36:28:45:8d:0f:a8:c1:b6:
         1c:27:98:96:00:ab:eb:1a:1f:88:17:98:cb:5b:b1:15:7c:c1:
         57:51:c5:4b:38:75:36:27:8f:40:97:3d:41:d1:5b:64:09:e4:
         55:f0:89:22:56:f5:af:03:e9:53:10:19:34:64:2b:62:b1:80:
         a9:ca:1e:0d:5b:8c:14:f8:57:38:90:94:ef:73:85:31:4b:5a:
         a4:5c:5f:80:77:43:6c:83:99:41:31:e3:2a:7e:cb:78:e6:c0:
         67:a4:94:dc:0c:7a:21:9f:7e:a2:19:59:3b:77:15:f2:66:e6:
         c5:3e:db:1b:01:ea:55:1e:52:53:86:ed:47:9e:26:05:2f:4d:
         e7:0f:d0:66:0d:8a:b5:41:8b:72:87:1e:a3:a3:de:95:2c:16:
         4b:77:12:e9:78:3c:c1:b7:3a:54:61:b6:6a:3d:0b:41:a3:d9:
         16:1e:63:24:0c:b2:2e:65:b4:06:75:c4:50:fa:19:2d:ba:90:
         76:c0:35:0b:e6:1b:4b:72:46:f5:1a:be:94:09:a1:90:a1:15:
         20:a3:0a:48:d3:58:a5:82:a4:0b:68:34:d0:5c:ee:33:f4:b1:
         10:6d:97:76
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Nov 2 18:51:57 2026 by rpki-client