Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ada9656c-30f4-4e44-894d-f0d706b08daa.roa
File:                     ada9656c-30f4-4e44-894d-f0d706b08daa.roa (raw, json)
Hash identifier:          UmP2nempadNgxsweRhfY5maSiU9FiBVY1/6s/bimaPs=
Subject key identifier:   43:02:DA:54:24:CD:62:F2:BB:7F:C6:AF:86:70:BA:2F:80:12:40:3E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3A8FEC8E7F35434548771E8312D65B2D0DD75241
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ada9656c-30f4-4e44-894d-f0d706b08daa.roa
Signing time:             Mon 03 Aug 2026 01:10:44 +0000
ROA not before:           Mon 03 Aug 2026 01:10:44 +0000
ROA not after:            Sun 01 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff2:34c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 16 Aug 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:8f:ec:8e:7f:35:43:45:48:77:1e:83:12:d6:5b:2d:0d:d7:52:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  3 01:10:44 2026 GMT
            Not After : Nov  1 23:59:59 2026 GMT
        Subject: serialNumber=ecf31e3cc11f34ffd6b97e958a897fd9afd9d1207d43a58390d4441f486aac69, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:f7:1d:5c:02:09:e0:79:a5:d6:69:7b:84:a5:
                    82:46:c9:0b:3f:f8:84:5c:a8:a2:8d:9c:d2:11:06:
                    8b:bb:99:3e:e9:da:c8:b2:41:67:04:3a:75:ad:fd:
                    9f:f1:07:c8:06:0f:87:a6:0b:29:98:95:e9:01:af:
                    2a:e4:0a:de:08:ce:bf:34:90:f0:fc:bc:e9:a3:4c:
                    5c:22:0b:67:fd:3e:a0:e7:b4:1b:98:e0:d2:52:d5:
                    55:ff:06:c1:2f:52:fb:cc:de:25:bc:c4:81:53:8f:
                    58:02:0d:a7:4a:bc:0d:d7:f3:e7:e5:6e:7c:7c:de:
                    53:4c:59:4f:5a:1f:43:47:4c:4e:a1:ab:46:45:02:
                    62:eb:2b:5c:38:9d:c6:ce:d1:d9:94:9f:f3:23:72:
                    80:cb:04:f2:1a:90:bb:2d:e4:2b:3f:89:b8:76:9b:
                    3a:d7:9d:b6:35:4e:10:01:d4:3a:d3:ae:7a:be:92:
                    aa:69:a8:ea:8a:7c:26:d9:4b:26:a8:3d:b7:62:4a:
                    9c:5f:8b:73:ac:bd:d6:e6:96:f4:1c:20:95:40:49:
                    8c:c7:e2:e9:fd:5f:59:90:a8:5c:3f:47:fb:3b:d1:
                    e7:85:02:93:23:18:33:c9:26:40:64:8b:c3:64:14:
                    5b:e6:7b:db:e2:1a:84:e7:fd:bc:96:23:e5:80:d5:
                    4a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:02:DA:54:24:CD:62:F2:BB:7F:C6:AF:86:70:BA:2F:80:12:40:3E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ada9656c-30f4-4e44-894d-f0d706b08daa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff2:34c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         3b:28:03:9a:e9:f0:d1:bf:89:9f:80:75:95:1f:f6:a0:13:ab:
         88:56:37:fb:19:e1:5b:e0:c0:3c:b4:41:cc:06:91:cd:c5:98:
         c9:6c:3d:91:7c:36:11:ff:79:e6:ec:ba:49:b7:ad:42:68:cc:
         42:62:f6:a0:64:19:51:e5:36:c5:b8:82:e9:e3:ac:37:d5:ef:
         5b:bb:89:fc:15:19:ef:aa:b9:6d:d7:af:9c:5e:fc:1a:ac:91:
         e0:d0:d0:09:3a:6b:e2:4f:cc:a0:8e:23:c0:00:20:b2:e9:ba:
         68:91:60:eb:0e:47:60:fe:41:10:5d:49:65:f7:34:71:63:8b:
         fe:67:e1:39:b2:e8:93:b4:30:5e:75:e4:35:06:4f:ca:1a:79:
         f6:d9:fd:de:c8:de:e5:42:b7:ff:4a:62:13:82:ba:59:53:3d:
         f6:4c:1e:32:de:9b:19:69:c9:30:3c:cb:d4:b7:15:d9:06:47:
         87:f6:90:b0:51:e2:d4:6c:61:31:bb:4d:96:55:6b:f2:2c:40:
         b5:2b:d2:c4:75:53:8b:f7:b8:be:9b:f2:57:eb:b8:ea:2d:72:
         31:8b:4b:04:54:58:c1:a6:2d:21:a9:b1:cc:36:e6:71:e0:63:
         54:ea:d6:c2:ad:0f:58:d4:8a:bc:99:4f:ad:38:99:b3:9a:27:
         fc:42:2c:55
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUOo/sjn81Q0VIdx6DEtZbLQ3XUkEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODAzMDExMDQ0WhcNMjYxMTAxMjM1OTU5
WjB6MUkwRwYDVQQFE0BlY2YzMWUzY2MxMWYzNGZmZDZiOTdlOTU4YTg5N2ZkOWFm
ZDlkMTIwN2Q0M2E1ODM5MGQ0NDQxZjQ4NmFhYzY5MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDa9x1cAgngeaXWaXuEpYJGyQs/+IRcqKKNnNIRBou7mT7p
2siyQWcEOnWt/Z/xB8gGD4emCymYlekBryrkCt4Izr80kPD8vOmjTFwiC2f9PqDn
tBuY4NJS1VX/BsEvUvvM3iW8xIFTj1gCDadKvA3X8+flbnx83lNMWU9aH0NHTE6h
q0ZFAmLrK1w4ncbO0dmUn/MjcoDLBPIakLst5Cs/ibh2mzrXnbY1ThAB1DrTrnq+
kqppqOqKfCbZSyaoPbdiSpxfi3OsvdbmlvQcIJVASYzH4un9X1mQqFw/R/s70eeF
ApMjGDPJJkBki8NkFFvme9viGoTn/byWI+WA1UqfAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUQwLaVCTNYvK7f8avhnC6L4ASQD4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2FkYTk2NTZjLTMwZjQtNGU0NC04OTRkLWYwZDcwNmIwOGRhYS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAB/yNMAwDQYJKoZIhvcNAQELBQADggEBADsoA5rp8NG/iZ+AdZUf9qAT
q4hWN/sZ4VvgwDy0QcwGkc3FmMlsPZF8NhH/eebsukm3rUJozEJi9qBkGVHlNsW4
gunjrDfV71u7ifwVGe+quW3Xr5xe/BqskeDQ0Ak6a+JPzKCOI8AAILLpumiRYOsO
R2D+QRBdSWX3NHFji/5n4Tmy6JO0MF515DUGT8oaefbZ/d7I3uVCt/9KYhOCullT
PfZMHjLemxlpyTA8y9S3FdkGR4f2kLBR4tRsYTG7TZZVa/IsQLUr0sR1U4v3uL6b
8lfruOotcjGLSwRUWMGmLSGpscw25nHgY1Tq1sKtD1jUiryZT604mbOaJ/xCLFU=
-----END CERTIFICATE-----
Generated at Sat Aug 15 07:43:48 2026 by rpki-client