Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/915d547e-1517-42a8-8583-a6390844002e.roa
File:                     915d547e-1517-42a8-8583-a6390844002e.roa (raw, json)
Hash identifier:          k8V1EFIoqPHdWgBIkjIEA1HFVnVkWAZMYvgXJ2naI9s=
Subject key identifier:   E6:17:56:41:83:E6:25:5D:14:C5:B2:AD:33:82:09:AF:FD:43:E7:E1
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4E1D1FA6D6A4CB0A3D2D9527273939F949FA73E9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/915d547e-1517-42a8-8583-a6390844002e.roa
Signing time:             Thu 12 Mar 2026 16:09:46 +0000
ROA not before:           Thu 12 Mar 2026 16:09:46 +0000
ROA not after:            Wed 10 Jun 2026 23:59:59 +0000
asID:                     8987
IP address blocks:        2600:1fe9:5040::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:1d:1f:a6:d6:a4:cb:0a:3d:2d:95:27:27:39:39:f9:49:fa:73:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Mar 12 16:09:46 2026 GMT
            Not After : Jun 10 23:59:59 2026 GMT
        Subject: serialNumber=28276a9e51ef9fbe06f776471b9976717409f72f5b817e5e830264eee5835cf4, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f8:ac:74:d5:2c:80:a0:3a:e5:71:61:90:d6:
                    52:20:ce:ed:f7:53:dc:55:c1:af:89:34:c6:e1:22:
                    2d:7b:4a:07:90:0f:0b:88:05:ba:f5:7a:68:6f:a3:
                    3a:da:df:32:b3:9a:07:22:0a:38:17:6b:b7:5b:36:
                    f9:28:7e:5a:eb:0f:b1:51:b4:7a:ed:21:6a:12:2d:
                    29:6a:75:6f:1b:80:e2:e4:f0:58:e3:d4:79:36:22:
                    7c:c3:05:60:0c:e3:f4:e7:9b:7f:c2:52:3f:6a:b4:
                    a7:8d:6d:94:b5:c8:4b:26:b4:0c:77:34:74:b3:70:
                    d5:8a:49:5c:62:b7:22:57:53:6e:ce:fb:72:0d:1a:
                    ab:ad:ad:44:8f:ad:41:a7:01:84:87:5e:58:a4:e0:
                    d9:97:91:37:84:c6:03:fa:fe:02:bd:8d:7e:19:a0:
                    6e:55:a9:e2:ba:b9:6f:dc:d4:71:c8:a2:76:b1:eb:
                    0f:6a:6b:4d:35:82:72:3c:17:75:80:23:48:8e:42:
                    02:ea:07:52:71:0c:8e:28:35:63:35:cc:6b:06:d7:
                    58:7f:19:e1:f1:9f:ef:c8:ea:7f:96:c6:bc:5e:c8:
                    c6:e6:1d:37:4f:ac:95:85:4b:e7:2f:a2:89:d6:9d:
                    32:b9:1d:8e:01:89:82:4f:dd:c9:cc:fc:f0:42:8c:
                    68:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:17:56:41:83:E6:25:5D:14:C5:B2:AD:33:82:09:AF:FD:43:E7:E1
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/915d547e-1517-42a8-8583-a6390844002e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fe9:5040::/48

    Signature Algorithm: sha256WithRSAEncryption
         62:64:64:e6:cc:e3:fa:78:04:13:f9:f4:8d:3a:23:2d:fd:37:
         a9:c6:c8:af:0f:0c:c5:2a:19:43:f6:7c:a3:70:bd:52:e5:db:
         ff:e9:e3:20:3f:91:21:b5:97:83:de:65:2f:fe:18:53:b4:0e:
         64:f4:e4:f6:d4:f0:0e:04:1b:38:5c:44:aa:43:66:60:0b:c8:
         37:56:ee:0e:9b:94:cc:67:d4:bc:ec:31:ae:e1:62:9c:8a:95:
         7e:93:fa:d8:cb:ae:bb:97:9d:87:81:82:9e:8d:39:5e:ed:56:
         4c:16:18:1a:6d:4f:18:f5:42:1d:4a:c4:68:f0:f2:e8:7d:02:
         2a:3f:01:6a:5b:af:f7:e8:2e:69:37:83:f6:f3:04:a0:c1:30:
         ce:f5:13:64:bc:00:0b:15:8c:ab:b0:05:9e:6f:c6:7a:84:dc:
         67:fb:d3:e9:4c:fe:f7:3b:e8:99:ae:9c:3a:c3:ef:3f:2f:b3:
         2a:14:35:6a:5c:e5:ab:4f:07:5c:5a:17:f7:22:c7:1a:d7:16:
         93:b5:66:43:2d:6b:f8:05:3a:7d:02:99:07:98:20:e3:be:4d:
         4b:fa:b5:40:f3:32:c2:13:d4:cc:24:4b:e2:e7:8c:91:6d:1a:
         df:39:8b:a4:7f:e9:d2:e6:88:63:9e:a1:cc:16:3a:f0:20:28:
         6e:39:8c:99
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Mar 20 17:04:03 2026 by rpki-client