Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e13dc54c-719d-48df-97ca-6efeb19595ba.roa
File:                     e13dc54c-719d-48df-97ca-6efeb19595ba.roa (raw, json)
Hash identifier:          1eKaCKdmLe/cfaczLpncqqwtF9QHrcYZgSimQ8/nTqU=
Subject key identifier:   84:E0:7A:B9:3F:18:23:83:4A:B4:49:02:F8:17:77:AD:D0:35:EC:7C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3770BAFFF2ACA2A964E4D9C33091A6EE0C50DF8C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e13dc54c-719d-48df-97ca-6efeb19595ba.roa
Signing time:             Wed 09 Sep 2026 16:10:05 +0000
ROA not before:           Wed 09 Sep 2026 16:10:05 +0000
ROA not after:            Tue 08 Dec 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff6:c200::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:70:ba:ff:f2:ac:a2:a9:64:e4:d9:c3:30:91:a6:ee:0c:50:df:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Sep  9 16:10:05 2026 GMT
            Not After : Dec  8 23:59:59 2026 GMT
        Subject: serialNumber=8bbb25f21e6a46cc7bcb3dde6f10f4326b3bac5a700dff8e68ff1d71fd602549, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:58:2c:72:e0:5b:4a:89:a7:46:f2:09:a2:07:
                    95:8a:9d:1e:3e:7b:ee:0d:ac:3f:ea:03:9a:37:47:
                    cf:fe:a4:7c:86:bc:18:49:a9:8d:62:6a:99:8b:ec:
                    d6:1f:25:fd:03:b1:23:73:84:7f:72:05:e2:4c:88:
                    d2:17:32:2b:db:93:ba:22:70:77:b2:5b:e9:55:eb:
                    a3:4e:9b:24:17:3a:2f:5e:41:03:51:6e:92:96:66:
                    f6:d0:dd:58:84:4c:a7:0f:80:ab:eb:fe:e5:5c:e4:
                    08:6e:e7:4a:29:24:62:92:29:b2:78:cd:13:e1:5b:
                    e5:1c:0b:fb:be:28:45:aa:fb:e0:ff:39:62:cc:d6:
                    c3:d5:65:41:cf:cd:e0:c4:e0:4e:99:29:eb:23:d3:
                    26:34:f6:81:e2:39:4e:b4:20:2c:2c:30:c4:b1:10:
                    ca:b6:1c:88:a7:95:19:56:09:dc:0f:8d:15:01:07:
                    c0:7c:d5:0c:dc:90:37:48:d3:21:1d:68:ae:df:2b:
                    9f:6f:5f:b4:72:6e:95:2e:87:ab:c0:51:06:7e:d1:
                    59:be:54:bf:5c:45:b2:ac:3b:f4:e8:26:6a:b9:a5:
                    60:35:f1:87:fd:53:9e:55:fa:73:95:3e:7c:b5:82:
                    e8:0f:d0:5b:54:54:ba:02:21:c0:74:68:2a:bf:36:
                    51:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:E0:7A:B9:3F:18:23:83:4A:B4:49:02:F8:17:77:AD:D0:35:EC:7C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e13dc54c-719d-48df-97ca-6efeb19595ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff6:c200::/40

    Signature Algorithm: sha256WithRSAEncryption
         1c:b9:32:9f:17:76:2c:4c:bf:f8:0d:94:ef:35:ac:10:c6:b2:
         eb:9c:4d:06:f1:a3:e4:5b:d2:8c:bc:e1:03:ba:4c:7a:f8:30:
         4e:93:70:d5:55:5f:37:2c:39:e7:cf:f1:51:09:8f:82:be:bc:
         15:7b:5f:6d:26:38:7d:ec:b9:3a:e8:e1:25:c4:4a:56:e2:1a:
         73:c5:de:20:68:df:94:33:67:78:1d:b3:51:61:ef:2f:ee:e8:
         4e:5b:54:26:60:fb:31:4f:0c:4e:06:40:a1:48:80:46:cb:a0:
         d0:c3:5a:fb:10:af:02:2a:d9:68:7d:03:43:7b:6d:b8:6a:ed:
         cf:20:9a:e9:ce:ae:dc:4a:c5:9a:ea:ec:7e:34:e6:84:f2:3a:
         5f:0d:e5:8d:71:de:9e:e8:ff:5e:52:a0:51:21:7b:84:a9:a8:
         91:49:a7:49:ec:fd:3a:81:a5:2a:19:e4:a2:c7:e0:1d:7e:09:
         85:77:39:7a:29:16:78:1e:78:ad:84:02:e9:1d:36:95:e2:87:
         41:91:ac:50:38:b1:90:e1:47:ed:14:47:86:be:00:78:6b:a9:
         2e:2c:76:07:e9:2a:cc:84:c1:3c:3a:74:20:3d:6a:a2:b4:e6:
         1f:46:39:c7:9f:31:48:9e:6c:5f:37:b6:5c:0b:22:47:b9:a2:
         08:e7:ea:07
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Sep 15 13:55:03 2026 by rpki-client