Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/991e350c-1b09-4392-a15e-8cc8924ef0f5.roa
File:                     991e350c-1b09-4392-a15e-8cc8924ef0f5.roa (raw, json)
Hash identifier:          Bsil+dOSu0ZPLBBIWHvwuzVZkOhblzlMXoPMsQc7lSc=
Subject key identifier:   F8:9C:10:D2:B1:12:A7:F1:0E:95:58:3B:B6:15:2C:5E:F2:37:FF:3B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7489F8FB7E0CD9581058AB88D469D9F174DC4294
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/991e350c-1b09-4392-a15e-8cc8924ef0f5.roa
Signing time:             Mon 03 Aug 2026 01:51:05 +0000
ROA not before:           Mon 03 Aug 2026 01:51:05 +0000
ROA not after:            Sun 01 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fff:8180::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Aug 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:89:f8:fb:7e:0c:d9:58:10:58:ab:88:d4:69:d9:f1:74:dc:42:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  3 01:51:05 2026 GMT
            Not After : Nov  1 23:59:59 2026 GMT
        Subject: serialNumber=e0a57ef6ee0a607aa29e52e62b3c586bccc3a5b98efeb81df5a2624163452abe, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:8a:69:59:35:24:a8:fe:74:ff:0e:76:c2:69:
                    4b:f6:a0:c5:23:17:93:8a:30:6f:e9:cf:9d:42:d3:
                    75:d0:78:6d:cf:e9:44:17:56:e3:0c:fe:34:0c:3e:
                    a3:b2:eb:50:d3:e9:16:93:36:11:22:e0:b0:b4:4f:
                    c8:45:44:80:fc:83:fd:61:6d:a6:04:05:f0:4e:23:
                    d4:d1:d8:83:aa:fd:f3:52:49:06:f6:60:37:eb:2e:
                    00:2c:3c:c8:65:77:b1:ab:ab:11:53:bd:21:0e:4a:
                    98:07:97:30:f7:28:1f:6e:3c:a6:7a:fc:77:ab:12:
                    20:31:40:9f:8b:c2:5e:fb:48:35:7b:1b:0a:b4:4d:
                    fc:c2:e2:98:46:88:1b:94:fa:e0:9f:00:a6:f8:ee:
                    57:45:af:a0:d2:1e:1f:72:49:08:df:0d:3b:52:f3:
                    35:67:17:7c:f9:3f:69:9c:00:0e:cb:8e:78:41:c9:
                    5d:59:c3:60:c0:61:14:8b:de:62:7e:a6:ce:af:b2:
                    a0:6a:e5:84:4f:41:06:50:c9:7e:5b:c1:78:6d:6d:
                    e1:38:43:e7:30:2e:9e:44:0f:6f:6b:ad:ed:c8:f4:
                    fa:89:19:d6:dc:ab:71:b6:41:fe:78:05:1b:12:c1:
                    c1:48:f2:8d:51:28:f0:ed:24:bf:4c:ed:ae:21:82:
                    33:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:9C:10:D2:B1:12:A7:F1:0E:95:58:3B:B6:15:2C:5E:F2:37:FF:3B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/991e350c-1b09-4392-a15e-8cc8924ef0f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fff:8180::/48

    Signature Algorithm: sha256WithRSAEncryption
         7d:7d:da:53:61:f8:7e:82:31:4c:59:ac:bd:82:ec:3d:bf:7b:
         c7:f5:3e:2b:2e:e4:ad:f5:84:8b:98:b3:77:c5:23:b1:af:70:
         ce:56:e9:9e:38:88:11:4f:57:80:96:3d:8d:37:fa:a8:df:05:
         52:1c:87:48:19:cb:e1:8e:40:1c:f1:f1:b1:08:d3:e1:90:f2:
         64:64:11:b3:3b:01:e2:c5:dd:7b:e7:64:b8:10:1d:f1:86:a3:
         07:0d:fd:be:cd:6e:43:ca:3d:5c:1f:37:d6:0a:66:ea:5d:19:
         8f:30:f7:09:a1:07:40:c3:21:42:ba:6e:a2:2c:01:15:63:a6:
         39:65:18:39:a0:38:0e:70:16:c2:c2:8a:4c:eb:aa:f7:ae:f2:
         10:ba:f3:96:01:0f:73:9f:72:c1:15:6a:8c:16:c1:a5:de:a2:
         ab:62:c6:fe:3b:e3:ba:19:27:ab:ec:67:95:d9:c1:55:a2:f3:
         28:c4:a5:df:35:c5:fc:bd:c4:b8:bc:94:b4:36:4f:3e:a3:0d:
         31:e6:c3:fb:59:20:a0:d2:02:2c:79:20:a2:2e:55:94:30:86:
         04:33:5d:c2:d9:39:93:be:2d:33:a7:ab:76:fa:59:29:13:04:
         96:05:0b:d1:e9:a9:8d:d8:99:6d:43:c5:52:59:7b:b2:49:e3:
         de:89:7d:1c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Aug 3 05:43:31 2026 by rpki-client