Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/06ea2b4a-6dfc-489d-b8f1-dc7f93cac1c3.roa
File:                     06ea2b4a-6dfc-489d-b8f1-dc7f93cac1c3.roa (raw, json)
Hash identifier:          TFnMU3ZcfWrPVFU6gLv4W4AeUC0uI8ZZxzcAbiFM4Sk=
Subject key identifier:   E9:96:81:C6:A0:A8:3C:8C:99:D7:93:FB:25:69:37:BC:21:77:39:74
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       0352630952AF614D378B243189F47DDEFEE017F3
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/06ea2b4a-6dfc-489d-b8f1-dc7f93cac1c3.roa
Signing time:             Mon 26 Oct 2026 04:20:39 +0000
ROA not before:           Mon 26 Oct 2026 04:20:39 +0000
ROA not after:            Sun 24 Jan 2027 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:f0fb:e900::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 28 Oct 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:52:63:09:52:af:61:4d:37:8b:24:31:89:f4:7d:de:fe:e0:17:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Oct 26 04:20:39 2026 GMT
            Not After : Jan 24 23:59:59 2027 GMT
        Subject: serialNumber=07220def195896c325f9f27a845c17a8545765cdfb6ae89372a941b84ef8f4e6, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:e5:40:2f:4b:d5:ca:b8:92:07:64:cb:ff:fb:
                    20:c8:f8:06:06:67:ab:70:cc:f9:76:8e:06:10:05:
                    2d:74:bb:ed:f4:32:47:f2:79:a7:ab:7b:52:fa:70:
                    f1:d0:29:c0:c5:e1:ff:a9:fc:8f:fc:ee:3d:1a:93:
                    b1:1d:6c:1b:f7:0d:66:93:ee:89:bc:e2:b0:09:d3:
                    59:c1:68:3a:3f:c1:c8:9a:2b:fe:c5:73:3d:f2:9f:
                    1e:85:d2:31:11:92:85:44:12:84:b9:b7:d9:24:c2:
                    15:fc:d9:0e:0e:32:8f:b4:35:26:ec:aa:54:0f:a7:
                    04:73:0c:c0:66:9f:0a:64:f3:db:9f:f7:f8:00:16:
                    f3:2e:8a:82:af:8b:48:39:2a:35:9c:cd:12:34:52:
                    ae:02:e1:14:f4:b0:cb:5e:89:6e:07:1e:9f:b0:fc:
                    b1:2f:85:fb:81:e9:06:a1:5c:d1:d8:27:c9:c8:50:
                    7b:e8:21:20:6e:ac:7e:d6:1d:67:92:81:2f:b5:20:
                    06:5a:11:6d:e4:00:b9:55:5c:e6:2e:34:be:46:18:
                    a4:9c:ba:11:32:ca:de:9f:fa:72:3b:85:dc:a8:eb:
                    be:71:97:19:77:1e:7d:fd:92:5f:03:0d:56:6a:49:
                    2f:1b:69:21:fc:e9:66:f7:a2:31:ad:39:34:1a:2c:
                    c4:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:96:81:C6:A0:A8:3C:8C:99:D7:93:FB:25:69:37:BC:21:77:39:74
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/06ea2b4a-6dfc-489d-b8f1-dc7f93cac1c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0fb:e900::/42

    Signature Algorithm: sha256WithRSAEncryption
         2e:6d:4c:b4:b8:72:a4:da:eb:1f:57:88:bb:c5:a8:c8:f1:3b:
         df:2b:a6:76:12:be:83:17:3d:66:37:98:0e:41:ae:c7:fc:19:
         a9:8b:e9:c2:4b:16:a3:0c:a2:e6:c9:da:ae:1d:23:fc:e0:22:
         8c:5f:f2:33:81:e4:c4:70:a1:79:77:5f:0a:d8:f5:bc:59:66:
         ed:ed:30:b0:fc:84:af:36:c4:3c:6a:55:b1:35:c7:42:d3:0e:
         ca:a6:b2:cf:d1:36:e6:94:16:04:55:b5:e0:71:9e:ea:7d:63:
         b1:69:37:7a:12:18:12:4e:88:b4:d6:f8:90:47:99:8c:7b:c1:
         c8:dc:03:c7:62:c5:2d:93:39:59:90:b3:69:42:9d:73:84:eb:
         28:47:00:87:b8:b6:7d:71:8e:d4:e5:aa:ef:27:d4:33:12:64:
         eb:aa:5a:c9:60:11:7c:5b:c8:7b:af:13:ce:13:0a:ba:80:63:
         e4:69:ab:09:45:8a:b1:6f:04:bf:7e:77:2e:6b:89:38:c3:ff:
         09:51:63:61:7b:0e:50:56:2b:f8:bd:08:4a:73:d3:86:1f:24:
         56:5b:ed:de:61:2a:1b:08:fb:79:f4:3d:e0:09:5f:16:a2:40:
         d0:0e:f4:44:be:43:12:5d:77:27:5d:24:27:17:1d:aa:1e:5d:
         0d:95:6c:24
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Oct 27 15:29:07 2026 by rpki-client