Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5f267523-a7c4-4fc8-8786-ac0c760a677c.roa
File:                     5f267523-a7c4-4fc8-8786-ac0c760a677c.roa (raw, json)
Hash identifier:          S5j+2QRy7gGzKB2OLyYw3sazHH8NZyKjDiWZCoTmtsM=
Subject key identifier:   59:8E:F4:DC:09:F4:5A:00:4E:05:41:17:3A:C2:EC:1B:FF:85:D9:95
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       072D8E90CC2CB6EE8BE02512ED92315CBF932C4E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5f267523-a7c4-4fc8-8786-ac0c760a677c.roa
Signing time:             Mon 03 Aug 2026 01:10:08 +0000
ROA not before:           Mon 03 Aug 2026 01:10:08 +0000
ROA not after:            Sun 01 Nov 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1f00:80a0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Aug 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:2d:8e:90:cc:2c:b6:ee:8b:e0:25:12:ed:92:31:5c:bf:93:2c:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  3 01:10:08 2026 GMT
            Not After : Nov  1 23:59:59 2026 GMT
        Subject: serialNumber=3275ace1f1d37404e0700dceecef7c1eb9808c3f9ea9092d26c7f34ea477adb7, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:76:f4:ec:7b:13:76:e9:17:1a:8c:e0:53:cb:
                    12:fe:25:4f:c2:64:16:44:92:51:ed:c5:bd:b9:e3:
                    ea:ef:ba:69:e7:40:59:7d:57:9a:9d:9d:49:d9:a6:
                    bc:8b:da:38:cc:e5:f9:d9:f4:0c:80:c5:49:eb:2d:
                    7c:82:a0:43:6e:2e:20:1b:29:c5:94:b8:3f:7c:a2:
                    e6:5c:5c:1e:a3:8e:d3:54:56:6a:0c:64:69:38:df:
                    21:78:ac:43:8f:8f:ce:07:3a:b3:a7:71:c3:24:cb:
                    0f:fc:27:8d:50:bc:0c:55:76:9c:9c:85:b2:8d:f0:
                    bc:46:f7:fe:42:ce:77:7a:8b:a8:ef:f8:f5:f8:af:
                    b8:7f:8e:a0:6c:01:ad:4a:7d:08:a3:f7:69:ac:1d:
                    14:ce:46:30:3a:c9:ef:27:d2:9f:75:43:e6:e2:b5:
                    a8:9e:77:1a:ab:29:6d:11:e8:7c:dc:6b:16:d5:48:
                    23:5c:e3:3f:94:51:30:28:ee:d6:45:6c:48:53:25:
                    7b:3e:f6:12:ec:68:c8:b5:36:95:1f:19:9a:75:0e:
                    60:19:92:48:99:0a:f4:70:65:d4:ab:c8:05:68:89:
                    6a:e1:33:e0:87:df:58:46:b8:a8:3f:52:f0:4b:89:
                    a4:79:b6:80:87:95:c3:eb:ad:6c:89:4e:24:e1:e5:
                    70:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:8E:F4:DC:09:F4:5A:00:4E:05:41:17:3A:C2:EC:1B:FF:85:D9:95
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5f267523-a7c4-4fc8-8786-ac0c760a677c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f00:80a0::/48

    Signature Algorithm: sha256WithRSAEncryption
         02:0d:23:ac:62:95:16:08:1b:0b:2d:e7:a8:58:74:00:38:a8:
         af:8f:b9:17:b9:14:a4:12:fb:21:d4:9d:88:a5:02:dc:eb:35:
         7f:0c:44:6d:07:fb:78:ef:69:85:48:3f:d1:ab:98:11:2c:1d:
         9b:76:db:4a:55:a8:d1:65:38:8c:c3:03:fd:2c:1b:97:47:fd:
         b9:83:71:a0:31:50:dc:b0:1c:ce:64:18:d6:70:e3:60:7f:b4:
         7b:e2:0e:28:e0:98:f3:9c:14:b9:be:f3:a5:23:cd:58:1d:66:
         2e:35:b9:eb:22:d8:0a:d7:6b:9f:f8:03:c4:32:14:8a:4a:af:
         b7:73:23:75:22:44:3a:0a:07:db:49:e3:dc:63:d7:d2:02:e0:
         7b:f1:39:be:24:b8:04:05:0b:b4:0c:8d:e3:2b:70:4d:57:38:
         60:b1:b2:d8:9e:f9:79:a1:92:9b:69:71:f4:cf:5d:6b:d4:f5:
         f5:92:56:12:62:4c:9c:54:87:86:6c:a3:58:b9:34:5d:9a:e0:
         d1:ec:68:99:f9:6f:dc:34:66:6f:ba:0b:a7:f0:4c:b3:ca:d2:
         6a:07:75:f7:70:7a:4f:b0:68:cf:61:5b:0a:82:ed:86:4b:fe:
         f5:81:0d:9d:56:80:d2:51:f1:41:21:46:69:bb:e7:86:da:a0:
         82:69:04:bf
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Aug 3 05:45:15 2026 by rpki-client