Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b4006999-dd63-4a64-8625-e74b071bafce.roa
File:                     b4006999-dd63-4a64-8625-e74b071bafce.roa (raw, json)
Hash identifier:          WRwujslbmyaL0/lTgRx03sFnou5deUO0AJkB3JckYX0=
Subject key identifier:   3F:D8:95:26:0F:BD:A9:03:76:EE:59:16:0B:6F:B8:2A:C0:51:D8:F1
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7729B0BB4DBF28816C4986B6EC578CB5D9B2EB97
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b4006999-dd63-4a64-8625-e74b071bafce.roa
Signing time:             Fri 07 Aug 2026 00:20:11 +0000
ROA not before:           Fri 07 Aug 2026 00:20:11 +0000
ROA not after:            Thu 05 Nov 2026 23:59:59 +0000
asID:                     8987
IP address blocks:        2600:1f60:5000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:29:b0:bb:4d:bf:28:81:6c:49:86:b6:ec:57:8c:b5:d9:b2:eb:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  7 00:20:11 2026 GMT
            Not After : Nov  5 23:59:59 2026 GMT
        Subject: serialNumber=f4324bf2da93769fb12cc927e5ccc74793f03ab2eae6a8a55a697ba7749e8567, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:2b:f1:bd:9f:30:48:50:6f:6d:09:b2:05:83:
                    a3:dd:df:a9:62:15:8a:79:87:ce:03:b9:23:f4:d6:
                    09:24:45:cf:9c:14:b4:68:b3:b6:ed:dc:23:9b:04:
                    0e:29:71:5d:9b:00:34:72:c4:6d:34:40:6d:fe:2c:
                    f0:29:f5:f8:10:76:97:8f:6e:65:97:77:43:7b:b1:
                    d7:0a:e7:87:c3:ad:b8:43:a9:4b:ed:ee:80:9f:37:
                    21:98:96:00:75:21:1b:f5:11:6c:d2:25:f8:91:32:
                    0a:b6:34:1a:00:33:0c:d1:6c:1f:53:d7:c5:b1:12:
                    86:4c:bc:ba:d3:d3:42:f2:8a:1a:9e:c2:4f:76:f0:
                    a9:c1:1c:f1:52:86:77:8c:2d:f4:33:6f:cf:34:49:
                    f2:a2:fd:b1:ad:b2:22:41:7c:19:38:07:63:a6:97:
                    a0:7e:99:78:92:88:aa:00:ed:63:e9:50:39:13:0a:
                    0c:21:f3:e1:c7:54:20:cd:4c:4f:d3:2e:6e:8a:49:
                    a0:e7:d8:b9:eb:d4:71:82:df:f8:c9:55:c2:cf:eb:
                    00:14:2a:5e:fb:3d:4f:6c:a8:b8:e9:a6:f3:2b:20:
                    50:25:d8:84:36:8d:48:b2:16:35:e3:5f:60:3c:0b:
                    94:f1:50:0b:f7:7c:2d:16:34:1c:5e:4d:ad:63:e4:
                    83:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:D8:95:26:0F:BD:A9:03:76:EE:59:16:0B:6F:B8:2A:C0:51:D8:F1
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b4006999-dd63-4a64-8625-e74b071bafce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f60:5000::/40

    Signature Algorithm: sha256WithRSAEncryption
         4a:9a:b1:ca:2e:8f:e3:ef:8c:06:df:1a:dc:6e:06:98:c0:a2:
         cf:2c:09:0b:ec:ee:0c:f8:a3:90:70:43:05:27:b7:bc:72:06:
         0d:90:cb:13:48:b9:e1:64:d6:8c:48:e7:3a:b5:fe:fa:89:b0:
         dd:15:42:20:1e:3b:00:2d:a9:0c:09:df:78:fe:a8:72:58:f3:
         c7:99:49:2a:55:8c:17:0a:61:11:00:27:8b:d4:e8:dd:c8:72:
         9e:8e:bf:15:91:89:ea:15:84:f3:a9:4e:85:6d:18:df:50:ed:
         89:3f:c1:a7:a9:88:92:14:f1:52:5d:7f:d3:f0:c7:49:09:e8:
         96:b5:3e:e3:6e:ca:2e:33:c5:11:07:42:de:fa:a2:d2:d2:f9:
         09:3f:cd:38:51:f9:a6:38:8e:8d:76:4c:e4:3a:0b:57:32:ee:
         65:6b:de:a7:e7:bf:e2:89:67:7b:49:2f:ca:2a:da:8b:a8:27:
         c9:c2:4b:14:55:ab:2c:b2:31:02:ef:15:a4:5d:3e:26:c8:e9:
         73:99:6f:4f:e1:9e:8d:55:0b:09:33:4f:b6:39:45:b5:88:d8:
         c8:c7:ad:56:97:5a:2d:3d:22:a0:24:d9:e0:a2:ea:27:ce:76:
         bb:49:fa:10:73:e0:25:37:a4:48:e1:16:8d:07:f9:3c:b6:2c:
         0c:88:d8:2c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Sep 2 04:55:27 2026 by rpki-client