Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/79483f1f-35c5-4ee2-9db8-c98fac055e03.roa
File:                     79483f1f-35c5-4ee2-9db8-c98fac055e03.roa (raw, json)
Hash identifier:          8Lc3GNmN14VU/ekUUT+cnj6a4urWFncIP3R+70Eb/xM=
Subject key identifier:   77:34:4B:96:87:09:39:21:EE:74:AC:BC:40:5B:86:E0:61:62:76:C3
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0E11797EB5EE46652FA12C78FB4F7C931B4417F6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/79483f1f-35c5-4ee2-9db8-c98fac055e03.roa
Signing time:             Tue 10 Feb 2026 00:30:15 +0000
ROA not before:           Tue 10 Feb 2026 00:30:15 +0000
ROA not after:            Mon 11 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f68:a400::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:11:79:7e:b5:ee:46:65:2f:a1:2c:78:fb:4f:7c:93:1b:44:17:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 10 00:30:15 2026 GMT
            Not After : May 11 23:59:59 2026 GMT
        Subject: serialNumber=15346d6a01edd9333990a0e4c1e06c32272a9b6462000d66e388a6b4d97c4ccb, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:34:85:1b:9b:2b:6d:1c:aa:07:eb:e6:07:fc:
                    97:b5:4a:aa:ce:1c:23:5c:52:3e:bb:fe:8e:d8:80:
                    22:74:c7:a6:d0:e7:ba:5f:2a:7c:ac:dc:c7:70:cc:
                    2e:70:41:b0:ef:d4:77:14:d9:63:8f:3a:4d:1e:bf:
                    8f:95:60:5c:ea:e5:f6:5e:37:2e:6d:9c:58:39:18:
                    f6:a4:e6:2f:53:56:8f:e4:b6:79:bc:3b:4d:b2:d0:
                    f3:21:bd:81:09:37:dd:78:a1:7e:96:ff:60:68:9e:
                    2a:81:03:11:33:3a:96:3c:e2:1c:ab:52:ab:0a:d2:
                    c1:03:b0:04:d4:6d:b2:8c:10:f9:1d:61:8a:e2:99:
                    43:5b:5b:4d:f9:68:44:d9:b3:8f:bf:ad:bf:12:41:
                    d7:46:11:e8:7c:d5:cc:23:67:03:1c:aa:1e:05:de:
                    16:4f:1c:69:3b:a3:66:e4:ff:74:06:57:73:cc:08:
                    ee:55:71:77:27:88:c9:06:66:db:c7:93:11:3f:2e:
                    0a:bc:27:2b:bd:df:b3:d9:03:29:83:9f:8d:2d:9d:
                    73:35:8b:6c:c9:a6:fc:59:c7:b1:1d:30:4a:2d:b3:
                    5f:f0:25:70:52:ad:c1:33:46:90:e7:96:e0:66:16:
                    34:7f:f5:3f:80:ad:7a:67:9e:c0:f0:8d:19:15:ff:
                    f1:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:34:4B:96:87:09:39:21:EE:74:AC:BC:40:5B:86:E0:61:62:76:C3
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/79483f1f-35c5-4ee2-9db8-c98fac055e03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f68:a400::/40

    Signature Algorithm: sha256WithRSAEncryption
         6c:d9:8b:6f:6a:d1:8b:b7:29:eb:a9:aa:54:81:b2:2f:66:08:
         ec:57:e6:df:59:55:98:1c:e3:49:01:28:f3:f7:32:24:8e:87:
         9e:56:fa:ca:35:67:2d:ab:ab:43:a6:e5:40:88:d5:fa:aa:93:
         7c:f5:70:54:e9:89:d7:55:bf:00:12:db:44:67:34:16:23:0c:
         81:4c:e3:79:da:cb:d1:c2:d5:4f:cc:1d:ab:ef:ef:12:f5:19:
         08:3f:20:2b:ed:bc:09:ef:59:44:c7:e3:84:0d:c1:ec:38:9a:
         13:bd:53:d4:9a:19:c9:8f:14:d6:5b:39:d5:8b:54:6b:94:18:
         29:10:83:27:36:dd:6b:c2:00:55:7f:30:ed:dc:0f:19:65:e1:
         db:d6:04:ab:6b:4d:6c:98:bf:fc:96:18:27:ad:12:9d:37:65:
         97:f3:39:bb:a5:6d:af:dd:f6:72:e7:45:09:40:44:42:bb:37:
         b5:50:06:c0:60:c5:6e:fa:9f:cd:81:58:89:e5:65:5b:6f:b0:
         df:55:90:55:40:54:98:69:20:9e:54:07:38:24:0a:3f:12:03:
         4e:22:17:21:3b:62:02:a7:b3:6a:e5:1a:ca:71:ab:a9:f9:86:
         a4:91:22:01:31:0d:99:72:b7:e3:2f:4a:d6:0e:52:fe:9f:6d:
         b3:94:3a:b9
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUDhF5frXuRmUvoSx4+098kxtEF/YwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjEwMDAzMDE1WhcNMjYwNTExMjM1OTU5
WjB6MUkwRwYDVQQFE0AxNTM0NmQ2YTAxZWRkOTMzMzk5MGEwZTRjMWUwNmMzMjI3
MmE5YjY0NjIwMDBkNjZlMzg4YTZiNGQ5N2M0Y2NiMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDANIUbmyttHKoH6+YH/Je1SqrOHCNcUj67/o7YgCJ0x6bQ
57pfKnys3MdwzC5wQbDv1HcU2WOPOk0ev4+VYFzq5fZeNy5tnFg5GPak5i9TVo/k
tnm8O02y0PMhvYEJN914oX6W/2BoniqBAxEzOpY84hyrUqsK0sEDsATUbbKMEPkd
YYrimUNbW035aETZs4+/rb8SQddGEeh81cwjZwMcqh4F3hZPHGk7o2bk/3QGV3PM
CO5VcXcniMkGZtvHkxE/Lgq8Jyu937PZAymDn40tnXM1i2zJpvxZx7EdMEots1/w
JXBSrcEzRpDnluBmFjR/9T+ArXpnnsDwjRkV//GHAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUdzRLlocJOSHudKy8QFuG4GFidsMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzc5NDgzZjFmLTM1YzUtNGVlMi05ZGI4LWM5OGZhYzA1NWUwMy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAmAB9opDANBgkqhkiG9w0BAQsFAAOCAQEAbNmLb2rRi7cp66mqVIGyL2YI
7Ffm31lVmBzjSQEo8/cyJI6Hnlb6yjVnLaurQ6blQIjV+qqTfPVwVOmJ11W/ABLb
RGc0FiMMgUzjedrL0cLVT8wdq+/vEvUZCD8gK+28Ce9ZRMfjhA3B7DiaE71T1JoZ
yY8U1ls51YtUa5QYKRCDJzbda8IAVX8w7dwPGWXh29YEq2tNbJi//JYYJ60SnTdl
l/M5u6Vtr932cudFCUBEQrs3tVAGwGDFbvqfzYFYieVlW2+w31WQVUBUmGkgnlQH
OCQKPxIDTiIXITtiAqezauUaynGrqfmGpJEiATENmXK34y9K1g5S/p9ts5Q6uQ==
-----END CERTIFICATE-----
Generated at Fri Feb 27 15:14:30 2026 by rpki-client