Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/be2c256c-f4ff-41dc-a00e-c372a0f7cff7.roa
File:                     be2c256c-f4ff-41dc-a00e-c372a0f7cff7.roa (raw, json)
Hash identifier:          owo0bzxDoFrrRHCzfa7ZDNcYAkbYAE1DrgP9eeSfSto=
Subject key identifier:   48:1F:C7:D6:EA:D4:64:48:25:EB:E4:1C:F7:6E:2D:ED:E5:06:51:CD
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       058C9A0A77F7EE55689ACA2B7A8D385EC1595700
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/be2c256c-f4ff-41dc-a00e-c372a0f7cff7.roa
Signing time:             Thu 15 Oct 2026 00:41:48 +0000
ROA not before:           Thu 15 Oct 2026 00:41:48 +0000
ROA not after:            Wed 13 Jan 2027 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1f19:c000::/37 maxlen: 37
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Nov 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:8c:9a:0a:77:f7:ee:55:68:9a:ca:2b:7a:8d:38:5e:c1:59:57:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 15 00:41:48 2026 GMT
            Not After : Jan 13 23:59:59 2027 GMT
        Subject: serialNumber=1f3957319256e7ad805dd27c5b489f48a3180e4a1390fc36669453537decc7d7, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:bc:15:be:df:01:26:c2:6c:20:69:74:15:4a:
                    8f:fd:84:03:9d:68:b2:89:87:18:9b:b9:60:89:fa:
                    98:4a:ae:0c:6d:21:59:3c:6b:97:b2:69:a5:4b:a1:
                    15:e6:b6:4b:24:9b:76:74:37:19:8b:a1:4e:8a:4b:
                    c0:60:4b:fc:8a:c3:d1:58:d9:62:e8:67:df:36:af:
                    bc:91:fe:11:72:4f:c7:7b:27:9f:0d:3c:9b:3b:b2:
                    22:04:d8:be:13:ef:4b:00:04:e9:94:53:b6:08:63:
                    c1:af:c6:9a:bf:a1:42:0f:c4:1d:1d:eb:81:a7:b0:
                    30:8d:76:bd:b0:4a:7c:c6:04:b8:8d:d5:bf:b8:68:
                    53:2e:5c:f4:f4:d3:00:aa:75:f8:f7:a3:ad:5c:2a:
                    f1:66:79:a1:aa:d2:ae:c8:6d:73:fa:48:ad:88:95:
                    e6:a4:27:85:ff:9b:9e:f4:84:c6:78:5c:22:af:9a:
                    6d:99:d1:85:48:f7:c4:d9:c7:8a:ea:a8:e1:f0:16:
                    c5:46:3f:90:38:57:72:1d:6b:32:ae:2d:85:c1:19:
                    f3:3b:3b:34:63:40:2a:d5:44:9c:41:bb:ec:92:d4:
                    8e:a0:2b:e8:a5:57:b0:bc:b7:5c:e4:af:0b:b2:2a:
                    3d:fa:4c:2e:70:6f:d7:49:48:b3:e2:0b:c8:d2:e0:
                    d9:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:1F:C7:D6:EA:D4:64:48:25:EB:E4:1C:F7:6E:2D:ED:E5:06:51:CD
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/be2c256c-f4ff-41dc-a00e-c372a0f7cff7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f19:c000::/37

    Signature Algorithm: sha256WithRSAEncryption
         47:14:c9:e5:95:35:bb:24:a0:ce:78:57:5e:ea:7b:b9:9c:8c:
         52:37:96:8b:2d:fc:fe:d2:06:98:f1:25:10:d9:04:f5:30:a6:
         e2:ec:13:de:73:e9:e4:02:22:e0:2b:ca:f4:cc:bd:f1:50:ca:
         9f:d1:06:a1:71:b9:ee:74:42:da:75:05:04:92:3d:8e:ad:36:
         bb:fa:a5:c2:47:c7:40:74:20:bf:bd:a4:ac:21:52:07:fa:06:
         c8:b7:63:f1:92:f2:c3:91:f2:2b:29:82:4d:a2:a7:db:77:2a:
         b7:34:f0:a1:56:87:1b:8d:db:52:54:51:9f:f7:2e:43:56:44:
         bb:0d:a3:9b:ea:23:d3:ad:ae:2b:18:65:2a:f2:1f:51:5e:a1:
         13:07:57:f0:8d:cd:05:ba:eb:69:61:5f:95:66:38:12:da:7f:
         c0:e7:16:4f:d6:02:45:5a:48:d7:a3:bf:f9:08:e0:15:0a:48:
         b8:bb:ce:bc:6b:35:1c:ba:f8:35:1b:9e:e4:85:1d:b5:42:97:
         a4:1e:8b:5d:93:b8:4e:e8:db:22:d0:93:39:3e:87:e8:fc:82:
         f7:67:d2:0b:50:7e:53:b6:22:0e:b9:d4:d0:77:34:72:c1:e3:
         46:b0:00:90:a6:aa:84:ee:e4:fc:d2:02:5d:70:66:e3:64:77:
         91:6a:10:ce
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Nov 3 02:16:45 2026 by rpki-client