Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7e80f549-ad98-4f9b-83c7-35b9f976adbe.roa
File:                     7e80f549-ad98-4f9b-83c7-35b9f976adbe.roa (raw, json)
Hash identifier:          ptlZS7XgVX2ndghvLnFQXmzmLoxM6W+kwLXJIhWUFGM=
Subject key identifier:   35:5F:45:C4:FC:88:BD:1C:B9:8C:98:A2:2B:8F:05:18:45:AC:AF:6D
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       064F2643DEF963D68F419432DCCA9A337C9FCE1B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7e80f549-ad98-4f9b-83c7-35b9f976adbe.roa
Signing time:             Fri 09 Oct 2026 01:10:13 +0000
ROA not before:           Fri 09 Oct 2026 01:10:13 +0000
ROA not after:            Thu 07 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fea:a4c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Nov 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:4f:26:43:de:f9:63:d6:8f:41:94:32:dc:ca:9a:33:7c:9f:ce:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  9 01:10:13 2026 GMT
            Not After : Jan  7 23:59:59 2027 GMT
        Subject: serialNumber=98574a8e366369abbe53c698b562d8477ad524c344708ff6a61a176428a58194, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:fd:cf:cd:7c:e3:ee:f1:58:fc:f8:2e:26:d0:
                    aa:66:2d:df:60:7a:5a:a9:c4:46:99:69:d6:91:df:
                    45:f3:8d:77:91:70:79:b9:97:f6:ba:37:fd:3f:7a:
                    85:59:58:60:a7:15:b6:10:30:d4:e5:10:7b:83:c5:
                    bb:60:5f:1b:78:37:5c:eb:8c:fb:b2:f7:ec:d0:82:
                    44:55:81:5b:4b:01:6c:84:13:67:c2:30:21:28:75:
                    92:28:15:2d:7c:63:74:ed:4d:b6:56:96:96:fc:22:
                    db:84:eb:6d:96:ac:81:cd:ef:cc:e4:c7:1d:00:1c:
                    a5:57:80:47:33:c9:97:b4:d6:9f:56:95:23:90:c2:
                    41:bc:fb:ea:52:79:ce:e5:a9:54:33:00:8f:95:f5:
                    ce:65:32:5d:b6:ed:b5:3f:9e:60:6b:13:c7:78:62:
                    a0:c0:56:b6:e3:8c:06:cc:2f:9e:9e:68:42:3f:c5:
                    b5:3e:28:d9:13:11:4f:67:34:fb:19:bf:5b:5f:fa:
                    64:20:ff:38:7a:c0:6e:03:a7:3e:ea:d7:77:36:ac:
                    0d:25:2c:65:dc:4c:d9:1a:f5:21:5c:5e:24:57:2c:
                    bd:c8:7b:2a:54:7c:83:f0:e3:59:d8:a7:a5:95:f8:
                    0e:a4:d4:df:40:e8:9c:63:6c:79:77:bc:22:6e:00:
                    f8:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:5F:45:C4:FC:88:BD:1C:B9:8C:98:A2:2B:8F:05:18:45:AC:AF:6D
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7e80f549-ad98-4f9b-83c7-35b9f976adbe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fea:a4c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         c9:af:bd:40:72:cb:f7:d2:45:e9:3b:9f:90:19:6a:52:f1:2e:
         5a:cc:e2:d1:2a:fb:19:05:76:4d:da:4f:68:a9:59:c1:59:48:
         a6:46:6c:55:f3:2b:74:28:73:78:18:a6:bd:25:82:94:f7:37:
         4c:14:aa:82:8c:50:48:f7:e9:11:a1:46:34:54:2c:6c:e4:23:
         19:a9:ac:0c:10:34:18:4a:f0:77:e6:f8:c0:eb:e1:89:8f:66:
         1a:2c:57:65:b9:6f:ed:db:68:26:59:c4:ad:af:87:f5:f0:e0:
         fa:9a:7b:1d:33:0f:97:e8:dd:2d:f5:f0:23:5b:ca:77:96:51:
         04:e9:c7:16:da:93:bc:25:d3:46:94:17:c7:28:49:79:82:01:
         0f:8e:52:8b:8a:f3:d3:ca:52:42:5d:9c:a5:44:61:34:0d:47:
         30:a6:71:a1:d7:e2:75:57:8f:da:c5:86:aa:82:74:fa:76:6c:
         71:65:96:2f:f3:67:39:55:09:36:42:71:b3:6d:b7:dc:71:a4:
         77:18:46:a0:f7:c1:91:79:99:53:38:02:02:23:ee:5a:65:e1:
         c5:9d:60:3e:c9:6e:96:ce:9d:18:d0:c1:bd:a1:50:a4:3d:0b:
         3f:98:49:7d:83:13:6a:85:8d:5e:c3:19:d3:d6:3c:cb:6f:4b:
         97:00:b8:6d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Nov 3 08:05:55 2026 by rpki-client