Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7ab2a0a7-60f3-4a9f-9098-2b33486a7a43.roa
File:                     7ab2a0a7-60f3-4a9f-9098-2b33486a7a43.roa (raw, json)
Hash identifier:          hg6w+UAm7Pr1OuLsHWwrpMy4qhYpfOnkfquBjwPlGsk=
Subject key identifier:   52:C8:78:77:A2:6C:7A:CD:48:71:61:94:1D:CF:6F:D2:BC:D9:AE:5C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       713467357339AEA83971C38D9A38908EE41447C9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7ab2a0a7-60f3-4a9f-9098-2b33486a7a43.roa
Signing time:             Thu 22 Oct 2026 01:11:12 +0000
ROA not before:           Thu 22 Oct 2026 01:11:12 +0000
ROA not after:            Wed 20 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fff:8020::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:34:67:35:73:39:ae:a8:39:71:c3:8d:9a:38:90:8e:e4:14:47:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 22 01:11:12 2026 GMT
            Not After : Jan 20 23:59:59 2027 GMT
        Subject: serialNumber=72f163d82d494c2c966138092d4943ef7f2e018d6d1cbdecc19ea63ee3f3af01, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:54:4c:29:07:fd:17:63:ba:88:06:2b:c0:3b:
                    bc:9e:59:fb:3a:e9:62:fc:00:e5:0b:2f:78:9e:fa:
                    5f:22:40:c6:c9:26:64:2b:1c:8a:93:5c:26:61:d5:
                    12:0e:2d:bf:bb:81:98:bb:8f:f1:e4:d9:cd:4a:8d:
                    42:21:08:a2:a7:f3:e3:a9:29:93:dc:f4:35:d9:e6:
                    69:9e:58:59:a7:83:0b:06:57:9b:a4:47:9c:42:63:
                    ec:cc:7a:ce:93:73:12:c7:b2:01:0c:f6:a1:da:59:
                    6a:6d:35:a2:de:d8:18:7f:94:7c:5e:4c:82:cf:83:
                    07:95:b6:a7:8a:98:14:87:4a:9a:b4:0a:51:f6:2d:
                    a7:79:c1:d8:c8:47:87:0c:42:86:25:9b:1d:7b:9f:
                    da:8d:00:45:25:b1:59:f2:a7:81:f0:a6:81:e8:e6:
                    a6:82:de:8a:15:cd:0c:40:9f:f1:99:67:83:dd:bf:
                    d1:06:56:23:e7:36:32:1d:e2:78:ea:54:bb:2d:e8:
                    3f:19:69:5d:59:a8:d9:78:29:8d:68:e0:e4:e3:95:
                    51:d4:5a:77:db:f8:5d:a8:89:5d:47:d3:6d:b8:f4:
                    c4:60:26:25:ef:f8:18:f1:f9:5a:26:69:99:1b:3f:
                    91:22:05:77:a4:f1:5c:d5:d1:b2:fc:14:94:ad:f8:
                    11:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:C8:78:77:A2:6C:7A:CD:48:71:61:94:1D:CF:6F:D2:BC:D9:AE:5C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7ab2a0a7-60f3-4a9f-9098-2b33486a7a43.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fff:8020::/48

    Signature Algorithm: sha256WithRSAEncryption
         3f:3f:8b:29:9c:d0:6a:7f:6d:97:09:12:42:60:1a:1e:63:72:
         f1:15:6a:13:c5:32:91:e2:bf:45:51:19:c8:a9:48:14:cb:fd:
         28:cd:cc:7d:13:b2:41:11:48:ed:18:49:5b:d1:0b:16:58:cd:
         af:31:30:f6:ff:70:78:70:66:6a:5a:45:41:2c:b1:2f:b9:57:
         93:2f:1d:ed:d2:13:61:08:98:bf:0c:f0:a5:28:5b:1a:0a:e8:
         9d:e1:cd:a3:ac:e9:c4:0d:2a:b7:3a:e7:b9:5e:3c:0b:55:e4:
         56:3b:4e:8b:86:7b:34:4b:ed:a9:7b:35:fb:47:bd:2a:bb:41:
         dc:b4:f4:1c:ba:3d:74:7e:17:fd:18:50:65:93:f0:f1:7e:37:
         a3:cd:0e:47:70:f1:80:9f:ba:12:cf:55:b7:63:f2:d3:c4:a1:
         8a:f9:60:d0:44:fe:91:32:31:6c:45:d1:64:91:17:84:bb:44:
         23:aa:b9:59:90:2d:67:7a:f9:a9:d7:e4:27:40:7c:62:a7:9a:
         e4:13:58:6d:38:69:fe:4f:f6:7b:b4:85:ce:ab:56:89:5a:e1:
         9e:09:39:f4:74:60:92:18:da:e5:bc:c8:5b:49:0a:40:c9:fd:
         c4:4d:3d:a1:fe:82:67:7b:e6:28:4c:18:bd:ab:7d:cc:1e:4c:
         2e:c1:81:dd
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 4 05:42:12 2026 by rpki-client