Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e88e42d9-ad29-4555-92e9-c4375663ec2e.roa
File:                     e88e42d9-ad29-4555-92e9-c4375663ec2e.roa (raw, json)
Hash identifier:          bwBuHusX1ZiXUmpssAk2/Qhc8HRVlCptVjKJ4XcNoEk=
Subject key identifier:   5C:A7:1F:52:38:B2:5A:65:0D:71:0C:F6:B4:46:33:F5:81:9C:3F:3F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       76E7B89A046B4139E91D400785CAFEE2261F19F5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e88e42d9-ad29-4555-92e9-c4375663ec2e.roa
Signing time:             Sat 18 Jul 2026 00:10:08 +0000
ROA not before:           Sat 18 Jul 2026 00:10:08 +0000
ROA not after:            Fri 16 Oct 2026 23:59:59 +0000
asID:                     8987
IP address blocks:        2600:1ff1:5000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:e7:b8:9a:04:6b:41:39:e9:1d:40:07:85:ca:fe:e2:26:1f:19:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 18 00:10:08 2026 GMT
            Not After : Oct 16 23:59:59 2026 GMT
        Subject: serialNumber=4490c68d8d2d0220c60791a81a915e3bb999e9830a2c240254c710731610ad7d, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:fb:4b:00:58:a5:80:ab:3a:37:33:50:15:43:
                    f4:76:df:1e:e0:be:ae:b5:33:f4:99:be:f9:20:fb:
                    b2:0a:bb:85:60:71:92:61:3a:93:21:39:84:f9:e7:
                    78:1d:72:c2:6e:97:10:75:a3:50:24:8b:de:c3:7e:
                    e7:8f:ff:b0:1f:97:86:40:8a:f5:ed:16:7a:c1:21:
                    d6:b9:dd:d5:1d:80:29:8f:47:c5:ff:84:c7:94:38:
                    bf:cb:d6:94:9d:fc:f3:fd:e7:58:52:79:53:78:55:
                    2a:d3:b6:56:be:1f:67:47:28:44:52:2b:80:50:bb:
                    ee:68:19:4a:23:c9:4d:91:30:88:fb:de:26:b1:ec:
                    55:70:09:65:e0:df:48:a6:f2:37:49:e1:c1:fe:41:
                    38:81:8a:18:46:91:25:aa:63:3d:82:60:84:56:17:
                    40:45:c5:8d:2a:73:78:5b:03:cf:57:e8:f8:94:21:
                    44:43:1b:ae:f1:d8:07:fb:0f:8c:23:b3:ee:79:72:
                    a2:12:fa:f0:c3:88:25:b9:89:46:bc:0d:bf:60:02:
                    f5:26:cb:a2:55:79:7e:c2:35:ae:e7:11:5e:be:5c:
                    57:18:81:bd:f5:8d:f0:8c:82:d7:36:f0:17:ce:f8:
                    37:91:6e:6b:be:8d:0c:6e:5b:73:c8:43:45:20:7a:
                    17:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:A7:1F:52:38:B2:5A:65:0D:71:0C:F6:B4:46:33:F5:81:9C:3F:3F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e88e42d9-ad29-4555-92e9-c4375663ec2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff1:5000::/40

    Signature Algorithm: sha256WithRSAEncryption
         1d:55:a0:61:15:bc:f8:b8:fe:57:7e:56:b4:3d:ab:59:62:b7:
         22:ce:4e:7a:79:2d:2e:9e:10:fb:e9:73:25:64:6b:33:ae:6e:
         9f:49:5e:87:67:5a:05:c7:10:b9:42:5c:24:29:02:94:26:90:
         56:54:f1:d4:02:44:6f:0a:74:17:2a:24:14:f4:2a:c8:5c:e1:
         eb:1d:b0:62:70:95:3e:72:f4:70:1f:96:74:7b:22:dd:4b:d1:
         ee:20:86:ea:7e:a2:4e:ae:85:37:30:4b:53:3d:55:4a:b8:15:
         7f:8d:56:23:76:f8:5a:68:43:31:bd:8c:7a:21:67:7c:70:7b:
         ea:d5:bd:c8:1f:ba:b1:f1:c9:c9:e6:2c:ba:e9:28:05:57:22:
         12:cb:51:ad:e8:4c:f5:5c:bf:d1:42:47:81:a0:37:47:06:79:
         94:b2:67:03:09:1f:4c:cc:7e:7a:e4:e7:bc:c6:c4:29:c7:76:
         4e:f6:0a:0b:57:16:02:11:33:1e:5b:ab:7c:7d:6e:bb:f1:b7:
         a0:ec:fa:8e:ac:5a:99:9e:ad:18:e8:c9:a4:62:e0:90:f2:3f:
         93:27:a9:e3:59:85:10:fd:c8:02:1d:cd:d7:b4:dc:84:d2:95:
         0f:39:0b:39:60:44:52:50:24:90:2c:3e:3e:6b:c2:13:04:31:
         9b:b5:2c:72
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jul 19 05:25:53 2026 by rpki-client