Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/89e6356c-d13c-480e-a973-81f7a991a615.roa
File:                     89e6356c-d13c-480e-a973-81f7a991a615.roa (raw, json)
Hash identifier:          N5FKTaWuSNitcMYZxuj0OxWdMUxwWch2cm0AN+ZRA/E=
Subject key identifier:   03:0C:4F:CB:AD:11:CA:69:15:B5:00:F3:EE:CE:19:69:53:E1:10:1D
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       124BDE855B790B913A3A9CF58E4AA9E69F62DCFB
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/89e6356c-d13c-480e-a973-81f7a991a615.roa
Signing time:             Tue 04 Aug 2026 01:01:28 +0000
ROA not before:           Tue 04 Aug 2026 01:01:28 +0000
ROA not after:            Mon 02 Nov 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1f2f:4000::/37 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 19 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:4b:de:85:5b:79:0b:91:3a:3a:9c:f5:8e:4a:a9:e6:9f:62:dc:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  4 01:01:28 2026 GMT
            Not After : Nov  2 23:59:59 2026 GMT
        Subject: serialNumber=1ef3d0ebc11ec315f63fb14df7abeb566ca597fd0320730ff30926f091409e1e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:23:bd:ff:89:d0:55:20:f3:b8:24:99:2d:e5:
                    2b:8e:36:fd:0f:e5:2e:eb:9a:40:82:d8:d2:00:e4:
                    93:aa:f3:0e:29:1e:a5:05:fe:91:59:bf:d9:c2:a2:
                    23:39:5a:47:f0:2c:89:dd:59:4f:97:0c:d3:1c:5a:
                    03:11:f1:86:b8:0e:94:51:cf:ef:eb:37:2e:3b:31:
                    20:f3:c7:b6:f1:94:57:0f:2f:8a:ff:2b:9d:53:c6:
                    3b:37:b2:fe:6f:3d:ca:dd:59:a4:04:08:d9:dc:ae:
                    6e:af:87:43:19:3e:ce:e1:70:9d:ee:ea:38:3f:5c:
                    22:6b:16:cf:2b:22:9d:55:2d:31:f3:f2:e6:93:47:
                    dd:f6:51:05:0a:0f:74:bd:a0:77:64:e8:67:b5:09:
                    1f:cd:c7:c4:8c:20:14:48:f3:73:14:9a:07:3c:d4:
                    8f:9b:e8:af:a2:be:44:ab:76:48:a8:db:6b:0a:41:
                    1f:ff:d1:34:cc:95:90:35:a3:60:e8:e6:af:34:2d:
                    a6:85:52:5e:95:3b:fa:52:85:ff:55:b1:a7:a2:39:
                    9f:5a:f5:4e:1c:3f:f4:8e:a7:3e:dc:eb:e9:50:62:
                    ee:2a:a8:c1:ff:92:75:7c:78:02:a6:da:8c:0c:a4:
                    24:e6:57:98:9d:03:19:b2:14:82:63:3b:71:f5:f5:
                    67:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:0C:4F:CB:AD:11:CA:69:15:B5:00:F3:EE:CE:19:69:53:E1:10:1D
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/89e6356c-d13c-480e-a973-81f7a991a615.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f2f:4000::/37

    Signature Algorithm: sha256WithRSAEncryption
         d1:b6:c3:f7:eb:57:ec:78:41:23:f3:51:be:fc:c7:03:30:9b:
         ac:2b:bd:07:b8:08:a5:d1:cd:84:95:41:e8:bb:10:b1:f6:82:
         d3:a7:5c:4c:df:ac:ee:47:f0:6a:8d:74:24:65:d7:29:91:c3:
         2a:fe:21:f0:48:3b:86:d1:84:54:5a:cc:f2:be:b5:3f:17:b4:
         f7:d1:68:3a:39:3e:53:ac:55:b7:a2:a3:2e:b3:2d:00:bd:d6:
         fd:e1:96:16:45:19:76:23:e6:a9:24:d9:86:79:cf:f3:cb:b6:
         37:30:3c:8e:68:ed:4f:bb:42:ef:b4:83:97:a3:11:e3:cf:29:
         92:db:b0:1d:e9:2d:8d:6c:d7:02:56:0f:dd:15:28:0a:e0:d1:
         9c:6c:fb:1f:8d:4f:c8:de:96:80:47:64:13:00:6c:b5:46:e4:
         2f:f7:1e:68:37:fa:71:40:06:35:ea:d4:dd:0d:f7:f4:ea:2e:
         0e:2c:c9:26:83:34:ee:29:28:99:1c:74:18:ec:bb:03:26:f3:
         5c:c2:89:a1:04:ad:fc:5b:9f:14:42:f2:2f:55:8c:80:a9:fa:
         42:57:e1:96:dc:69:b0:28:cf:9e:af:31:ad:cf:d8:f1:d1:b2:
         ee:25:71:2c:9a:69:e5:28:3e:0a:ed:14:cc:8b:06:74:90:07:
         8a:9f:d9:fd
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Sep 17 17:13:31 2026 by rpki-client