Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f6514ce9-596d-4d54-9813-69d4702c8a11.roa
File:                     f6514ce9-596d-4d54-9813-69d4702c8a11.roa (raw, json)
Hash identifier:          1YtRvQo5woDizuszhu+UocQNxQn2MmTXAXsPjIkvgjY=
Subject key identifier:   18:05:E4:CF:14:EC:41:9B:BF:8C:0D:8F:36:B8:EC:6A:3F:A8:0E:72
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       66646193BA1CAE4ABA9BE81CF5337883B50273
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f6514ce9-596d-4d54-9813-69d4702c8a11.roa
Signing time:             Fri 31 Jul 2026 01:20:11 +0000
ROA not before:           Fri 31 Jul 2026 01:20:11 +0000
ROA not after:            Thu 29 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff7:5000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:64:61:93:ba:1c:ae:4a:ba:9b:e8:1c:f5:33:78:83:b5:02:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 31 01:20:11 2026 GMT
            Not After : Oct 29 23:59:59 2026 GMT
        Subject: serialNumber=851e8880ddb1d112d8e8e0f4c3f49fba9d0b42b82e9e991a38f569b56c212afc, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:7e:ff:e3:f9:bd:7d:bf:65:67:1c:2d:e9:4a:
                    a8:63:90:19:59:cb:3c:fb:42:7f:e1:39:cd:09:71:
                    c6:41:42:b4:b6:97:76:c7:9e:2f:b0:b1:d1:1f:c2:
                    4a:30:aa:87:f7:6d:06:2c:6f:94:ae:89:a2:14:ef:
                    65:f6:60:53:c2:58:33:e9:d1:91:70:ed:3b:0d:09:
                    80:4c:3d:0c:fc:48:e0:08:b1:4f:8c:63:fa:26:b0:
                    2e:5f:da:48:10:3b:75:6c:2b:3e:f9:1e:35:87:42:
                    90:63:5b:ff:9d:e3:49:be:89:5e:c7:91:53:68:01:
                    c8:68:3d:74:f4:60:bf:f5:33:1a:06:93:1a:bb:be:
                    2b:29:b0:f6:a4:1f:14:99:7f:86:77:28:74:da:c8:
                    10:09:8b:c4:fa:1d:bb:f5:1c:88:e6:c5:59:fc:09:
                    0e:91:dd:e2:9d:c3:b0:9b:32:94:21:60:27:40:0e:
                    c7:5e:4f:3a:11:b1:5a:8b:49:97:34:6b:86:4d:e0:
                    51:d0:c8:b5:57:57:64:cf:15:06:63:6d:d2:90:a2:
                    68:6a:7f:f4:74:b8:b4:c7:d5:2e:cd:7b:a0:a9:0e:
                    94:1a:dd:bd:c8:07:12:1f:bf:84:c8:bb:c1:9f:e8:
                    86:06:14:36:39:9c:9b:2d:b7:e1:b3:51:33:e1:ab:
                    b8:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:05:E4:CF:14:EC:41:9B:BF:8C:0D:8F:36:B8:EC:6A:3F:A8:0E:72
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f6514ce9-596d-4d54-9813-69d4702c8a11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff7:5000::/40

    Signature Algorithm: sha256WithRSAEncryption
         49:2d:7c:09:73:01:e0:e7:21:43:df:f7:6e:c5:66:14:d2:25:
         2c:67:fb:01:4d:04:59:d2:14:96:4e:92:23:a5:be:ec:66:b4:
         84:43:97:50:e7:5f:7e:0c:d2:b6:b6:31:90:be:f9:45:01:2f:
         1a:f6:ac:e7:f9:1d:57:4b:50:13:f3:f7:bc:23:08:37:c2:92:
         f3:45:b1:ee:2a:cf:cf:6b:14:ec:9e:17:4f:1d:b3:97:65:32:
         7d:fd:ff:f6:f2:52:6c:bc:83:d8:ae:c2:b4:27:07:f9:20:d2:
         82:fd:14:91:cf:2c:1c:33:9c:02:9e:56:50:79:94:df:f0:f6:
         6a:5d:fa:7d:a1:ee:54:2a:4f:69:46:c5:dc:b1:20:1b:3c:d9:
         3f:63:73:09:2b:6f:77:6b:e6:38:be:57:1e:0c:ad:ee:0b:8c:
         cc:51:3d:73:46:f8:28:1d:d2:43:4e:ad:92:a6:e3:09:e6:f1:
         10:70:e3:06:1d:fe:0d:12:d1:0b:0b:ce:13:c0:7b:e2:e5:df:
         d8:c0:49:f8:c0:23:43:0d:c2:f9:22:88:09:a5:d0:dc:c4:83:
         7a:f3:94:f8:98:cf:d2:e5:fd:e6:46:37:d4:bf:e3:9b:15:2d:
         a7:1b:0a:f0:51:1c:6f:7c:78:21:6f:4a:85:7a:f9:4e:fe:8a:
         29:7a:bf:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 13:20:44 2026 by rpki-client