Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/76dea53b-00c8-4fbf-95bd-1a58ae1e45f4.roa
File:                     76dea53b-00c8-4fbf-95bd-1a58ae1e45f4.roa (raw, json)
Hash identifier:          y7H3+bnzakik8HbEXeyKsjpUpU8TO8JHjZ94T7EJ5cI=
Subject key identifier:   C8:16:72:93:D7:5D:A0:91:3A:B2:17:24:63:87:36:12:0D:6A:DC:94
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       373FCAE4E9B624D4B916BB243D2DE61D9A399E4B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/76dea53b-00c8-4fbf-95bd-1a58ae1e45f4.roa
Signing time:             Thu 22 Oct 2026 01:50:48 +0000
ROA not before:           Thu 22 Oct 2026 01:50:48 +0000
ROA not after:            Wed 20 Jan 2027 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1f00:81e0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Nov 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:3f:ca:e4:e9:b6:24:d4:b9:16:bb:24:3d:2d:e6:1d:9a:39:9e:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 22 01:50:48 2026 GMT
            Not After : Jan 20 23:59:59 2027 GMT
        Subject: serialNumber=808a3c6fe7b654f76cdd20952a1ccef834e5405fec0dbbdf8902911a9b4a89eb, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:07:87:6e:24:83:44:f0:ef:d5:44:58:e4:25:
                    4d:35:dd:c0:a6:f1:54:fb:12:34:85:dc:b2:14:bc:
                    01:a1:91:9a:e4:c9:1f:47:60:fc:8c:f1:93:ea:21:
                    9e:42:b7:c6:13:3c:dd:27:48:46:d8:24:56:78:96:
                    ac:1e:40:51:c9:0f:d0:54:63:b8:b2:dc:5d:c9:ca:
                    a9:87:16:fe:21:10:a4:46:2e:af:09:c8:5c:d6:3c:
                    9e:a7:bf:22:0d:4b:12:49:39:37:bc:1b:b5:13:c3:
                    db:4d:59:a8:e6:dd:11:d4:93:ef:b8:f0:92:7e:20:
                    23:ba:3c:93:7f:56:95:c4:7a:45:f0:e4:e0:30:fe:
                    de:7c:e9:38:3f:85:c4:dd:c1:d3:df:ae:55:d8:f0:
                    f9:b4:bd:a6:e1:25:77:59:62:fd:3b:c4:11:56:a5:
                    dc:17:fc:9e:55:d6:0c:29:60:18:75:19:cb:4f:7b:
                    a1:0f:f7:d2:25:7f:09:9b:2c:95:b4:82:c9:a9:55:
                    69:d7:9c:76:c7:d7:43:ca:63:a3:87:d8:3b:37:50:
                    d3:80:9c:4b:fc:48:19:77:44:31:3b:27:d1:f4:97:
                    6b:2a:13:a4:a6:13:24:4b:e1:95:99:2e:92:73:1d:
                    75:23:6d:03:04:65:8a:ec:1c:c8:d7:7a:97:0d:a0:
                    d6:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:16:72:93:D7:5D:A0:91:3A:B2:17:24:63:87:36:12:0D:6A:DC:94
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/76dea53b-00c8-4fbf-95bd-1a58ae1e45f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f00:81e0::/48

    Signature Algorithm: sha256WithRSAEncryption
         2f:89:c5:47:3f:6f:5b:7d:b7:ce:8a:e3:f7:25:17:58:3c:d1:
         a0:8c:59:7f:e7:a2:32:8a:1f:67:48:bd:d5:ac:99:9b:10:31:
         f6:98:b0:1f:b6:38:b7:83:61:ea:4f:42:9c:11:c6:aa:8a:65:
         4b:20:60:62:6d:b3:f2:43:e9:4c:85:59:fb:10:48:c1:11:a7:
         7e:73:bb:33:7d:c3:4b:d4:12:06:af:a0:e0:69:a4:32:89:33:
         e7:8d:10:0f:fe:e8:57:ef:64:92:ae:a5:3a:ec:36:b6:c3:9d:
         dc:f0:31:8f:23:3d:d3:71:23:0f:c5:ae:14:ce:e9:df:33:b6:
         4b:02:2f:c3:19:0d:92:b8:d8:95:b4:b7:06:74:06:dd:dd:6d:
         0b:4e:c7:62:46:66:9b:30:b4:a1:47:86:42:9c:f5:4a:57:db:
         f4:42:fa:f5:b8:e1:c8:1d:09:ff:1b:a8:7d:ab:be:5b:ba:29:
         25:73:35:61:eb:ba:33:18:1a:41:d0:5a:50:cd:f5:78:8e:6c:
         f2:90:63:78:af:86:5a:84:b1:1c:b0:4e:ed:ed:d3:fc:e9:49:
         58:57:0b:c3:b2:3f:29:17:8c:c5:23:89:e3:6e:db:6e:7c:06:
         e6:c2:cb:9d:1a:22:68:be:d4:0d:59:91:0a:14:a4:76:20:cd:
         69:bb:88:57
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Nov 3 22:54:27 2026 by rpki-client