Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a731ed6c-81fc-4e80-bf99-3fb86822d2cc.roa
File:                     a731ed6c-81fc-4e80-bf99-3fb86822d2cc.roa (raw, json)
Hash identifier:          yoD0MNF1eFPfNcui7/BTZPkL24QI/5GfeYXltYL0R0k=
Subject key identifier:   63:71:D4:65:DD:E8:BB:CF:70:21:48:4C:72:24:10:0B:10:33:1F:33
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6E6927779C6AEADB5A0E8AB224020B7C9D77AA16
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a731ed6c-81fc-4e80-bf99-3fb86822d2cc.roa
Signing time:             Fri 07 Aug 2026 00:31:15 +0000
ROA not before:           Fri 07 Aug 2026 00:31:15 +0000
ROA not after:            Thu 05 Nov 2026 23:59:59 +0000
asID:                     8987
IP address blocks:        2600:1fef:5000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 18 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:69:27:77:9c:6a:ea:db:5a:0e:8a:b2:24:02:0b:7c:9d:77:aa:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  7 00:31:15 2026 GMT
            Not After : Nov  5 23:59:59 2026 GMT
        Subject: serialNumber=9cd03b620e63837a8af527b49506ff25496f7af6c52495f63c6ebde06b6554bd, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ca:84:3e:39:1d:1c:5e:75:5a:0e:19:25:99:
                    53:36:ae:5d:9d:f7:a3:2b:f0:48:de:c3:ad:dc:da:
                    6b:27:f4:97:55:af:52:8d:f1:68:a0:9f:77:b5:a2:
                    26:0b:ac:dd:28:ca:fb:ea:20:f4:32:e3:d4:ca:8a:
                    76:aa:9e:e8:82:49:0d:df:86:b3:36:1e:3f:a0:3a:
                    52:c1:0c:4d:83:70:0f:d2:e9:a2:e8:ee:91:f5:62:
                    01:be:08:73:b8:8a:ab:08:00:2d:6a:cd:34:3d:9a:
                    63:3a:8f:3b:50:99:7a:6a:62:e0:39:d6:0a:99:83:
                    a2:61:c6:5b:34:0b:12:e8:d2:27:0a:70:fa:29:07:
                    52:f4:a8:ca:44:31:da:b6:0b:15:49:02:53:b9:91:
                    cf:cf:c4:c3:67:55:0e:1a:1c:34:b1:b9:25:1b:c5:
                    de:93:3c:06:c1:41:ae:c5:58:d9:4a:d7:dc:1d:b3:
                    aa:27:12:6d:80:86:51:9f:53:1a:0c:29:13:c3:84:
                    76:68:37:d1:1a:ed:97:fc:ed:29:ef:ec:ff:e4:94:
                    c1:7b:ba:de:ff:3d:bf:35:bb:5c:5d:42:a0:bd:40:
                    31:97:f5:84:93:43:1b:df:ab:bb:bf:b2:b4:6c:67:
                    57:20:0d:e2:52:37:58:7b:a4:5c:7d:ce:fe:37:c8:
                    cf:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:71:D4:65:DD:E8:BB:CF:70:21:48:4C:72:24:10:0B:10:33:1F:33
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a731ed6c-81fc-4e80-bf99-3fb86822d2cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fef:5000::/40

    Signature Algorithm: sha256WithRSAEncryption
         3c:3a:03:eb:04:b9:01:ba:cc:2b:80:f8:14:58:00:5b:ee:51:
         0b:1b:56:04:7e:b0:eb:d6:a8:25:e7:18:ca:ae:eb:8c:f9:55:
         4f:39:78:27:e8:02:7e:0b:cd:b9:cc:72:e1:9d:e2:88:86:d3:
         d4:9f:b0:be:9a:4f:d2:f0:57:ff:b2:20:03:57:65:37:bc:b0:
         7b:ce:f9:6c:03:b3:7a:5e:6c:b8:92:69:b8:d3:9c:c3:58:f8:
         f0:3f:ce:24:15:66:1d:f8:c3:69:77:3e:c0:c8:ae:95:cc:9c:
         32:81:18:be:04:6e:21:f0:fc:99:5b:4b:1f:90:3d:63:b0:41:
         5c:6a:08:bb:99:bb:28:60:f4:35:2b:81:8a:32:78:6e:38:e4:
         ca:a5:b3:32:85:3e:0d:cb:8c:48:b2:c9:a1:35:bd:54:fe:38:
         44:75:9b:67:06:f1:ed:9a:4c:21:f5:49:72:d6:ec:8c:48:e2:
         94:f1:a1:af:64:81:2f:3d:1e:4a:7b:6e:89:91:b9:77:f9:e1:
         ac:c5:d2:54:dd:44:d0:a9:1f:1c:56:d5:35:dc:c0:b6:29:2b:
         bf:fe:4a:94:2c:b7:18:c2:bd:fc:77:ff:33:ac:8d:af:f5:3e:
         d2:ca:97:63:9f:45:78:80:13:66:14:ac:d6:9b:74:11:ed:ce:
         fb:33:2c:73
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Sep 17 16:18:31 2026 by rpki-client