Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c96d5347-7bf9-4984-b298-4dee0ceb88ed.roa
File:                     c96d5347-7bf9-4984-b298-4dee0ceb88ed.roa (raw, json)
Hash identifier:          m6h/osy9seBUYlOD3dfdTxKKMWu7GVvvzVnRDujbnHg=
Subject key identifier:   3A:E4:3B:F5:49:4B:B9:22:0E:81:C1:56:25:0A:AC:03:42:C3:B7:58
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7ADC48C24BD6EF6BEB786C921457332F9531991E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c96d5347-7bf9-4984-b298-4dee0ceb88ed.roa
Signing time:             Mon 03 Aug 2026 01:50:45 +0000
ROA not before:           Mon 03 Aug 2026 01:50:45 +0000
ROA not after:            Sun 01 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fff:8060::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Aug 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:dc:48:c2:4b:d6:ef:6b:eb:78:6c:92:14:57:33:2f:95:31:99:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  3 01:50:45 2026 GMT
            Not After : Nov  1 23:59:59 2026 GMT
        Subject: serialNumber=55de4bb4f9601a29be930de6390b07c580753213fbab8840bec8c3676676f3b6, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:04:f3:26:1f:c0:c4:68:6b:a4:06:ce:eb:ac:
                    43:1e:83:03:4e:ec:63:56:71:9d:9b:a7:0e:8a:c0:
                    13:a4:8a:9e:3c:34:ec:3f:df:31:3b:13:f5:24:38:
                    8e:b9:8b:a1:cf:85:cd:2f:21:b1:7d:bc:66:32:fb:
                    5e:d2:30:f4:2e:8f:d2:9c:98:47:12:68:d4:c4:3d:
                    51:dc:b2:bf:08:ec:15:5d:b3:5e:25:35:02:05:49:
                    64:35:8f:09:70:15:2a:d2:e1:5b:b7:0a:24:53:58:
                    99:19:66:cd:27:29:89:f9:c1:02:04:b4:97:e9:65:
                    8d:8d:d2:f4:65:6b:b9:ac:d6:e0:8a:92:96:71:a4:
                    b9:41:b1:a3:41:86:0a:22:f2:f1:68:ca:0c:6b:fe:
                    b8:91:b6:82:1f:0c:e0:cf:25:1d:64:ca:f7:85:91:
                    f1:f9:a5:79:8b:a4:fa:4b:bd:41:6b:96:4b:b2:a9:
                    94:9d:d0:6e:74:8c:bd:dd:0a:0b:66:9b:8e:df:2d:
                    f8:34:b1:1a:73:36:d9:ab:b4:f0:19:a9:2c:b9:ed:
                    6c:8a:70:a4:de:4c:df:d6:37:28:27:31:ff:d4:73:
                    5e:88:1f:bc:b8:97:45:2e:60:ae:03:47:f5:9b:59:
                    da:e7:a3:ac:c3:e0:73:80:1e:2d:8e:a5:17:e1:96:
                    b5:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:E4:3B:F5:49:4B:B9:22:0E:81:C1:56:25:0A:AC:03:42:C3:B7:58
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c96d5347-7bf9-4984-b298-4dee0ceb88ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fff:8060::/48

    Signature Algorithm: sha256WithRSAEncryption
         c9:3c:f6:c8:08:5b:16:67:56:f8:9e:46:86:18:6d:a4:b0:28:
         66:35:10:d3:90:fa:93:c2:04:4b:49:4b:41:12:5d:53:59:64:
         45:e4:90:c5:6f:a1:cf:7f:8a:34:98:c3:d4:a3:60:c9:79:9a:
         b1:44:ed:ca:d2:86:70:1f:47:b3:87:25:95:14:9d:ef:66:aa:
         e4:9b:16:e5:6c:c6:64:8d:1d:18:0e:e0:89:00:fd:fe:56:23:
         0d:13:3e:75:c7:c3:0a:cc:e8:8d:25:ca:fc:17:08:00:ab:ac:
         00:c8:33:6e:8e:6f:67:60:9e:f1:ba:0b:84:f1:4c:99:62:5e:
         28:b7:1c:12:e2:bb:1a:d2:86:8b:56:12:80:df:8e:9b:ab:4e:
         32:ef:fc:6d:ba:fb:8d:12:98:23:ed:f5:c5:3e:56:4a:9c:9c:
         78:fa:51:ab:2f:0c:f8:cb:bf:56:bf:11:9c:3d:a5:43:93:88:
         c4:50:13:19:5c:52:1d:59:4f:4d:55:d5:f3:04:33:da:36:86:
         77:6d:be:26:f3:76:14:c0:50:25:ee:ff:9c:d9:d4:11:05:96:
         27:f1:5a:3e:ba:9c:c2:9f:8d:16:48:10:e2:bc:89:5e:c5:9b:
         98:be:3e:33:d7:30:b1:13:69:36:87:82:ae:b4:95:c5:a6:59:
         99:f3:2d:27
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Aug 3 05:41:37 2026 by rpki-client