Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9bca30d4-8ea5-4d58-8cca-f2ed9a0754b6.roa
File:                     9bca30d4-8ea5-4d58-8cca-f2ed9a0754b6.roa (raw, json)
Hash identifier:          gTXtXIHYaXluFlkHGizp+fIJ7jenJf+3wNpnppHUFUk=
Subject key identifier:   F5:57:86:3E:C2:C5:9D:A2:33:F0:F1:F7:88:C1:89:E7:E7:E9:6D:3E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       13D104917FF026C6540BDFBBB75951984B5690A7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9bca30d4-8ea5-4d58-8cca-f2ed9a0754b6.roa
Signing time:             Tue 04 Aug 2026 00:31:39 +0000
ROA not before:           Tue 04 Aug 2026 00:31:39 +0000
ROA not after:            Mon 02 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fb9:4000::/39 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 19 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:d1:04:91:7f:f0:26:c6:54:0b:df:bb:b7:59:51:98:4b:56:90:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  4 00:31:39 2026 GMT
            Not After : Nov  2 23:59:59 2026 GMT
        Subject: serialNumber=a0eb6a0fd8e81cd5db895b313a5e562c5da88528dd4557d35ed6699096289445, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:00:94:1b:7b:0d:cd:e9:bb:2e:11:8e:59:fa:
                    6b:5c:d1:da:78:54:99:8d:c5:50:c5:2d:10:d2:69:
                    da:0c:c3:5c:de:60:91:f2:78:27:bd:da:62:6a:1b:
                    7f:66:b2:bb:74:f1:1b:39:32:7a:fe:77:8a:a4:81:
                    b2:a0:2d:de:7f:c0:ae:53:60:66:02:bd:58:cf:ce:
                    57:6d:12:18:b4:e2:b7:6e:1e:e2:ae:2c:6e:9f:ff:
                    63:c2:87:0f:09:6f:8c:03:c4:bb:9c:42:e3:d2:59:
                    5f:b3:98:23:e4:e5:08:34:4b:61:6f:41:f8:74:fd:
                    e3:9f:f5:cd:9b:36:90:96:8d:88:07:a1:6e:42:de:
                    dd:e5:4b:47:c6:32:92:52:f3:1c:db:2c:c8:d9:20:
                    9a:7c:b8:64:df:84:5c:f2:27:96:60:20:38:87:fb:
                    e1:cc:b8:47:ad:11:97:99:87:05:09:82:12:c7:d1:
                    1e:d6:6e:24:15:30:92:76:61:ed:04:d3:1c:e0:4f:
                    86:1b:c0:4b:b3:53:90:9f:da:5d:dc:00:1b:c3:ee:
                    00:71:de:7e:c0:ff:fd:db:ab:79:8b:da:db:b4:24:
                    87:f4:5f:a1:52:36:9b:9e:6d:ed:70:6c:03:64:d2:
                    6c:9f:b9:75:9c:16:f6:2d:e3:51:d8:2e:f1:14:12:
                    e0:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:57:86:3E:C2:C5:9D:A2:33:F0:F1:F7:88:C1:89:E7:E7:E9:6D:3E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9bca30d4-8ea5-4d58-8cca-f2ed9a0754b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fb9:4000::/39

    Signature Algorithm: sha256WithRSAEncryption
         06:38:33:96:16:47:ed:1b:4e:31:49:62:d8:a9:d8:65:dd:6d:
         d0:4f:2b:72:99:dd:4e:2f:cd:fb:46:1f:97:11:45:d9:91:61:
         99:a0:8f:79:e2:02:e0:24:18:d3:01:c0:b0:ce:9c:09:d2:9a:
         d9:5a:61:71:2e:b7:30:fb:7c:d1:4d:8b:56:fa:be:39:36:d4:
         2b:55:92:25:bb:a8:5f:d0:55:8a:67:77:7c:1f:da:81:e6:f2:
         d1:dc:62:d9:12:3f:3e:e3:6a:27:11:c0:c2:94:66:a3:5e:9b:
         00:06:d7:0b:de:4b:76:5b:41:fd:1b:ed:de:65:68:57:41:41:
         64:4b:02:5f:e1:1a:6b:71:e2:3a:50:90:e8:cc:b9:e3:6e:84:
         30:14:58:24:b1:1b:20:c6:7d:a4:f2:c4:29:a6:82:50:18:f1:
         35:aa:17:6b:0c:8d:20:f7:cb:15:c0:29:d2:a0:6b:be:e1:f7:
         db:e9:8a:a8:72:25:db:ce:cb:c8:3a:67:75:d6:80:10:a9:51:
         eb:ee:f3:de:6a:19:da:be:2b:18:92:2f:1f:89:49:f2:f7:73:
         7c:8c:7a:3b:ff:c0:a2:4c:cf:cf:76:99:0a:97:5e:bf:b1:a1:
         30:ef:c4:4b:04:64:a9:85:6b:9a:31:a6:d6:95:ab:40:2f:e6:
         db:43:f3:68
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Sep 17 16:59:39 2026 by rpki-client