Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a272600a-9414-4881-b3df-55f7c5722f94.roa
File:                     a272600a-9414-4881-b3df-55f7c5722f94.roa (raw, json)
Hash identifier:          SeKlGbsU2qsfarD6YcbvLSVCJ7pgYf08aCG/H++6RZM=
Subject key identifier:   D6:5D:05:9B:59:74:BF:28:39:38:66:19:A4:F7:DF:EF:0D:FF:5A:C6
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       24EE896A52C9ADB0579164BA890EFD7619DE64D8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a272600a-9414-4881-b3df-55f7c5722f94.roa
Signing time:             Tue 04 Aug 2026 02:00:48 +0000
ROA not before:           Tue 04 Aug 2026 02:00:48 +0000
ROA not after:            Mon 02 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f18:c000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 19 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:ee:89:6a:52:c9:ad:b0:57:91:64:ba:89:0e:fd:76:19:de:64:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  4 02:00:48 2026 GMT
            Not After : Nov  2 23:59:59 2026 GMT
        Subject: serialNumber=f3aa0ef82a0920f56b7bc7d25d927d19cdc1e03843f692be4807bf63ee0efdb2, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:94:45:85:e1:38:bf:44:93:e8:f7:fc:1b:e1:
                    a8:5d:65:e7:c1:5c:26:94:08:bd:0a:30:ed:66:db:
                    57:82:7f:af:6d:37:d4:b6:28:5f:c2:ba:db:3e:a2:
                    85:fa:6b:df:2f:ad:53:06:bc:22:3a:18:e0:8c:34:
                    9d:3c:77:a9:97:51:55:2f:08:06:ed:91:05:9e:56:
                    c0:d1:bd:cb:1f:2c:83:6d:92:e5:14:ee:bb:bc:0c:
                    10:f2:37:d5:e8:2e:7f:65:38:7f:c9:b0:03:8a:a1:
                    34:d6:9d:e0:dc:78:74:a7:5e:07:28:45:a3:90:e0:
                    85:bd:47:34:de:8a:3b:87:52:cb:e3:b2:e3:ee:dc:
                    c8:77:51:8b:d7:98:d7:95:0d:2e:f7:62:cf:a0:07:
                    1f:2e:13:ce:14:38:4a:2c:41:c9:d0:72:9d:76:fe:
                    c2:d9:0f:67:35:f4:1a:38:db:75:6b:32:fe:27:8f:
                    29:21:85:79:82:57:9d:96:df:b0:a6:12:fb:7b:7d:
                    14:8d:0c:e5:62:29:ab:b6:35:46:fe:f3:03:1e:16:
                    0f:0c:93:e5:e8:0a:a4:cb:26:d2:59:c9:b7:24:90:
                    5f:33:3f:d1:c6:01:a3:e3:6a:c5:0b:5a:d0:b4:1e:
                    e4:5a:59:ec:88:3e:a2:83:4d:19:c3:02:f7:56:09:
                    26:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:5D:05:9B:59:74:BF:28:39:38:66:19:A4:F7:DF:EF:0D:FF:5A:C6
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a272600a-9414-4881-b3df-55f7c5722f94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f18:c000::/36

    Signature Algorithm: sha256WithRSAEncryption
         78:30:26:b7:ef:7e:b9:4c:9f:88:f9:a6:4e:58:dd:03:29:27:
         34:7e:f9:08:a1:f5:d9:9e:62:f0:9a:9a:a6:50:13:35:e9:f1:
         c7:13:cd:73:8b:32:3b:c9:4e:c8:42:c4:5e:a6:24:f3:86:c5:
         d5:04:87:fc:a2:ee:42:1f:08:58:2b:da:35:95:2e:a6:8b:6d:
         2d:6d:d7:30:64:60:68:e9:b1:1a:47:7d:2d:d9:1b:88:d9:ea:
         3c:b0:88:e1:fa:69:a2:16:c9:61:7b:44:75:e3:ac:18:2b:70:
         af:a6:e0:83:ac:7c:dd:ce:c4:36:fb:57:37:4b:7a:59:2f:32:
         0a:c2:fa:56:6b:d8:d3:7a:36:1d:42:c7:90:98:85:b8:cb:ab:
         df:7f:6c:93:c5:6e:e6:13:2b:40:79:7a:9d:b2:89:a6:47:be:
         1a:9c:a9:62:1e:4a:df:8c:53:a7:63:47:7c:64:0f:71:60:f2:
         06:e4:55:05:c9:0f:a2:18:82:ef:dc:1b:32:62:3d:dd:08:9b:
         98:f8:0c:b7:33:58:fd:54:54:0e:2c:db:d6:96:62:d5:f4:9a:
         95:49:c3:ae:49:87:56:ae:d4:25:d7:db:29:0a:db:49:5e:21:
         39:97:0c:09:b3:35:e7:2b:0a:ed:95:33:b9:b9:e5:7c:92:c1:
         aa:c0:ed:90
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Sep 17 18:22:27 2026 by rpki-client