Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b9a67dba-13fc-4b07-9d44-def1dd6a809e.roa
File:                     b9a67dba-13fc-4b07-9d44-def1dd6a809e.roa (raw, json)
Hash identifier:          0RhpDkZw2AN+HHcS8Y4qCd42R+qu1P05cANI1mfWXsQ=
Subject key identifier:   2F:07:ED:2B:45:E5:9F:32:6E:AC:79:0C:9E:04:B7:D9:37:D6:BB:43
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3572C0EE6CF02C512C71FBD9B8D56B148D05ED25
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b9a67dba-13fc-4b07-9d44-def1dd6a809e.roa
Signing time:             Wed 05 Aug 2026 00:30:22 +0000
ROA not before:           Wed 05 Aug 2026 00:30:22 +0000
ROA not after:            Tue 03 Nov 2026 23:59:59 +0000
asID:                     8987
IP address blocks:        2600:1fb8:2000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 18 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:72:c0:ee:6c:f0:2c:51:2c:71:fb:d9:b8:d5:6b:14:8d:05:ed:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  5 00:30:22 2026 GMT
            Not After : Nov  3 23:59:59 2026 GMT
        Subject: serialNumber=673ffce2b99be8f999495cc7efd117fdfa7cfd33950f16da69ae2f32193459c6, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:96:ef:97:ad:c9:25:2c:45:72:d5:5f:15:dd:
                    e4:04:97:6e:5e:81:90:61:fb:e4:f9:f2:a7:65:7f:
                    52:62:d4:cb:91:13:cf:7e:d1:2d:5d:9d:9b:e7:00:
                    17:d9:83:0f:fd:f2:17:94:ff:e7:34:79:b3:06:c2:
                    a2:68:79:3a:3b:3f:81:be:20:f9:c7:f0:27:34:18:
                    ed:5c:bc:77:92:4a:db:07:5b:c5:8a:c1:b3:31:da:
                    f5:1e:f1:69:87:0c:d2:e8:81:13:82:9f:e4:b3:bf:
                    76:3d:80:51:e6:db:5f:b4:07:a0:35:a3:34:20:3b:
                    38:77:3d:60:47:94:9a:2c:57:fa:ce:3d:ee:33:4c:
                    5f:c8:a6:b7:ad:cb:d1:44:91:aa:ed:0e:d0:c1:36:
                    8e:b9:8d:cc:b6:52:31:18:69:4b:b6:3e:fb:41:81:
                    13:39:de:27:13:53:6f:3f:cb:92:2f:d1:ea:4c:83:
                    e4:83:23:ce:25:f9:14:be:a8:95:56:2f:84:8e:d9:
                    77:02:bc:0b:75:b1:61:ad:0e:3c:20:0b:6f:18:e4:
                    a2:0b:bc:00:85:cc:c8:4f:2b:c5:aa:0e:3b:06:f4:
                    d3:75:be:64:67:bd:b6:27:6d:94:86:40:b3:84:2f:
                    50:b2:a7:4f:c6:f2:c7:71:58:20:d5:55:f5:fa:88:
                    e4:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:07:ED:2B:45:E5:9F:32:6E:AC:79:0C:9E:04:B7:D9:37:D6:BB:43
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b9a67dba-13fc-4b07-9d44-def1dd6a809e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fb8:2000::/40

    Signature Algorithm: sha256WithRSAEncryption
         99:f7:36:82:01:b6:51:8c:29:7f:ab:fc:5f:a0:40:06:95:24:
         2a:46:46:e2:3f:38:08:a5:ed:bd:30:6f:ad:2c:a4:48:70:58:
         0a:b3:41:b7:87:54:1c:50:7d:64:03:10:3b:4f:d0:f7:1a:05:
         86:c5:49:e3:ac:f8:da:77:7d:8a:fa:22:e7:91:90:2c:fb:5d:
         1a:ee:f4:ce:e2:b2:e0:81:95:57:b5:00:c1:f5:7a:7b:b3:c6:
         d7:e2:1a:53:a2:27:89:e9:a4:fb:a9:fe:b2:af:73:f6:42:1e:
         86:cd:a4:a7:ad:3c:cd:f7:01:43:c6:4a:f1:7f:5f:73:05:8a:
         b4:87:48:ba:c5:32:36:6d:16:28:ea:79:dc:84:cc:5f:04:42:
         6d:12:6a:48:e0:12:1b:96:33:a0:41:fe:72:ef:8c:04:17:c0:
         04:3d:c3:08:64:2c:bc:83:b0:5b:ea:33:1b:7d:69:e5:9a:e1:
         58:0c:39:7f:f1:1a:8f:be:c0:7d:e1:0a:c1:b5:8e:3d:8b:a5:
         f9:45:4e:21:d8:0c:0f:70:8a:a9:58:3e:8e:b1:09:fd:78:1c:
         51:33:65:d0:f3:be:3f:2a:6a:09:40:9e:5b:52:28:ad:ee:41:
         ae:51:ef:15:86:ff:11:c5:79:a2:ca:85:17:18:5e:c3:d6:df:
         2e:af:7b:34
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Sep 17 15:34:37 2026 by rpki-client