Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fa479551-ef28-4c90-bd11-c963f9b683b2.roa
File:                     fa479551-ef28-4c90-bd11-c963f9b683b2.roa (raw, json)
Hash identifier:          wKHU0+JTPne0hgN9tOXxIjWzI3QV3wkzUVG7DRr7nhc=
Subject key identifier:   2F:10:FC:4E:D2:AA:1E:8B:F3:BF:ED:67:BC:BA:E3:FF:AB:04:AF:B8
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       78CC2BEC4B9D96020FB54124EA3ADD13717A0C1E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fa479551-ef28-4c90-bd11-c963f9b683b2.roa
Signing time:             Wed 17 Jun 2026 16:02:21 +0000
ROA not before:           Wed 17 Jun 2026 16:02:21 +0000
ROA not after:            Tue 15 Sep 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f10:2800::/37 maxlen: 37
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 02 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:cc:2b:ec:4b:9d:96:02:0f:b5:41:24:ea:3a:dd:13:71:7a:0c:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun 17 16:02:21 2026 GMT
            Not After : Sep 15 23:59:59 2026 GMT
        Subject: serialNumber=c8ff1819a05ddf55eb3c181179c1cd1794d937a4b24748a4c632d3181692244f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:5d:e1:f8:09:54:d5:a5:cc:27:07:92:22:db:
                    6f:b1:91:53:57:df:aa:75:d9:8d:b5:26:ac:82:8f:
                    aa:80:d3:3d:e8:47:c1:a1:01:e8:ca:3d:1c:2f:6f:
                    5a:bc:d3:01:da:ba:3c:d5:bf:d9:fb:23:1b:4c:8c:
                    09:47:3a:ea:5c:f1:f3:35:6d:eb:43:f1:c7:98:da:
                    0e:35:9f:4a:78:12:2b:9b:92:f4:c9:95:5a:4d:cb:
                    34:b3:82:6e:ce:77:89:8e:d0:2a:eb:d2:2b:6f:1c:
                    a7:8b:66:c4:a5:8a:91:03:22:dd:89:36:c8:89:e6:
                    6c:c6:a6:18:d2:d3:1d:1f:1c:3a:3e:72:29:e2:00:
                    4d:56:57:2a:f9:5d:91:22:30:82:97:f1:c2:00:eb:
                    93:a6:27:d3:64:10:de:6c:8b:27:0e:15:a4:ff:ac:
                    f8:23:95:33:1d:d8:89:18:7c:3a:01:d0:08:9f:68:
                    22:d4:48:da:1d:52:a6:a2:bf:7b:3a:28:7e:b8:ac:
                    b8:d4:05:c6:42:6a:de:9c:cc:53:96:73:6e:79:72:
                    b6:3b:88:e0:5c:38:5b:f0:1e:b3:5a:b2:43:74:2b:
                    3a:1b:ff:2c:dc:ff:f9:1e:2a:80:d5:74:55:4e:de:
                    6a:3a:c6:cc:49:19:df:02:8e:8f:28:a1:73:11:2c:
                    3e:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:10:FC:4E:D2:AA:1E:8B:F3:BF:ED:67:BC:BA:E3:FF:AB:04:AF:B8
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fa479551-ef28-4c90-bd11-c963f9b683b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f10:2800::/37

    Signature Algorithm: sha256WithRSAEncryption
         21:e8:69:47:e9:2d:ad:8b:05:ea:fd:fd:f7:c9:e3:1b:7e:53:
         25:da:a9:8b:48:cf:1c:07:04:eb:80:99:ad:98:16:0d:ae:b7:
         9f:78:e8:94:5b:6b:a9:ce:70:f4:4d:23:7b:7d:e4:43:f3:61:
         0d:52:dc:c7:8a:8e:00:61:55:91:21:bd:b7:bb:d8:c3:db:08:
         f5:20:cd:96:c6:ff:f2:ba:2f:d3:a5:16:71:3c:3e:f1:ec:3c:
         b4:55:22:8e:b0:59:18:13:2d:97:b8:33:92:c8:e3:f9:23:75:
         44:a5:bd:59:84:86:f0:90:e6:44:90:b2:58:80:8f:ac:4b:a5:
         6e:9e:de:b6:66:c0:56:7d:5c:a2:98:98:a6:10:a2:07:48:6c:
         23:2d:fb:93:97:ed:00:cc:90:7c:7e:03:4c:3a:5d:16:1d:a6:
         c0:aa:b7:b6:26:8e:5a:7c:d1:82:9f:92:04:d4:b6:78:3f:a2:
         fb:6d:2c:67:84:d8:2a:cd:ee:88:7f:47:ad:3b:a3:7e:28:f9:
         45:b7:52:dd:05:95:a9:4c:17:d9:5e:f1:c7:30:0a:45:4e:f4:
         85:7c:fd:c9:f1:a7:df:f2:04:ab:19:d0:cb:b3:3b:b3:96:85:
         c5:74:c2:ff:8b:51:ca:cd:77:f4:4b:7b:d8:49:c3:d0:82:66:
         12:0b:e8:e5
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUeMwr7EudlgIPtUEk6jrdE3F6DB4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNjE3MTYwMjIxWhcNMjYwOTE1MjM1OTU5
WjB6MUkwRwYDVQQFE0BjOGZmMTgxOWEwNWRkZjU1ZWIzYzE4MTE3OWMxY2QxNzk0
ZDkzN2E0YjI0NzQ4YTRjNjMyZDMxODE2OTIyNDRmMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQD3XeH4CVTVpcwnB5Ii22+xkVNX36p12Y21JqyCj6qA0z3o
R8GhAejKPRwvb1q80wHaujzVv9n7IxtMjAlHOupc8fM1betD8ceY2g41n0p4Eiub
kvTJlVpNyzSzgm7Od4mO0Crr0itvHKeLZsSlipEDIt2JNsiJ5mzGphjS0x0fHDo+
ciniAE1WVyr5XZEiMIKX8cIA65OmJ9NkEN5siycOFaT/rPgjlTMd2IkYfDoB0Aif
aCLUSNodUqaiv3s6KH64rLjUBcZCat6czFOWc255crY7iOBcOFvwHrNaskN0Kzob
/yzc//keKoDVdFVO3mo6xsxJGd8Cjo8ooXMRLD63AgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQULxD8TtKqHovzv+1nvLrj/6sEr7gwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2ZhNDc5NTUxLWVmMjgtNGM5MC1iZDExLWM5NjNmOWI2ODNiMi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgMmAB8QKDANBgkqhkiG9w0BAQsFAAOCAQEAIehpR+ktrYsF6v3998njG35T
Jdqpi0jPHAcE64CZrZgWDa63n3jolFtrqc5w9E0je33kQ/NhDVLcx4qOAGFVkSG9
t7vYw9sI9SDNlsb/8rov06UWcTw+8ew8tFUijrBZGBMtl7gzksjj+SN1RKW9WYSG
8JDmRJCyWICPrEulbp7etmbAVn1copiYphCiB0hsIy37k5ftAMyQfH4DTDpdFh2m
wKq3tiaOWnzRgp+SBNS2eD+i+20sZ4TYKs3uiH9HrTujfij5RbdS3QWVqUwX2V7x
xzAKRU70hXz9yfGn3/IEqxnQy7M7s5aFxXTC/4tRys139Et72EnD0IJmEgvo5Q==
-----END CERTIFICATE-----
Generated at Wed Jul 1 06:19:51 2026 by rpki-client