Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1df7e4e3-11e9-457d-8c33-353a0845dc63.roa
File:                     1df7e4e3-11e9-457d-8c33-353a0845dc63.roa (raw, json)
Hash identifier:          gdb6huwM315jrpwRr0U1tDIFVFexjyUn7L9vzxYh7J4=
Subject key identifier:   BE:56:B7:C0:6B:9C:5B:EB:8A:4C:59:C5:38:5E:5B:E7:64:7A:FC:5A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       24FC1DC3DA47406823EE69DCE35488FC8E5D4C99
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1df7e4e3-11e9-457d-8c33-353a0845dc63.roa
Signing time:             Tue 24 Feb 2026 00:41:03 +0000
ROA not before:           Tue 24 Feb 2026 00:41:03 +0000
ROA not after:            Mon 25 May 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1f00:8060::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:fc:1d:c3:da:47:40:68:23:ee:69:dc:e3:54:88:fc:8e:5d:4c:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 24 00:41:03 2026 GMT
            Not After : May 25 23:59:59 2026 GMT
        Subject: serialNumber=d8bab092e704f6f7cb22fc324808b87a744aa935db3e55884689b0feca6256d4, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:aa:cc:51:12:ff:81:7b:0d:a2:f3:0e:46:7b:
                    1d:07:11:87:a6:49:f8:8d:44:dc:c2:ce:e3:63:29:
                    5e:97:a1:f8:ea:a2:b5:78:8b:a3:9a:a3:96:26:ce:
                    1a:65:86:48:e1:60:cf:1a:3d:1d:f7:59:fd:84:ab:
                    df:60:9f:94:71:7d:7b:86:ba:47:bd:8d:96:62:0d:
                    81:0d:8d:f6:e7:c9:ba:97:56:35:fe:ff:e5:00:a3:
                    ef:b7:16:69:6d:c2:1b:50:ff:b2:76:11:b3:df:64:
                    49:a6:34:77:75:29:ed:4b:19:02:13:60:d5:82:b3:
                    3c:52:41:e1:e2:9b:47:88:a3:fb:89:01:e1:d1:10:
                    e9:df:41:6d:ec:e1:6a:49:be:2c:41:2a:82:69:46:
                    85:eb:07:d5:76:86:bc:01:44:c1:f4:c8:ea:34:5c:
                    dc:fb:52:68:40:3e:1d:ec:d0:88:5f:2a:3f:0e:4e:
                    75:f6:7e:f3:a5:22:83:11:99:e3:3b:52:e4:d0:02:
                    e0:2f:3f:e0:0e:6c:94:47:2f:39:29:d5:9c:f5:8d:
                    8f:dc:15:e4:2c:0c:84:13:ba:de:a4:d1:23:e7:80:
                    42:1b:b1:d1:31:e1:72:85:69:3e:65:48:7b:16:ab:
                    5e:4a:f6:2b:dc:c2:21:e4:e5:88:03:09:3f:41:b5:
                    d1:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:56:B7:C0:6B:9C:5B:EB:8A:4C:59:C5:38:5E:5B:E7:64:7A:FC:5A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1df7e4e3-11e9-457d-8c33-353a0845dc63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f00:8060::/48

    Signature Algorithm: sha256WithRSAEncryption
         16:ce:48:59:2a:a9:ce:2f:33:9a:72:d5:fd:4f:cf:cd:d5:70:
         be:eb:0b:7d:ff:62:a7:d1:20:bc:45:5d:06:e1:7c:0c:64:68:
         96:15:f5:6f:2e:53:9f:4c:b2:07:eb:80:11:f9:c8:6b:4e:a7:
         96:1a:50:7d:9f:51:27:e3:4e:c3:fc:0c:68:1a:27:f9:dd:05:
         c5:31:be:4c:c3:82:17:23:04:b5:f1:df:9b:22:b5:73:e3:d2:
         1a:6f:ff:c5:5f:05:b6:63:96:36:1d:62:c2:79:d2:39:d7:9a:
         e9:49:4a:20:5b:f1:bd:e8:ad:22:bb:d5:4a:9d:4d:69:14:ea:
         bc:00:b5:04:49:ff:a5:9d:fe:3e:8b:cb:bd:21:57:22:e5:c9:
         b1:a8:a3:30:b9:a7:d8:fb:37:46:a1:6e:cd:24:83:10:d5:b8:
         68:c2:19:39:68:74:7d:f4:ca:03:29:74:07:e3:f5:66:22:2f:
         52:3b:57:04:3d:94:57:26:19:c2:98:0a:4b:76:3f:a1:0e:fc:
         a4:0b:87:13:0d:54:af:6a:a4:dc:05:77:c4:5d:98:a5:cf:6d:
         e7:71:66:fb:63:7e:ca:3d:eb:93:db:97:86:49:cd:5a:c4:ff:
         44:06:e5:e3:ba:46:3e:ba:1f:73:ff:52:45:aa:55:81:39:1f:
         f5:4f:9e:66
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:19:36 2026 by rpki-client