Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/840c3edc-37da-4000-b1b9-30b0ddf8ed0d.roa
File:                     840c3edc-37da-4000-b1b9-30b0ddf8ed0d.roa (raw, json)
Hash identifier:          MvG0fJhV2H/CJ1ZoL/mzagtov3vtMp1vnd6TuvUcbcc=
Subject key identifier:   D0:71:B7:F7:7F:AF:A0:60:E9:D1:EE:8F:A8:9A:17:3F:5F:17:71:E8
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6EEB8E5EFC680A682631A6F86C19F01261726805
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/840c3edc-37da-4000-b1b9-30b0ddf8ed0d.roa
Signing time:             Tue 04 Aug 2026 02:11:16 +0000
ROA not before:           Tue 04 Aug 2026 02:11:16 +0000
ROA not after:            Mon 02 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f1e:c00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:eb:8e:5e:fc:68:0a:68:26:31:a6:f8:6c:19:f0:12:61:72:68:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  4 02:11:16 2026 GMT
            Not After : Nov  2 23:59:59 2026 GMT
        Subject: serialNumber=569a2a59b10659daf7314d323f47e3f2423a53397f1ad43f28c7d74e4fc5632c, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d1:c3:8b:f8:4b:7d:de:4f:25:61:03:4d:a1:
                    72:0a:77:29:27:5c:32:38:bd:63:79:ea:4b:b1:72:
                    b8:5f:db:23:0b:8b:0f:7c:5a:6c:8e:2f:ce:f0:f4:
                    cd:03:ab:3e:77:47:b3:dd:af:5b:a6:87:2c:b1:77:
                    aa:63:28:8e:e5:1f:59:84:c9:8a:92:c4:8e:72:d0:
                    88:2d:63:34:32:fb:0e:30:d5:97:6c:2f:3c:8c:75:
                    75:0a:85:62:d4:86:6b:57:20:a0:7b:c4:04:0f:51:
                    34:6d:61:e3:19:aa:2f:2c:ab:77:2d:33:37:0e:b1:
                    ff:8f:4b:e4:49:ad:01:8f:ac:91:89:f9:cc:99:18:
                    36:1f:d8:4e:b4:5a:d6:20:37:e4:5d:81:65:7a:32:
                    49:dd:86:15:ae:13:a4:0a:af:c9:3d:0d:85:fa:22:
                    ad:5d:29:d4:e3:8e:36:e1:da:3a:a8:3d:5b:9d:2d:
                    04:a7:51:7a:bc:c1:6d:1c:33:c6:16:be:8f:e0:d0:
                    b6:19:f9:fd:46:7b:04:64:72:bb:68:e0:13:ae:49:
                    76:c6:cd:d4:b3:c3:50:9a:ac:c6:77:76:be:43:2a:
                    00:3d:77:dc:62:f9:fa:82:51:da:4a:3f:b3:85:ca:
                    c0:4b:aa:42:9e:a7:0c:bf:15:d2:ea:fa:ca:79:9a:
                    eb:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:71:B7:F7:7F:AF:A0:60:E9:D1:EE:8F:A8:9A:17:3F:5F:17:71:E8
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/840c3edc-37da-4000-b1b9-30b0ddf8ed0d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f1e:c00::/38

    Signature Algorithm: sha256WithRSAEncryption
         aa:2b:26:11:8b:ef:78:91:81:32:7f:fb:e3:ca:d5:c1:7d:e4:
         55:fc:0c:23:90:c1:5c:1e:b7:d7:11:40:9e:ac:c9:78:a4:1a:
         f6:77:51:e0:31:57:5a:d0:3b:13:12:fb:58:ed:06:ae:50:3c:
         21:6a:36:b5:32:7b:6b:60:8e:be:9f:90:91:8f:ad:ed:2e:84:
         c3:0e:43:af:bb:d6:86:86:36:3a:d8:8c:f9:01:ad:31:1f:2b:
         d0:66:d3:d3:44:cd:88:cc:ed:41:ef:5c:78:4b:1d:6c:23:a0:
         b8:d3:5e:0c:f0:bc:10:e7:20:1d:20:2d:17:5b:1d:ca:6a:14:
         76:07:0c:9d:1c:2d:3e:fd:4e:f0:8b:ef:51:e2:eb:80:21:e0:
         c6:db:e8:d8:15:54:a5:fb:5d:a1:80:6e:6b:5c:bf:53:79:81:
         09:fb:18:cf:65:ae:45:b8:15:40:bc:19:64:f7:9d:22:12:dd:
         c2:47:a3:ff:9c:54:99:b0:c8:22:d7:1a:43:9b:c0:63:c4:46:
         fd:dd:69:f0:5b:79:18:3a:a5:3b:0e:af:1b:79:c6:86:7b:a6:
         9c:88:b1:14:dd:76:75:21:cc:ec:1e:1a:c6:26:47:6d:16:68:
         5c:5e:97:80:58:68:6b:b3:84:88:d7:7b:f5:80:c7:11:c1:35:
         bc:46:6d:22
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Sep 15 13:24:34 2026 by rpki-client