Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/939318d0-97d2-4b27-ba23-677a8a85bc63.roa
File:                     939318d0-97d2-4b27-ba23-677a8a85bc63.roa (raw, json)
Hash identifier:          lz5/oleDmtakG1/dA26AjnUUkLEx2Ej3FSdFYLPxBdY=
Subject key identifier:   2E:1C:A0:69:A9:37:B3:7D:47:7F:2A:30:F1:FE:6F:5C:EB:42:D1:56
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1FF77EA5B27E0FA0F08648CFBD84228196C02AFA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/939318d0-97d2-4b27-ba23-677a8a85bc63.roa
Signing time:             Mon 10 Aug 2026 00:50:43 +0000
ROA not before:           Mon 10 Aug 2026 00:50:43 +0000
ROA not after:            Sun 08 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff3:8c0::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 19 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:f7:7e:a5:b2:7e:0f:a0:f0:86:48:cf:bd:84:22:81:96:c0:2a:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug 10 00:50:43 2026 GMT
            Not After : Nov  8 23:59:59 2026 GMT
        Subject: serialNumber=bf1adce86ac1fd2952f8d258ab78cb044bec8791145f4ecf662683df1484994d, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:44:ed:4e:67:81:fa:a2:42:06:53:2b:c8:4e:
                    bd:22:33:b4:c3:c2:60:06:a5:c4:7f:31:95:26:c8:
                    67:43:c8:26:a9:50:ae:07:85:a9:2b:ab:1a:4c:c4:
                    ec:83:02:6e:fe:9b:2d:53:a7:d5:2f:9b:b0:a6:cc:
                    36:17:27:7f:65:50:99:89:ae:1d:59:cc:f7:0c:1e:
                    a7:55:52:0d:ed:84:1a:8c:09:a9:63:81:78:2c:57:
                    3b:22:7f:ae:dd:6b:a3:d2:1c:83:11:7e:ea:e2:55:
                    b5:6f:1f:d1:01:d5:a7:e7:cb:71:ed:fd:07:31:fc:
                    6c:80:e6:aa:90:56:4d:c5:bb:59:9c:2d:d0:57:f6:
                    7b:b5:38:d5:b2:75:47:e6:9a:a9:af:b1:59:0c:6e:
                    e2:e7:8d:57:19:02:32:53:a8:d5:8c:50:2f:c2:90:
                    ff:09:1b:90:5c:ca:e6:b1:e0:46:ac:e8:61:e5:03:
                    c1:a4:dc:91:ef:4b:9e:4c:b4:82:3b:89:f3:2e:40:
                    84:d1:21:c9:fa:40:61:8c:9d:d0:b6:c9:9e:e7:77:
                    89:c8:80:60:c0:de:ea:89:30:5c:2e:23:d9:49:1d:
                    e2:af:93:1b:a0:46:8e:2b:70:8e:4b:e0:f0:87:b6:
                    06:1d:0d:81:48:7b:8f:8b:72:1b:43:56:cc:74:43:
                    ac:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:1C:A0:69:A9:37:B3:7D:47:7F:2A:30:F1:FE:6F:5C:EB:42:D1:56
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/939318d0-97d2-4b27-ba23-677a8a85bc63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff3:8c0::/46

    Signature Algorithm: sha256WithRSAEncryption
         88:59:f9:46:4c:7c:a0:58:eb:91:f5:03:d6:72:d8:9c:0e:35:
         01:ba:81:4f:95:c9:4c:d6:ee:01:14:c2:bd:b6:db:cd:35:26:
         2f:e6:15:75:7c:c6:fb:dd:7e:33:56:74:31:6d:61:06:06:b8:
         32:e8:9c:8e:6a:1a:8c:9a:30:34:30:8c:f5:e5:b9:7c:a5:fd:
         39:17:83:7f:fa:14:cf:7c:49:6a:51:a4:54:a2:7b:f8:3a:c6:
         b3:7a:a3:53:60:cf:ee:44:c4:1d:29:8c:dd:d5:27:bf:85:7a:
         65:78:b5:39:64:90:22:86:a5:b5:57:6f:97:04:f4:54:7d:36:
         d2:78:3f:2c:1c:38:da:ed:21:2f:16:0f:42:74:ad:26:e1:04:
         2b:dd:53:3e:93:f7:77:76:d8:96:be:47:8a:07:4f:41:a0:76:
         42:3c:fd:69:05:96:21:74:77:8b:ec:be:5d:32:0c:bf:12:47:
         76:7d:ab:68:06:27:62:3d:d6:20:53:e7:8a:1d:d9:6e:32:8d:
         d1:3a:23:b8:91:37:b3:13:46:67:e3:0b:e5:f0:7a:1b:32:ec:
         82:86:64:3a:a7:3e:34:72:30:db:7a:2a:bb:d3:f2:4c:d4:8c:
         e2:dc:fc:b2:df:12:22:55:48:f4:8e:cc:6a:3d:e0:65:b3:2c:
         1d:69:58:23
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Sep 17 16:19:49 2026 by rpki-client