Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/776ff875-bf1d-4b01-b4ba-540e195bb8e7.roa
File:                     776ff875-bf1d-4b01-b4ba-540e195bb8e7.roa (raw, json)
Hash identifier:          48d8eCojiOk9JjfjxT+eptJN7vor4IkjwZyJF+LfmVk=
Subject key identifier:   BF:C2:31:D9:FC:BE:68:36:45:6F:9E:8A:6F:F0:86:5B:16:D2:A0:A1
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3BAF9BE7198230CA443C1A049911BB47BD0F6030
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/776ff875-bf1d-4b01-b4ba-540e195bb8e7.roa
Signing time:             Wed 19 Aug 2026 00:30:54 +0000
ROA not before:           Wed 19 Aug 2026 00:30:54 +0000
ROA not after:            Tue 17 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fba:a480::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 19 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:af:9b:e7:19:82:30:ca:44:3c:1a:04:99:11:bb:47:bd:0f:60:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug 19 00:30:54 2026 GMT
            Not After : Nov 17 23:59:59 2026 GMT
        Subject: serialNumber=13fb50456815d90ed082e09eccc217f205e0585baa709f404f549b4ef2feb5d9, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:a8:48:7e:3b:0e:5d:54:e4:bb:f6:62:91:81:
                    87:a1:2f:ef:7e:bf:37:32:96:ee:90:a8:ae:76:b9:
                    65:dd:56:82:2b:15:a8:3e:db:91:73:d1:93:db:99:
                    6f:05:f9:78:a9:a2:59:84:9d:60:6c:28:52:de:ee:
                    cb:40:61:42:5d:c7:8d:ca:3d:c7:9a:87:dd:51:5c:
                    42:bb:0d:d8:e0:8a:e3:87:4d:6e:10:b7:9e:ce:44:
                    90:60:7e:83:64:38:41:9c:76:f9:24:9e:2e:73:c7:
                    12:38:d2:32:6f:11:62:b7:82:a8:61:e4:e0:df:8c:
                    db:eb:3f:62:39:46:78:4a:b9:3d:b5:6a:de:b7:4c:
                    44:e4:45:90:1d:b3:de:b9:c6:57:16:0b:91:55:08:
                    9d:aa:ac:e1:23:b6:20:fa:be:0e:af:89:c9:56:91:
                    ca:3e:6f:0f:4c:44:8f:48:0a:0b:14:09:37:5c:8c:
                    42:de:6c:b9:b3:c4:11:8a:3e:03:b3:20:79:8d:0b:
                    39:a6:25:9a:4d:50:07:e3:88:8e:6f:ed:bb:f0:07:
                    67:19:45:db:b6:98:af:45:0f:0b:5a:b6:df:ff:f7:
                    79:b3:84:a8:cd:87:77:4b:f0:f2:ef:78:fb:28:89:
                    3a:88:b7:c0:50:6e:b3:8b:2f:db:ae:b8:7f:c5:d3:
                    70:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:C2:31:D9:FC:BE:68:36:45:6F:9E:8A:6F:F0:86:5B:16:D2:A0:A1
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/776ff875-bf1d-4b01-b4ba-540e195bb8e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fba:a480::/48

    Signature Algorithm: sha256WithRSAEncryption
         00:c4:8b:39:c1:6d:7e:45:2e:4e:3f:f4:e6:e7:7f:99:bd:cd:
         88:e6:21:1a:37:ef:13:b9:a0:0c:b6:8b:d3:4e:70:1f:ec:47:
         df:24:22:6e:90:6b:09:10:b3:bf:cb:a8:f4:6d:b6:37:b8:56:
         cd:fc:54:ec:ba:4b:f3:da:fb:31:89:81:e5:49:f7:e8:f4:bb:
         f4:f9:a2:cb:42:56:57:8d:ea:72:e4:62:ca:35:c6:38:fa:0c:
         e2:ee:79:1d:6d:a5:a8:6c:65:69:1f:ae:4f:e0:1c:1c:de:0d:
         b4:ef:8c:ac:b6:03:f2:98:96:46:9d:68:80:a1:c3:e7:d9:56:
         15:24:de:0e:9c:22:d1:ae:69:26:c5:12:94:a7:8d:26:5a:c5:
         75:c7:43:97:16:f7:53:c9:d6:6a:43:2a:8f:9c:49:b0:30:68:
         f9:03:0b:d2:d2:dd:41:6f:44:2e:b9:dd:bd:5d:8a:38:11:9c:
         40:bb:2c:75:36:73:40:c0:2f:73:5c:03:e1:d1:ca:7e:98:d5:
         3a:82:48:04:14:8b:56:97:a9:4e:e0:f8:04:5b:48:94:e9:b4:
         53:11:81:b1:70:5f:97:bc:25:a7:fe:b2:b8:eb:c0:8f:4b:17:
         06:d5:a9:b0:55:6e:41:dd:20:ea:d9:e6:46:71:43:3b:77:16:
         50:72:56:03
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Sep 17 16:16:30 2026 by rpki-client