Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6e1249cd-cc31-42bd-a5be-6946a7b244cc.roa
File:                     6e1249cd-cc31-42bd-a5be-6946a7b244cc.roa (raw, json)
Hash identifier:          EkAhSq+2dEoag3uidF635bg3q3ssBXN6JKx7aV0LIDo=
Subject key identifier:   25:F0:E7:8C:FB:28:3C:73:5C:F9:69:C2:68:71:0E:9E:D5:1A:5A:13
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7807A86AFE3836B0E362CFB2970718718195A5BF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6e1249cd-cc31-42bd-a5be-6946a7b244cc.roa
Signing time:             Thu 29 Oct 2026 00:41:40 +0000
ROA not before:           Thu 29 Oct 2026 00:41:40 +0000
ROA not after:            Wed 27 Jan 2027 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1fe8:8000::/39 maxlen: 39
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Nov 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:07:a8:6a:fe:38:36:b0:e3:62:cf:b2:97:07:18:71:81:95:a5:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 29 00:41:40 2026 GMT
            Not After : Jan 27 23:59:59 2027 GMT
        Subject: serialNumber=db5f7db2231b4ad4dbd837843be026412fef269b55f3666148b302ee89455717, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c5:01:b0:b2:78:9f:f9:b3:b2:60:d1:41:f7:
                    4c:3e:e7:d5:48:ff:7f:37:bf:8f:0f:4a:5d:cc:f1:
                    62:46:8a:94:54:b9:2e:12:fc:51:4f:37:77:5d:aa:
                    95:9a:f2:f6:de:94:90:a3:48:ee:66:f2:93:55:a7:
                    47:a3:40:6b:c1:dc:7f:21:52:95:d9:74:31:57:f2:
                    79:48:a5:9b:59:71:a9:b6:5d:8d:59:84:d6:00:61:
                    b5:b5:be:cf:e5:a1:4f:06:9f:bd:6a:c5:c2:18:59:
                    43:54:f8:25:57:a8:63:7a:f7:f1:6a:14:87:e5:81:
                    ed:89:a4:e2:2f:e7:f9:29:80:41:5c:1c:1f:c0:e8:
                    77:fd:c1:a5:81:e4:c4:dd:68:15:41:25:0d:76:3e:
                    1a:fc:3a:14:3f:4f:0c:a2:ea:b6:69:80:cd:d8:6f:
                    1e:fc:c8:0a:56:c3:05:f5:36:2d:fd:72:de:07:39:
                    c0:52:75:2a:22:cc:f0:30:3c:e1:22:de:18:22:2b:
                    41:e0:e2:75:2e:b1:6b:5f:f4:a7:71:8b:a7:e9:56:
                    50:06:52:b8:17:f8:08:b2:0a:3f:cb:91:bb:35:af:
                    84:dc:dc:46:2a:99:9a:50:a6:43:30:da:43:c8:28:
                    7d:15:27:c6:e4:05:fc:77:35:36:c9:86:30:b7:34:
                    fe:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:F0:E7:8C:FB:28:3C:73:5C:F9:69:C2:68:71:0E:9E:D5:1A:5A:13
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6e1249cd-cc31-42bd-a5be-6946a7b244cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fe8:8000::/39

    Signature Algorithm: sha256WithRSAEncryption
         c0:1e:68:8b:5f:17:ed:d5:24:ae:36:ac:a0:ef:2d:85:ba:1f:
         b1:07:a1:5d:0d:ec:90:0c:9e:1f:a1:50:55:a4:11:e0:58:a0:
         f4:cd:39:98:c8:1c:21:4d:ea:e6:26:21:e1:b3:4b:dc:94:6a:
         a1:a4:d0:1d:69:c9:51:92:b0:46:ed:fb:5b:97:2d:de:99:ec:
         c4:89:c7:ee:b7:c4:80:1e:43:bc:03:90:a9:ec:92:98:91:f7:
         c2:9d:a1:8e:4c:78:14:f7:2f:b0:b5:ab:dc:00:5a:79:ef:c8:
         07:9f:4b:ca:d8:5c:87:10:e6:52:df:27:18:34:be:55:99:ed:
         aa:89:99:bf:da:47:cf:49:cf:a2:73:5a:7f:25:57:09:c6:29:
         1f:fe:ab:33:3c:54:12:78:42:05:d9:94:e6:38:f8:40:8e:e3:
         10:d8:f2:b8:24:90:33:de:fe:d2:0f:4f:7c:b0:95:17:ab:b9:
         68:a5:c3:f7:88:5f:bc:f4:2a:17:8d:d1:37:9f:4f:d7:d2:fc:
         1d:90:60:6f:a2:16:84:28:9f:8f:d7:9c:67:d3:1f:63:0a:71:
         e1:95:27:72:33:06:22:62:01:6b:80:96:a0:7c:23:b1:79:74:
         b5:89:5d:fa:6c:54:1b:e4:25:54:57:23:c9:33:59:84:c5:7a:
         9a:da:06:fc
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Nov 2 18:49:36 2026 by rpki-client