Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/0e4e4e09-de1b-4dfe-ba50-5a5abf40de13.roa
File:                     0e4e4e09-de1b-4dfe-ba50-5a5abf40de13.roa (raw, json)
Hash identifier:          3yUN1yS/+Q75jGbnVmJTnpfs32cmNapcHG4Ou+wtLP0=
Subject key identifier:   EE:85:B9:F6:6A:FE:A7:A8:36:5D:18:B9:9F:FC:54:8F:C6:4C:4C:FB
Certificate issuer:       /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial:       56B420B989699224C0753D1B7636E1EBA60F9B6D
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/0e4e4e09-de1b-4dfe-ba50-5a5abf40de13.roa
Signing time:             Mon 17 Aug 2026 00:00:06 +0000
ROA not before:           Mon 17 Aug 2026 00:00:06 +0000
ROA not after:            Sun 15 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2606:8140::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:b4:20:b9:89:69:92:24:c0:75:3d:1b:76:36:e1:eb:a6:0f:9b:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
        Validity
            Not Before: Aug 17 00:00:06 2026 GMT
            Not After : Nov 15 23:59:59 2026 GMT
        Subject: serialNumber=f820745309e60edc8a0cf9ebd5beb1dff2e5ea094714a77b4efebc3c2bd240af, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:65:b2:b3:16:3e:e1:9a:ab:8a:b5:5d:8c:6f:
                    b9:6c:df:d3:05:ad:9c:4e:58:eb:b8:ba:3c:f6:44:
                    d1:f0:9f:7a:77:6f:34:6c:8d:aa:59:22:4b:34:97:
                    46:cc:98:53:15:7c:2f:79:d2:10:dc:6d:26:40:af:
                    53:bf:03:3c:99:59:17:de:3d:05:a9:4f:f9:eb:8b:
                    a5:be:eb:3c:28:58:e5:69:cd:42:ff:9b:2e:03:12:
                    a7:53:e1:1d:7e:5c:6e:c1:4c:c5:95:cd:9e:45:48:
                    58:66:af:7d:ac:0e:a4:c7:bc:c0:4d:96:b4:9d:4c:
                    9a:87:d7:fa:ba:cf:ea:be:b3:17:2e:33:c8:1b:43:
                    8d:31:43:0f:58:5a:e9:7c:04:62:ce:6f:32:d1:e9:
                    d1:06:91:da:ba:f3:12:43:e8:56:5b:22:af:7c:5a:
                    15:44:c1:fc:8b:8b:13:2f:0e:eb:54:51:40:fb:da:
                    b0:5c:5c:bc:2f:89:cc:2c:ba:82:80:65:59:78:ce:
                    cb:9c:71:ca:74:fd:95:6c:39:34:95:94:25:38:8b:
                    79:0c:58:99:bb:58:3d:98:d4:0e:26:3d:d2:2e:12:
                    62:18:72:40:79:dd:61:f3:c1:fd:e2:4b:4d:fe:10:
                    67:d9:a3:41:d9:3a:1a:37:09:45:23:73:95:ec:8a:
                    35:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:85:B9:F6:6A:FE:A7:A8:36:5D:18:B9:9F:FC:54:8F:C6:4C:4C:FB
            X509v3 Authority Key Identifier:
                keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/0e4e4e09-de1b-4dfe-ba50-5a5abf40de13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:8140::/32

    Signature Algorithm: sha256WithRSAEncryption
         44:6e:af:d3:5f:5a:8e:3e:1c:54:64:81:fb:e4:74:3b:74:60:
         f5:02:8e:94:62:dc:b9:f0:fb:85:bd:24:1b:11:c1:3a:c2:56:
         2b:2e:7c:8c:b0:f8:eb:60:0e:9b:f0:2e:0f:92:0f:cf:75:86:
         ee:0d:80:80:31:9b:d8:19:00:b9:31:40:de:b0:56:72:fd:6c:
         7f:04:6d:36:ec:4a:eb:89:4e:c2:55:3a:c4:51:12:f6:7b:0c:
         57:e9:6a:5b:31:af:45:35:a8:cd:f8:4d:75:bd:46:61:b8:fe:
         7e:37:49:ec:df:43:6c:86:dd:17:19:5b:6b:ec:0d:29:45:89:
         3b:74:f6:47:30:30:4e:34:82:ea:f7:62:11:ec:70:c3:c6:93:
         65:30:ef:8f:ec:9d:ac:02:fe:7e:7e:35:93:3c:8b:43:99:95:
         72:e8:ec:89:66:ca:bd:bc:d2:b4:20:df:fe:73:2e:ee:f1:18:
         10:49:b7:2c:22:5b:fe:5e:b7:29:00:a0:d3:4e:e4:92:e8:a8:
         b3:07:a0:cc:53:98:d9:a4:57:8f:db:ec:8f:f4:f1:d8:09:8f:
         67:e6:d8:22:ef:1f:29:28:78:cc:1b:7c:6e:9d:c0:3d:c1:56:
         4c:56:41:3d:9c:13:42:8a:5c:24:b1:3d:01:08:ce:8e:9d:73:
         b4:12:c9:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 00:14:36 2026 by rpki-client