Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9b5c9a22-1899-402f-bd9a-ace762a1037b.roa
File:                     9b5c9a22-1899-402f-bd9a-ace762a1037b.roa (raw, json)
Hash identifier:          Mia6hhQDi+G2WLMnVXqkIJW3o8xFexkyinL1ZsMxCXA=
Subject key identifier:   21:D8:73:72:54:DB:A8:AA:7F:77:C4:8B:23:47:77:CC:D5:81:F7:21
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3C81B0D9C0466012D8CF49B69425040F76264481
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9b5c9a22-1899-402f-bd9a-ace762a1037b.roa
Signing time:             Tue 06 Oct 2026 00:31:43 +0000
ROA not before:           Tue 06 Oct 2026 00:31:43 +0000
ROA not after:            Mon 04 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff8:6000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 01 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:81:b0:d9:c0:46:60:12:d8:cf:49:b6:94:25:04:0f:76:26:44:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  6 00:31:43 2026 GMT
            Not After : Jan  4 23:59:59 2027 GMT
        Subject: serialNumber=ed094976413802234d63a535f6a691534167e782db93143d23e8c285e28a3290, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c2:3d:73:17:85:c9:59:da:2d:0a:80:b9:14:
                    1e:26:c9:f5:e1:76:dc:74:ee:9f:2b:2b:c8:cc:c5:
                    70:60:ff:13:74:91:3c:13:54:25:b1:40:e4:ca:9d:
                    ab:ef:a6:b1:95:b3:6c:24:54:b2:5d:67:df:b4:1e:
                    a0:47:3e:c3:80:91:fb:f3:70:31:08:b2:0d:3f:67:
                    1b:ca:8b:10:99:fb:f1:cd:c9:32:99:9f:cd:a0:88:
                    51:53:7a:87:62:0d:94:0f:6f:5c:8f:dd:78:b8:b2:
                    41:64:8c:86:e2:46:28:15:d3:9d:d1:32:13:62:08:
                    8e:c7:4a:27:a1:a9:81:5e:88:4a:47:3a:eb:81:51:
                    c8:50:3c:49:ab:8f:74:93:16:92:5b:f4:3f:ab:13:
                    9e:82:98:fe:60:69:47:0e:23:4e:89:f1:b2:fb:a4:
                    6d:c6:f5:87:84:9b:0b:25:29:96:70:98:eb:46:cd:
                    bc:02:cf:aa:e8:06:3e:82:bf:8f:ae:10:33:30:0d:
                    7f:26:81:5a:b7:17:27:c2:d8:c4:13:30:ba:11:e7:
                    a8:4a:35:84:34:1c:75:66:33:2e:ae:46:00:79:c5:
                    c0:6a:2f:c3:40:c3:5a:0a:38:cd:db:8e:c8:e7:7c:
                    85:97:99:e3:ee:17:68:53:c6:0c:6a:2c:9f:61:9d:
                    81:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:D8:73:72:54:DB:A8:AA:7F:77:C4:8B:23:47:77:CC:D5:81:F7:21
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9b5c9a22-1899-402f-bd9a-ace762a1037b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff8:6000::/40

    Signature Algorithm: sha256WithRSAEncryption
         6c:1b:bb:5a:5e:ae:21:69:43:03:40:e5:04:c8:cf:28:ff:03:
         32:1a:27:c7:04:c3:27:32:7f:ec:3d:71:b8:13:8a:99:5f:0e:
         b1:2f:6e:bc:56:0a:13:7e:99:b8:51:59:2d:f1:c4:cc:05:07:
         50:00:63:b5:d3:74:0c:16:04:a3:f6:23:7e:1f:ec:ef:ed:0f:
         f2:09:0c:da:0e:38:c1:2e:a7:b6:42:b3:b2:8b:76:61:81:6b:
         e2:78:a2:1f:49:a3:14:fa:3f:3e:49:7c:03:c1:80:af:a0:41:
         93:0c:d3:03:1d:d4:e4:b4:81:62:05:ca:d0:1f:6a:01:b0:28:
         81:54:ed:3d:a3:eb:ef:24:a2:40:ae:15:4b:c9:bf:5f:5a:aa:
         6f:97:5b:93:42:5d:0e:cf:af:b3:44:00:c1:06:13:fb:8c:3e:
         dc:b9:b2:bc:a2:7d:69:ac:4f:f4:7d:82:3b:6c:e5:67:ef:fe:
         c5:85:42:a9:80:be:d7:db:25:5b:ac:52:d4:ce:4d:ba:7c:f3:
         5a:1f:78:2a:bc:95:02:80:30:d7:30:bb:3c:99:09:e7:8a:fa:
         0f:0f:c4:20:9e:75:b4:c7:ab:54:a5:f8:cb:6e:63:7a:dc:2b:
         a4:7d:ea:92:73:de:5a:52:0a:36:91:bb:b3:41:bc:37:d0:52:
         d9:35:d6:5d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Oct 31 05:22:19 2026 by rpki-client