Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/386ddf92-5af7-4b7a-9cc3-11b35ff040e9.roa
File:                     386ddf92-5af7-4b7a-9cc3-11b35ff040e9.roa (raw, json)
Hash identifier:          o7dZWqvSfzS0hGw5/8fpZQrawfZaj3HwQCTS5UwrLbc=
Subject key identifier:   F1:22:DB:9C:69:5B:BD:E5:9F:09:84:80:04:EC:29:41:63:73:E0:D4
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       093F2C0027E9C273D371601B2BE523C5612D4848
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/386ddf92-5af7-4b7a-9cc3-11b35ff040e9.roa
Signing time:             Fri 22 May 2026 16:34:13 +0000
ROA not before:           Fri 22 May 2026 16:34:13 +0000
ROA not after:            Thu 20 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fe2:a400::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:3f:2c:00:27:e9:c2:73:d3:71:60:1b:2b:e5:23:c5:61:2d:48:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 22 16:34:13 2026 GMT
            Not After : Aug 20 23:59:59 2026 GMT
        Subject: serialNumber=d04f853c650352d199a2d8de2cca980878b943cab268f8967b8f43525048cf61, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:16:d8:8d:93:83:8e:3e:de:ba:fb:5e:eb:bb:
                    9d:8e:62:56:33:c2:fc:30:51:72:d9:4f:a6:5d:b2:
                    cb:16:db:bb:b6:a7:d8:c4:06:cf:84:d8:96:12:0b:
                    11:47:89:f3:0d:8e:09:27:a0:e7:69:8f:ad:f1:39:
                    04:10:1d:4f:91:76:8c:05:b8:83:19:44:d6:a7:c6:
                    6c:aa:7e:bd:c2:13:c7:02:26:df:cc:30:45:eb:0a:
                    bc:42:9b:44:df:b5:48:84:96:0d:64:fb:a5:55:1d:
                    f5:5a:72:e7:b4:d3:e4:72:3f:3c:7b:13:02:e0:ec:
                    4a:eb:13:4f:7b:14:4b:12:0d:76:88:ea:ef:20:fb:
                    ad:a0:9f:9b:10:1e:95:63:33:ed:ff:2d:d6:a1:aa:
                    2d:fb:64:9c:8e:67:3e:e5:ab:4e:7c:8e:7d:14:77:
                    e8:f0:6f:90:39:14:ca:49:74:be:f8:82:03:22:09:
                    51:ee:36:a6:11:db:f7:74:1e:c7:28:8c:d2:d5:ec:
                    95:bb:8c:30:7a:72:a2:55:1b:f1:a6:f4:f9:d4:ef:
                    63:6f:79:6b:cc:9a:ac:0f:ad:8b:9d:4b:c5:31:68:
                    37:68:14:12:f1:ec:78:36:fe:3a:8e:5e:76:c7:05:
                    a1:33:ba:04:b6:9b:25:35:fc:9d:eb:f7:50:06:b5:
                    22:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:22:DB:9C:69:5B:BD:E5:9F:09:84:80:04:EC:29:41:63:73:E0:D4
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/386ddf92-5af7-4b7a-9cc3-11b35ff040e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fe2:a400::/40

    Signature Algorithm: sha256WithRSAEncryption
         81:06:79:84:f2:4b:b4:47:0b:86:6a:c0:83:fe:19:e1:b3:04:
         e0:b1:ba:5b:fb:1e:95:ae:c4:ae:bf:13:61:c4:c8:cd:33:a2:
         82:cd:65:d1:6b:b7:6e:ad:e7:01:1e:b3:d9:6a:80:86:c2:80:
         06:07:b7:63:9a:9a:52:40:18:65:a4:9a:3b:79:8c:2a:97:8c:
         03:3a:0b:33:38:d9:1a:08:5f:c1:f4:e4:65:bb:7b:7e:c6:7e:
         8e:0e:87:fc:70:73:a9:d2:b6:e1:58:69:73:c0:2a:a0:da:74:
         3e:b2:f8:46:35:d2:8b:65:97:12:3b:b4:74:0b:de:cc:ab:6e:
         4e:df:54:2e:b8:88:d8:bf:d7:d7:35:a6:c1:69:72:5e:21:c2:
         25:e6:ef:8e:6e:26:93:68:60:60:2b:2e:14:79:f3:71:ff:8e:
         14:7f:26:22:a7:aa:81:8f:5e:15:3b:b6:ef:d9:b6:5a:fd:c2:
         ca:92:f1:ca:10:b5:88:91:4d:3d:79:35:59:47:b2:a4:d6:12:
         81:45:ec:0b:0e:d2:ca:29:1b:a4:98:d0:fa:41:ed:ed:72:85:
         2c:95:8c:4d:36:99:a1:aa:26:9d:f6:e6:13:18:8d:c4:c4:94:
         5d:83:9f:2a:f2:4b:ba:e8:99:1b:c6:22:a7:9d:68:e1:bc:64:
         e0:16:87:1c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 13 06:38:41 2026 by rpki-client