Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fe977e9f-7f1c-441f-9a15-bf1e23e5150d.roa
File:                     fe977e9f-7f1c-441f-9a15-bf1e23e5150d.roa (raw, json)
Hash identifier:          NdSZdy1PUVK07xR4LfcCgisurbt3v7XVRL9+NJ7mm6k=
Subject key identifier:   CD:9B:EC:0A:1F:EB:04:5F:1E:56:F3:62:45:32:1B:69:CF:44:24:ED
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7A95300863E3343140192CC9CE68DCD43B89540E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fe977e9f-7f1c-441f-9a15-bf1e23e5150d.roa
Signing time:             Fri 07 Aug 2026 00:30:20 +0000
ROA not before:           Fri 07 Aug 2026 00:30:20 +0000
ROA not after:            Thu 05 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f16:c000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:95:30:08:63:e3:34:31:40:19:2c:c9:ce:68:dc:d4:3b:89:54:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  7 00:30:20 2026 GMT
            Not After : Nov  5 23:59:59 2026 GMT
        Subject: serialNumber=1d2dbb9d6ce6ce8e7d768af3519c1ca0154888c994b18e18f2c5912f327c2e3d, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:5d:de:ce:f1:e6:cc:54:63:41:e3:96:f9:9d:
                    07:b8:3d:e2:41:6d:7c:ec:e9:0b:af:d1:1d:46:f5:
                    d6:7d:3e:42:7e:2a:d9:a3:b1:f8:79:ff:2a:eb:6f:
                    87:d7:bd:83:ad:47:90:b4:99:56:24:f3:4b:13:3b:
                    0c:f9:85:f6:a5:bd:7d:44:7c:b0:6b:77:37:2f:21:
                    38:29:c4:71:93:a5:77:77:08:e6:af:9a:bb:fc:53:
                    70:6f:69:14:e8:cb:a7:0e:db:c5:34:00:c8:eb:7c:
                    66:29:27:51:22:3d:1d:ac:19:57:72:d3:65:d1:83:
                    2f:99:73:6f:2a:45:30:74:c0:3a:dc:07:01:45:c3:
                    cc:83:08:dd:29:fb:ba:b7:9f:91:ac:af:73:3e:c8:
                    e2:28:70:14:e1:7b:f7:fe:9d:79:9d:fa:22:4f:d9:
                    f8:69:ac:9e:8a:f6:be:ae:88:16:d4:6e:b8:9a:d4:
                    c3:51:67:5c:39:c5:63:7c:8a:24:48:b4:6f:08:1d:
                    91:6f:25:1d:47:a7:ad:09:3f:54:cf:f3:86:8d:4c:
                    b9:f3:a5:c9:9e:0d:5f:3d:e3:93:74:12:0d:c5:bb:
                    38:4a:2f:a4:fe:9a:30:05:5c:40:51:bf:fc:c6:4c:
                    84:1c:72:62:e4:39:03:0f:f1:45:2a:38:29:fe:89:
                    be:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:9B:EC:0A:1F:EB:04:5F:1E:56:F3:62:45:32:1B:69:CF:44:24:ED
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fe977e9f-7f1c-441f-9a15-bf1e23e5150d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f16:c000::/36

    Signature Algorithm: sha256WithRSAEncryption
         06:53:de:fd:65:52:5f:a0:44:55:b3:1c:e7:70:f2:99:17:a2:
         71:f5:07:37:fc:64:7e:0e:d5:d9:ae:74:b6:d0:b8:c6:eb:0e:
         8b:2e:1c:da:0a:3f:7b:77:5f:ba:d0:31:56:eb:d2:50:ed:63:
         03:91:29:ec:80:df:ff:6d:7b:b8:5d:c4:2c:67:81:10:80:85:
         02:cd:26:06:3e:16:cc:ca:de:d9:3f:cc:ac:a0:6d:76:29:f4:
         20:09:c5:06:fa:8c:f9:f6:80:1d:6a:fd:a7:30:79:27:31:b6:
         8d:6d:7f:65:40:70:3e:b4:4c:34:8c:da:d2:04:3c:69:78:c3:
         ee:ba:93:d2:4d:bb:06:95:8f:54:0f:90:56:99:63:d2:47:f0:
         05:7b:94:e6:65:62:1e:3d:a7:a3:15:49:c0:66:2c:06:13:aa:
         7c:06:f8:ae:92:66:50:d0:bf:5b:84:2d:b2:12:85:f0:62:fc:
         9c:e0:cf:3b:f9:fd:21:08:42:ee:0a:cb:8f:55:bb:80:38:3a:
         fc:10:7a:67:0f:89:04:88:31:32:a4:6e:5e:30:15:d5:ac:c0:
         df:e3:4a:c8:5f:46:0e:9a:d8:e5:b8:27:42:d0:bc:66:c4:22:
         01:d8:d6:e3:49:64:ea:06:48:39:75:e4:7b:51:da:d7:d1:1b:
         51:20:0c:0e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Sep 15 13:23:12 2026 by rpki-client