Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a51cf629-3b5c-444d-a5a3-c49bffcebe3a.roa
File:                     a51cf629-3b5c-444d-a5a3-c49bffcebe3a.roa (raw, json)
Hash identifier:          E8zZVpBHjMVR74aGlA3vx+qKabqdr31zhhCDHy+i9f0=
Subject key identifier:   01:67:09:54:B5:32:95:04:76:04:27:51:B9:7E:37:E7:2C:20:98:8D
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       084D7B4C7E536F7FA418CAE0AD97EF7D8025FF36
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a51cf629-3b5c-444d-a5a3-c49bffcebe3a.roa
Signing time:             Fri 07 Aug 2026 00:40:33 +0000
ROA not before:           Fri 07 Aug 2026 00:40:33 +0000
ROA not after:            Thu 05 Nov 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1fef:8000::/39 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:4d:7b:4c:7e:53:6f:7f:a4:18:ca:e0:ad:97:ef:7d:80:25:ff:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  7 00:40:33 2026 GMT
            Not After : Nov  5 23:59:59 2026 GMT
        Subject: serialNumber=fddd187f3ee2b5bde640a93317795a226a8e3e0e2b10f178d1d1dfcec1ad35a4, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:70:8e:f4:11:0c:55:38:52:06:68:28:37:24:
                    ee:86:b0:f1:bd:42:40:ba:30:96:7e:0b:86:b1:10:
                    29:80:c7:82:1b:8b:09:26:8b:80:cf:12:f0:6c:c8:
                    cf:5d:52:5a:a9:cc:3c:9f:4a:c5:4e:ac:99:b6:e4:
                    69:4a:a9:3e:95:63:1a:11:16:5b:de:10:8a:5a:d5:
                    51:b4:43:f4:a1:e8:57:0c:ce:ba:58:05:5a:76:0c:
                    9f:31:35:33:1e:d3:af:07:b3:2e:d9:84:5e:e2:aa:
                    a0:11:61:2c:79:ae:bd:e4:f4:11:a1:b6:92:75:9a:
                    9b:37:ec:c3:2d:6f:7a:8d:4b:1f:60:01:0d:48:36:
                    57:63:47:e9:79:37:b0:29:c4:be:b8:6b:e5:c3:09:
                    f8:04:d0:17:04:2a:ad:f1:a6:79:41:c8:35:d3:d7:
                    04:7e:5f:8f:00:95:b9:28:d0:11:f9:8d:50:0c:2d:
                    c5:f9:ac:2a:75:3a:b5:91:96:96:32:e5:86:29:e8:
                    8b:4d:60:53:30:6a:25:f5:43:7f:97:6b:06:e4:09:
                    bd:d0:60:f9:3c:0f:f3:14:97:c4:8c:e4:d1:6c:88:
                    1d:e3:87:8d:c2:2a:65:11:98:00:cc:7d:eb:03:59:
                    5f:a3:ef:85:7f:fc:27:fb:d2:bf:2d:15:b4:05:ec:
                    ac:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:67:09:54:B5:32:95:04:76:04:27:51:B9:7E:37:E7:2C:20:98:8D
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a51cf629-3b5c-444d-a5a3-c49bffcebe3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fef:8000::/39

    Signature Algorithm: sha256WithRSAEncryption
         88:26:27:fb:b0:17:c2:39:f9:62:1b:ae:21:0e:56:80:93:c2:
         23:e4:00:71:08:a6:81:7b:38:0e:27:a9:82:4c:76:7c:eb:7d:
         7d:e7:b7:74:83:08:fe:96:e7:fe:98:8f:4d:d3:7d:0f:8c:ba:
         98:e3:56:0d:cb:11:2b:f9:77:50:1f:ed:a5:1b:63:10:ea:f0:
         55:ee:c7:71:97:ce:ae:f6:13:a5:7d:b2:bd:53:fb:7e:7e:8a:
         33:20:fd:bd:78:59:49:85:d8:84:23:85:c1:19:eb:7f:d8:2b:
         e9:f3:8d:31:df:66:07:28:5f:08:1a:38:8d:d0:b7:36:3f:c3:
         b6:75:cf:53:26:39:f9:c4:b7:5f:a4:f7:94:ca:31:80:cc:93:
         49:cd:43:fd:a3:69:7f:b5:f9:8d:3e:f6:2e:c1:95:14:9a:71:
         72:e0:7a:5c:a5:f3:70:98:d7:ad:02:9d:fe:4e:71:aa:4d:1a:
         73:5a:2d:d3:60:f5:5f:9e:56:5a:29:dd:7a:d9:a5:6f:c4:e1:
         ed:65:91:11:3b:d1:14:ed:14:ae:8c:46:ea:af:6f:b5:2c:f0:
         46:1d:78:2e:7c:58:09:c5:bb:d8:d4:08:98:fc:e5:e6:cb:11:
         91:03:73:1b:20:a1:60:ab:05:3e:5c:52:20:2f:af:5b:3d:2f:
         63:72:27:1b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Aug 20 22:53:52 2026 by rpki-client