Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/74979d15-5647-4efc-ac8a-013c581338cc.roa
File:                     74979d15-5647-4efc-ac8a-013c581338cc.roa (raw, json)
Hash identifier:          t6jDo6F3+eCoEAj6ClI1YqC5gkzv/R9kgnb0WlYoqHk=
Subject key identifier:   05:D7:9C:E6:C6:6A:67:C1:6E:03:E8:15:98:98:1D:56:76:D0:73:BC
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       182AFE687363E0660E46CC28903A7BAEBF77AC40
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/74979d15-5647-4efc-ac8a-013c581338cc.roa
Signing time:             Mon 03 Aug 2026 00:31:52 +0000
ROA not before:           Mon 03 Aug 2026 00:31:52 +0000
ROA not after:            Sun 01 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f00:5040::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Aug 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:2a:fe:68:73:63:e0:66:0e:46:cc:28:90:3a:7b:ae:bf:77:ac:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  3 00:31:52 2026 GMT
            Not After : Nov  1 23:59:59 2026 GMT
        Subject: serialNumber=dbdf061230710076552754d5d0c194b82a054177ac1c4f492a79573651900d94, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:50:03:12:0b:e8:78:1b:7b:ab:66:4a:f6:67:
                    cc:ca:b0:9e:94:07:5b:4b:86:83:73:db:ff:08:e6:
                    65:ff:3c:d6:de:d0:ab:bd:d1:83:77:47:6a:df:9e:
                    c0:d2:cb:af:3b:57:cb:ee:2e:b5:8a:17:80:fb:3b:
                    09:65:b9:7e:1f:e4:57:df:58:bd:c3:4a:db:1f:8d:
                    1b:d9:5b:a8:97:ef:02:24:ee:62:2b:28:75:3b:7f:
                    70:d9:dd:c6:5a:b7:22:83:57:1a:68:96:20:0d:e3:
                    d0:54:29:15:c9:4f:ba:02:36:17:81:a3:34:7c:48:
                    29:1e:c6:36:50:88:b2:61:8f:a4:61:50:2a:3c:81:
                    99:80:83:de:9d:4e:1f:b2:66:de:35:70:38:c7:e7:
                    b7:0d:15:26:2b:3a:c3:2a:e5:7d:d3:c5:a6:0b:88:
                    aa:60:7d:7f:4f:5c:5f:51:68:9b:92:5d:e5:8b:9b:
                    86:c9:b7:a3:a9:43:79:42:37:d1:7f:36:e2:f0:d9:
                    c2:57:54:94:32:a7:f3:73:fe:bb:16:bc:e1:9b:01:
                    d1:51:b1:e5:14:cf:58:f0:95:85:e7:a5:08:0d:a2:
                    91:a4:ce:ef:6d:8e:c2:1d:eb:83:3d:ae:39:bf:93:
                    be:d3:d7:a3:33:9f:76:24:f1:b1:74:2f:e6:4c:46:
                    59:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:D7:9C:E6:C6:6A:67:C1:6E:03:E8:15:98:98:1D:56:76:D0:73:BC
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/74979d15-5647-4efc-ac8a-013c581338cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f00:5040::/48

    Signature Algorithm: sha256WithRSAEncryption
         33:15:59:88:a7:f3:35:b8:ba:cd:46:58:4b:48:4d:fa:00:95:
         c5:09:83:61:5e:24:6a:fc:c3:b4:cf:d4:ec:05:a5:23:55:5a:
         f2:6c:14:1d:85:d5:b0:e6:67:7a:6b:c8:e6:09:68:59:da:64:
         4a:0e:c0:d6:25:55:62:1b:ed:c5:d1:1e:57:80:92:2e:50:bc:
         de:e6:48:d9:0b:78:84:5a:18:86:91:92:cd:75:4a:ea:50:ab:
         fc:6b:33:95:91:e4:3d:b8:b3:ed:d8:cf:58:d3:61:91:32:8e:
         4f:8f:da:9e:89:e7:3d:ea:a5:a6:44:1b:a2:42:63:e1:5d:0b:
         21:9d:38:9e:64:3a:3d:a6:6a:0c:f7:af:50:af:da:16:0b:a3:
         39:db:38:25:99:e1:03:fc:49:92:aa:99:9e:56:84:ae:59:86:
         e0:27:dd:d7:5e:9b:9e:7e:c0:7f:20:ea:f9:ce:c7:18:c5:77:
         b5:d4:a5:21:54:40:c3:eb:ab:44:ed:33:14:73:72:d4:13:2c:
         fd:82:ff:01:14:96:6f:d4:80:f9:48:39:e2:97:d7:8a:45:1b:
         80:4a:bb:08:db:6c:72:c1:d1:2a:80:30:69:c9:e2:bc:23:cf:
         68:17:ef:5b:ce:cd:41:1f:a8:76:e2:e7:ee:61:fe:e9:de:0a:
         33:6d:fd:5a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Aug 3 05:43:39 2026 by rpki-client