Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/83d7516f-1510-4761-918c-750b42e47b27.roa
File:                     83d7516f-1510-4761-918c-750b42e47b27.roa (raw, json)
Hash identifier:          G7Du4DDu34XiXL2tEooyNNJo5FgCLSYEu0udD+2RydY=
Subject key identifier:   B7:D0:17:A7:BA:95:2D:EE:56:CC:33:1A:63:0D:82:BB:B4:76:1D:62
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       51FF5152D636505F993BD9548BE65A55516A2850
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/83d7516f-1510-4761-918c-750b42e47b27.roa
Signing time:             Fri 09 Oct 2026 01:08:01 +0000
ROA not before:           Fri 09 Oct 2026 01:08:01 +0000
ROA not after:            Thu 07 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff3:1020::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Nov 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:ff:51:52:d6:36:50:5f:99:3b:d9:54:8b:e6:5a:55:51:6a:28:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  9 01:08:01 2026 GMT
            Not After : Jan  7 23:59:59 2027 GMT
        Subject: serialNumber=90fd792ef5af1e5899978618e66b5c61131c6dd17702d478dfa9a36a942ac05a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ef:cf:d4:e6:9c:81:af:e9:bf:a5:2b:48:7c:
                    ef:b9:31:11:32:a9:3c:68:96:82:09:c6:9d:de:b0:
                    be:35:4f:17:a6:17:43:fa:0e:b4:d0:de:51:c1:54:
                    ac:47:6e:df:cc:6f:46:bf:ad:40:de:b5:dc:f0:f9:
                    ce:ec:29:27:61:72:16:67:fa:3c:68:8e:1b:48:8c:
                    58:9e:50:1d:fe:1d:a9:dc:84:6d:e9:96:5c:c6:68:
                    33:03:26:d2:c4:47:79:21:f1:86:08:e4:0f:8a:8f:
                    70:4b:78:32:91:c6:eb:8e:b1:50:81:8a:61:92:f2:
                    ec:ba:81:c6:d1:ef:1f:c4:21:f4:fa:a3:14:a1:b7:
                    16:f2:a1:94:ce:54:52:2c:ed:a9:5c:12:ce:69:56:
                    b0:09:02:1b:e9:f5:67:4d:6e:e9:bb:51:96:aa:7d:
                    48:30:81:bb:82:0d:96:24:e0:98:a7:fd:4b:46:7b:
                    32:8f:96:6e:08:3f:4a:d4:16:56:5b:27:8f:58:16:
                    0b:31:36:b5:2c:37:56:2f:0c:86:6a:bf:2f:43:5e:
                    e2:86:79:4f:65:52:14:ea:7c:7f:8d:df:e0:29:3e:
                    d9:80:e7:6a:b5:7c:14:ed:6c:f1:23:2b:53:9a:5a:
                    79:12:4a:53:f7:e7:39:97:5a:e1:e5:99:8b:27:08:
                    89:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:D0:17:A7:BA:95:2D:EE:56:CC:33:1A:63:0D:82:BB:B4:76:1D:62
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/83d7516f-1510-4761-918c-750b42e47b27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff3:1020::/46

    Signature Algorithm: sha256WithRSAEncryption
         3d:81:af:07:6d:d4:03:11:60:1b:70:cd:b9:02:11:0a:43:cd:
         d5:e5:7c:a6:f5:9d:15:30:07:f0:25:c6:ba:8f:5b:84:f8:4a:
         51:f0:e9:40:9e:ea:9c:be:17:bc:dd:91:ec:27:47:11:7d:8f:
         e4:f1:84:ad:56:c4:c6:51:97:5b:59:77:8e:4a:7f:92:9c:f1:
         db:3f:cd:81:0e:17:c7:c2:27:a0:08:d3:cf:7c:37:37:f6:c8:
         1e:de:57:f9:64:36:f1:01:51:55:44:55:46:8e:5c:bb:8f:6b:
         9b:a1:90:53:bc:86:3a:a7:ae:75:c3:6f:05:2c:1b:71:55:af:
         1d:d4:a3:86:08:0c:fc:3d:64:4f:3b:c0:11:8f:0b:53:e6:c4:
         5e:ef:c3:86:23:a4:f5:eb:6c:72:1c:a5:ca:8b:8e:90:2f:4f:
         85:5b:a9:3d:94:41:1b:8e:0c:f7:97:16:61:5e:1b:ac:71:a4:
         7e:4b:15:b5:c3:a1:ff:0c:68:a3:65:25:22:12:3c:08:1e:b0:
         b1:ff:8a:0b:a7:9d:27:88:45:74:7f:81:81:c9:1e:78:47:5f:
         9c:e7:e8:6d:c9:7f:6f:c4:95:9d:42:76:18:b3:bc:33:63:d5:
         6c:7a:a0:f9:df:7d:83:b7:03:1e:f9:bf:50:01:c0:5b:90:16:
         2a:9c:22:b5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 4 01:13:46 2026 by rpki-client