Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ab2c5b4c-5318-4a5e-a629-9bea0f4ea85c.roa
File:                     ab2c5b4c-5318-4a5e-a629-9bea0f4ea85c.roa (raw, json)
Hash identifier:          frAPlXFbmauCuLyvCUK6wa8bjJn98oxIrjkV/BZyqIE=
Subject key identifier:   81:23:8F:55:EB:F5:56:A4:5F:34:37:3E:2D:48:8F:26:EF:D2:EE:88
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       01E5AA58D20A98EFF8F1DDEFEDD2E1D404EC9CCE
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ab2c5b4c-5318-4a5e-a629-9bea0f4ea85c.roa
Signing time:             Fri 23 Oct 2026 00:30:49 +0000
ROA not before:           Fri 23 Oct 2026 00:30:49 +0000
ROA not after:            Thu 21 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f2d:4000::/37 maxlen: 37
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Nov 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:e5:aa:58:d2:0a:98:ef:f8:f1:dd:ef:ed:d2:e1:d4:04:ec:9c:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 23 00:30:49 2026 GMT
            Not After : Jan 21 23:59:59 2027 GMT
        Subject: serialNumber=d180caae3fbd75ce3e1b1c435f9fdeba220c004cc049bf3bf7f5b959c9b76e38, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:58:29:3e:c5:d3:81:91:9c:b9:40:82:40:00:
                    68:d8:ad:bf:5c:ca:fa:78:be:25:7f:3f:cf:7d:43:
                    af:06:eb:36:26:9a:da:e0:f4:4b:0f:07:59:fb:ef:
                    51:ad:42:27:80:27:07:23:5f:eb:05:0e:04:38:61:
                    f7:a5:fe:52:52:3b:c9:6c:65:bb:d4:02:88:c8:ca:
                    35:ac:49:72:b1:72:29:84:17:a7:09:03:e0:16:ca:
                    cb:19:38:d4:2f:42:63:d0:b3:a5:52:dd:31:9f:37:
                    59:54:3c:9f:e5:6a:e0:fa:d8:f7:ae:e2:99:6c:e0:
                    ec:a6:f6:82:b0:b5:70:c0:28:e0:a9:61:50:48:f4:
                    78:50:f6:70:af:7b:db:1e:81:a5:a8:5a:c2:5c:9d:
                    01:53:d4:f6:df:bd:42:7f:a6:e8:79:16:d0:60:92:
                    37:4c:35:f7:41:4f:ba:b5:86:85:4f:a2:7c:46:30:
                    f7:15:24:8e:37:11:da:aa:87:ce:1f:ae:a8:42:dc:
                    e1:72:84:61:14:f2:c6:36:7a:61:8f:00:cc:42:ca:
                    d3:ae:22:ab:f0:3c:b9:3b:92:c9:c0:f9:1e:f8:3f:
                    c2:0d:da:a1:4a:ad:cd:65:73:46:81:18:8d:49:63:
                    6f:29:32:12:f9:ea:86:7e:04:1b:dd:b9:8b:8a:f5:
                    5b:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:23:8F:55:EB:F5:56:A4:5F:34:37:3E:2D:48:8F:26:EF:D2:EE:88
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ab2c5b4c-5318-4a5e-a629-9bea0f4ea85c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f2d:4000::/37

    Signature Algorithm: sha256WithRSAEncryption
         5c:d4:22:cb:c4:05:45:15:35:bf:40:d2:5c:7e:0f:74:42:8a:
         61:cb:58:0a:cf:a7:84:f7:5b:6e:ab:77:f1:93:94:ed:51:77:
         ab:de:a0:00:31:8d:f1:b6:17:9b:e5:06:c2:ec:79:db:d0:f8:
         f3:b9:b0:4b:6f:9a:10:59:36:9e:aa:38:ae:88:d2:9d:e8:71:
         b6:48:ee:3b:8a:ad:3b:53:8b:25:aa:0b:96:5d:e4:33:4b:eb:
         47:2e:bb:2b:02:b6:fc:ac:cb:8c:87:a2:51:62:e1:12:19:7a:
         a7:44:55:69:e3:cd:c7:a2:34:a5:6a:3c:10:d1:21:60:f0:ce:
         f9:ed:d7:ae:80:04:84:84:9c:5d:ce:51:00:fe:73:32:5a:db:
         6c:3b:ec:57:cb:f8:26:fa:c8:16:7f:80:9e:80:32:92:82:98:
         de:24:77:63:90:fa:fa:85:0f:4a:91:ec:8b:f3:73:c1:94:f6:
         77:13:e0:2c:6f:44:b7:0e:80:0c:04:2d:7f:70:b6:4f:19:db:
         23:28:98:0e:8f:31:9d:41:80:5c:18:15:17:df:c8:cc:19:cc:
         6f:25:cf:fd:dd:7e:bc:df:7d:c1:c3:ba:00:a2:74:02:e6:a5:
         4f:0c:40:cc:1c:e4:1e:fb:05:b2:ce:b4:0f:8e:61:3f:e9:bd:
         cc:ea:d2:d5
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Nov 3 20:12:57 2026 by rpki-client