Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/719394b9-8708-49f7-90ed-1ee6a4dc666a.roa
File:                     719394b9-8708-49f7-90ed-1ee6a4dc666a.roa (raw, json)
Hash identifier:          O60B9+hdXZBacGZblT1bs9QXCJXGnZeiFTqQfW/Iobs=
Subject key identifier:   51:78:F9:D3:89:46:8F:1F:01:A9:88:DB:99:B6:1F:59:96:A9:71:82
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5AC4A5351F9D88664B66EEF4A484D6DC84D71FA2
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/719394b9-8708-49f7-90ed-1ee6a4dc666a.roa
Signing time:             Tue 04 Aug 2026 02:00:43 +0000
ROA not before:           Tue 04 Aug 2026 02:00:43 +0000
ROA not after:            Mon 02 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff2:40c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 19 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:c4:a5:35:1f:9d:88:66:4b:66:ee:f4:a4:84:d6:dc:84:d7:1f:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  4 02:00:43 2026 GMT
            Not After : Nov  2 23:59:59 2026 GMT
        Subject: serialNumber=c455c280047be3368ecb75e4310d5a941fa57f02a1cab4f59e637769c8115f1b, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:be:c8:8c:a7:0e:ce:3e:e9:6a:ec:25:41:2f:
                    15:02:af:3b:56:e8:a1:58:3b:c1:6a:04:92:d2:1d:
                    e5:4f:fd:2b:88:8c:47:a7:01:7a:7a:b8:39:7e:4a:
                    d8:71:31:51:86:a8:1c:74:20:56:97:6c:b8:fc:e8:
                    0f:dd:18:ba:6c:c3:4d:7b:97:52:58:ea:e5:18:fd:
                    9f:6b:cd:cd:24:b7:81:c4:06:1c:7c:f5:4a:4a:dc:
                    0e:8b:23:9b:e8:b6:06:00:b7:e1:af:45:8b:a2:18:
                    d1:0a:48:e6:4c:e9:f2:bb:1b:d5:d1:c0:be:52:a3:
                    5e:9f:34:eb:e0:d1:f7:e1:40:1e:de:cb:b1:88:c5:
                    cf:94:e1:dd:73:91:30:6d:79:69:21:2b:d9:67:9d:
                    b9:ec:c5:f6:2c:95:c5:ca:18:02:65:85:e8:86:33:
                    80:6f:98:00:4c:f4:d0:0a:2e:59:9e:dd:9e:bb:8d:
                    b1:e0:dd:9e:ee:83:92:5d:27:6b:b5:d9:08:2f:5f:
                    27:50:fb:dd:46:f5:36:b9:d6:2c:f9:3d:e2:82:5f:
                    f8:31:6e:de:76:ff:e1:52:dc:be:a0:59:2f:bd:a3:
                    02:8f:d5:aa:b4:37:9e:99:06:e4:3f:2c:e9:c9:48:
                    b1:80:d3:51:78:17:5b:50:c5:2d:f2:eb:3f:57:b5:
                    60:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:78:F9:D3:89:46:8F:1F:01:A9:88:DB:99:B6:1F:59:96:A9:71:82
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/719394b9-8708-49f7-90ed-1ee6a4dc666a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff2:40c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         3b:11:cd:70:76:a6:0d:a5:ad:f6:1c:c9:d1:74:ba:5f:08:31:
         9d:9e:6e:60:8a:fb:ff:e6:34:a2:2f:dc:4e:fe:d8:de:e8:05:
         1b:60:d1:67:a3:4c:31:a6:60:25:5e:ea:5c:1e:8f:61:53:1a:
         2f:55:29:fc:a0:d2:e4:29:28:2b:25:fb:48:3f:4a:8e:93:52:
         14:be:21:02:f8:25:ef:13:37:15:c1:b0:d8:a8:dc:0f:94:da:
         ff:b6:76:7e:8a:42:38:f9:78:5c:66:0c:bf:5c:71:a6:13:1e:
         ba:db:d1:38:de:62:88:55:05:95:52:2d:44:7b:6c:70:52:a4:
         48:9a:e7:ae:4b:f7:39:b7:2d:d7:5a:d3:64:1d:92:31:6a:42:
         d0:3a:51:ea:e0:2d:4e:48:80:e7:43:f5:ae:69:3d:25:bc:98:
         e5:70:44:ba:72:ae:bd:d8:e7:e1:b8:f1:02:58:1a:cd:01:e1:
         23:b0:97:88:b8:79:18:78:82:ab:b0:12:35:e5:d2:aa:bd:10:
         34:a5:e2:f0:09:85:a8:da:41:84:d3:d1:29:a0:90:97:ee:48:
         40:ea:2d:eb:f8:13:9d:5c:ca:39:51:bd:a8:ef:19:6a:fd:d3:
         89:e7:50:b5:17:e7:d7:db:da:c3:55:0f:d7:74:19:b2:8d:ec:
         0b:24:a8:46
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Sep 17 21:51:47 2026 by rpki-client