Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ed4e7a7c-82b0-452d-b394-75e2f2f1ca9d.roa
File:                     ed4e7a7c-82b0-452d-b394-75e2f2f1ca9d.roa (raw, json)
Hash identifier:          YaJ6QqtlCtJysVjcrF/lhdg85YigSHwIKbcr35oaoKc=
Subject key identifier:   37:C4:71:94:7F:9E:F2:98:B9:D6:72:C7:31:12:B2:9A:FE:A2:8F:28
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1898E5A1DA7114609E63659E91645533FAEE8201
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ed4e7a7c-82b0-452d-b394-75e2f2f1ca9d.roa
Signing time:             Sat 02 May 2026 00:40:13 +0000
ROA not before:           Sat 02 May 2026 00:40:13 +0000
ROA not after:            Fri 31 Jul 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff3:2080::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:98:e5:a1:da:71:14:60:9e:63:65:9e:91:64:55:33:fa:ee:82:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May  2 00:40:13 2026 GMT
            Not After : Jul 31 23:59:59 2026 GMT
        Subject: serialNumber=5a17907dae9ca105104d801c5d30f20700d0eaab0f5f5dd5840fd902944c734e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:77:c9:8a:2c:15:5c:e0:ca:61:59:41:58:75:
                    57:c8:b8:70:23:d0:43:bc:4a:b7:73:5f:e2:df:27:
                    c7:2f:50:1b:05:41:9a:a4:1d:96:5d:35:73:78:91:
                    1e:d6:a3:e2:5d:95:d3:eb:0f:71:36:8d:ef:f2:44:
                    17:20:0b:3a:86:9b:a2:2d:62:fe:98:fc:f6:a9:df:
                    ab:bb:45:76:ea:14:0f:ef:79:4b:6b:ef:ab:4a:d4:
                    15:8e:ca:e6:a3:94:ef:07:63:f1:bd:e7:ae:a6:7e:
                    84:4e:19:06:b9:30:ef:e8:8a:45:a7:83:52:b7:13:
                    a1:99:16:09:4a:8d:7e:a6:5d:fe:79:06:84:bf:69:
                    71:f6:67:f4:05:0b:25:19:79:7d:dc:71:07:47:97:
                    7b:78:18:fc:ce:b3:8a:1f:be:92:dd:d8:23:30:bb:
                    b1:be:67:fe:d0:e3:c7:38:ca:80:40:25:69:fc:bc:
                    1d:e8:e4:7e:9d:6e:42:0c:cb:05:3f:f2:75:61:a4:
                    6d:58:94:37:ac:08:11:45:84:f2:76:56:3d:2b:03:
                    df:46:d4:fb:e1:28:5f:0c:81:2a:3f:02:5a:af:b9:
                    b2:e5:fb:cf:e2:bc:e1:ba:eb:70:0e:12:ad:14:89:
                    d9:55:ba:b1:58:26:e7:ca:2b:57:aa:a2:c9:24:27:
                    f2:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:C4:71:94:7F:9E:F2:98:B9:D6:72:C7:31:12:B2:9A:FE:A2:8F:28
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ed4e7a7c-82b0-452d-b394-75e2f2f1ca9d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff3:2080::/46

    Signature Algorithm: sha256WithRSAEncryption
         0f:55:ff:25:8c:c2:b0:93:db:31:95:e7:1b:ca:fe:4a:9e:01:
         05:fe:72:fb:de:b4:0a:fd:98:5a:fa:7e:37:fe:31:f1:2d:3d:
         34:53:f6:5e:3d:7c:40:43:d2:3f:1d:3b:ca:6a:85:27:c5:05:
         ef:d0:48:96:b1:64:a7:ed:af:dc:39:ad:4a:8f:15:da:87:d8:
         bc:be:4c:5e:db:c9:8b:ac:db:38:40:50:c4:cc:47:1e:72:59:
         5d:2b:4f:4b:39:f9:53:9d:5a:f3:81:41:e2:9e:5e:d9:7e:a0:
         a1:29:e1:da:ca:13:04:8c:70:21:19:2f:e8:c9:c6:6f:77:cc:
         16:35:bd:f0:a6:f6:a3:f1:cb:bb:a1:1a:9d:62:87:2a:96:56:
         8c:a5:51:d7:f5:a4:29:29:4f:99:79:05:9c:32:d8:51:2a:08:
         4d:8a:55:d4:3b:30:d1:d4:43:8e:dd:8f:93:2e:ab:4d:9f:a1:
         8a:61:86:12:d3:d9:70:ee:da:36:46:44:d5:f5:bd:f6:2e:ae:
         3d:73:f2:1c:d0:f5:0a:e0:cf:ee:75:76:d0:4c:16:27:3c:5c:
         9f:38:f0:d2:60:b6:c0:a1:6b:72:5d:b4:ee:f0:e2:41:70:90:
         55:ea:cd:dd:4b:ae:88:8b:96:da:00:ec:ee:af:e6:be:01:5d:
         a6:04:3c:0c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon May 4 21:37:22 2026 by rpki-client