Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/90bfc555-8d9a-45c8-8fa6-ac9cb9046bb5.roa
File:                     90bfc555-8d9a-45c8-8fa6-ac9cb9046bb5.roa (raw, json)
Hash identifier:          0HVHex3vPo6+G87x7A3dYwlOblLbp5hOjrbQUOd6goA=
Subject key identifier:   CB:19:F3:0F:51:9B:A8:B4:A4:85:45:66:5A:E3:62:85:6C:C1:68:77
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0866F841FF6EBE2611090CD05ED99BEA370B036E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/90bfc555-8d9a-45c8-8fa6-ac9cb9046bb5.roa
Signing time:             Tue 06 Oct 2026 00:20:59 +0000
ROA not before:           Tue 06 Oct 2026 00:20:59 +0000
ROA not after:            Mon 04 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff9:5000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Nov 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:66:f8:41:ff:6e:be:26:11:09:0c:d0:5e:d9:9b:ea:37:0b:03:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  6 00:20:59 2026 GMT
            Not After : Jan  4 23:59:59 2027 GMT
        Subject: serialNumber=9e0939a79c042f8c599de3a1d5ac1e085c35bf3d552d77ce5dd313c0005b5709, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:6e:73:d9:0e:01:83:da:97:57:35:e9:19:9d:
                    b2:55:d7:06:00:76:1a:4c:8a:9d:51:28:2b:70:de:
                    54:0b:a7:11:67:b2:a9:49:24:d9:84:05:25:54:bd:
                    16:7a:90:f6:bd:ee:18:7b:f0:09:0e:7b:57:8e:54:
                    e7:25:dc:c1:e0:ad:89:d7:2f:77:b2:9c:89:aa:58:
                    f1:35:4a:a1:ec:19:64:50:33:79:66:90:4f:96:b9:
                    1d:9d:8b:d0:77:89:33:96:cd:6f:e8:3b:d0:0c:77:
                    23:9e:c0:9a:29:e7:78:09:82:02:d2:5d:13:81:47:
                    86:9e:58:26:37:ae:29:17:ff:34:4f:3f:e8:94:97:
                    51:c9:c1:56:d4:4e:ef:ff:38:49:7b:c0:d7:32:e1:
                    76:21:ac:61:90:c7:04:95:ac:c3:c5:7d:bf:68:2a:
                    c0:20:44:49:49:cc:e6:ec:4f:08:6e:f9:e7:36:37:
                    cd:e8:77:4b:fb:a9:e9:5c:90:7f:4d:45:b8:1e:43:
                    08:4a:50:05:10:aa:bd:1a:f8:1d:09:58:fa:46:c9:
                    51:81:4f:89:54:7e:9b:b9:03:5f:da:80:b3:35:86:
                    87:b2:60:41:4a:ab:d8:40:3e:1c:12:b2:42:3c:61:
                    71:ff:a7:b6:02:6e:0c:9a:c0:ae:43:27:41:45:29:
                    17:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:19:F3:0F:51:9B:A8:B4:A4:85:45:66:5A:E3:62:85:6C:C1:68:77
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/90bfc555-8d9a-45c8-8fa6-ac9cb9046bb5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff9:5000::/40

    Signature Algorithm: sha256WithRSAEncryption
         03:56:df:77:1e:70:cb:dc:de:d4:fa:52:f5:f3:53:e6:84:aa:
         6d:0f:98:dd:1f:57:05:ae:99:6c:a3:61:02:1b:97:ee:59:31:
         be:d3:c3:ac:81:4a:8b:4a:01:46:1e:1b:97:0a:a4:2f:58:29:
         57:16:e8:5d:36:ff:72:4f:22:7a:f0:38:92:86:89:2b:4b:74:
         da:51:d1:da:b5:5f:dc:4b:33:1c:16:e2:48:23:8b:3a:f0:5d:
         7c:22:46:ec:49:08:5c:6b:f6:d3:c2:7d:ce:78:18:b2:4b:47:
         ef:6e:41:48:23:e1:11:71:fe:b8:c5:26:af:37:bd:75:8e:21:
         c3:38:e6:c8:1b:9c:78:ff:af:13:a1:5e:70:e4:d0:93:11:ae:
         c1:0a:ac:1e:17:c0:fd:e4:7d:2b:1f:ba:3a:b8:bf:58:cb:b1:
         5e:01:5b:f7:6d:4c:ef:7a:15:4f:9d:2f:47:25:55:87:42:c7:
         54:13:1a:ec:6f:96:80:34:ba:26:83:66:7d:72:cd:68:43:11:
         7f:b7:2e:b1:39:22:c6:ef:b9:e3:34:cc:53:32:33:d0:39:c5:
         44:b8:2e:50:09:73:33:ab:a0:e1:aa:39:5a:95:6d:c7:1b:c4:
         48:bc:77:c6:a2:cd:41:6c:d2:ac:93:6f:be:d5:5f:d0:8d:0c:
         ff:48:81:89
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Oct 31 22:48:58 2026 by rpki-client