Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/559ec5d8-71af-4698-80c0-cf55c18e4e61.roa
File:                     559ec5d8-71af-4698-80c0-cf55c18e4e61.roa (raw, json)
Hash identifier:          0awXuoRSXY9wG6UxT806AWRiQWq1fJtkTO5Ls9bWQrE=
Subject key identifier:   F7:7C:3D:DB:C0:94:83:3A:49:DB:9F:85:56:59:F2:A0:66:D2:37:41
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3C2643F2DB0D62124BC86E0C7FFA63BC7583FC3D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/559ec5d8-71af-4698-80c0-cf55c18e4e61.roa
Signing time:             Sat 16 May 2026 01:50:06 +0000
ROA not before:           Sat 16 May 2026 01:50:06 +0000
ROA not after:            Fri 14 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f1a:4c00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:26:43:f2:db:0d:62:12:4b:c8:6e:0c:7f:fa:63:bc:75:83:fc:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 16 01:50:06 2026 GMT
            Not After : Aug 14 23:59:59 2026 GMT
        Subject: serialNumber=9a6ec3e7aa88b5e8ff20ba390c1121aaebf1e0a8636fb3ae3c5b46c1621dac3c, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:68:24:06:aa:ac:9a:f8:c0:6e:64:f6:13:42:
                    ab:17:e6:33:09:42:0b:72:fb:5f:a6:93:61:ed:b5:
                    53:09:27:9f:3a:a1:ac:f5:c8:92:2e:0e:6c:93:66:
                    94:16:90:af:8e:34:1b:51:b1:8b:5d:c9:ae:89:bd:
                    5b:64:fa:c4:29:26:90:bc:69:44:56:5f:bd:57:b2:
                    36:d5:c2:cd:9f:00:39:b2:2c:d4:8a:35:86:09:0c:
                    2a:f0:d9:da:86:a4:e5:c2:ed:20:6a:26:8e:4d:f7:
                    9d:b2:cd:9b:b1:0b:42:2c:48:c4:76:10:21:b5:a0:
                    42:e8:14:1c:9d:78:48:45:1d:3c:f6:cf:0d:30:fe:
                    b6:5e:ce:c6:c4:6d:44:94:85:b0:50:af:12:5a:47:
                    3e:12:d3:f3:12:8b:f2:a9:d6:d0:4b:ae:c8:7a:0c:
                    f3:ce:6b:35:09:5b:aa:b4:04:cd:35:09:45:1c:b5:
                    17:ae:e6:e9:fe:a3:ea:41:e6:cd:c7:19:c9:a6:df:
                    61:59:6e:e9:cf:8f:d1:ad:0f:5a:75:95:53:23:13:
                    05:18:6a:bb:4a:0b:c3:c9:84:4e:ad:1b:51:ec:69:
                    b6:99:13:52:08:72:4f:88:1d:d5:6a:86:c3:44:ab:
                    53:31:03:df:c1:6c:19:3a:ac:e5:4a:2f:89:56:cc:
                    7e:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:7C:3D:DB:C0:94:83:3A:49:DB:9F:85:56:59:F2:A0:66:D2:37:41
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/559ec5d8-71af-4698-80c0-cf55c18e4e61.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f1a:4c00::/38

    Signature Algorithm: sha256WithRSAEncryption
         90:6b:22:9a:db:90:db:b0:e8:70:2f:94:7b:09:50:d3:ff:fb:
         12:0b:8d:cb:85:d6:4a:bb:5d:45:4d:25:af:3c:c4:b5:17:d2:
         7d:0a:ab:04:7e:0a:46:12:f5:fd:43:7c:80:c0:cc:41:c2:e3:
         94:48:da:07:bb:bf:2c:54:e1:3e:3d:e2:f1:f7:eb:34:29:70:
         46:14:a8:ef:fe:97:73:3e:84:d0:33:95:b4:dc:b1:3b:92:9f:
         f8:1e:de:b6:78:87:08:9e:5c:76:5e:6c:ad:d0:ea:05:cf:b0:
         1f:87:bc:29:2a:91:10:7b:7b:88:4c:37:c8:28:2f:bd:46:b6:
         f8:59:dd:62:64:1e:60:6a:57:df:0f:5c:0e:21:b5:5c:7c:d2:
         32:92:46:db:3e:c1:b1:39:47:9e:8f:fa:80:fb:ff:b3:3c:cf:
         e9:16:ab:11:e0:7f:17:c6:5e:f0:82:0c:68:47:a2:1d:37:67:
         27:ff:66:2e:78:15:d8:90:ec:5e:c3:ed:87:79:34:3b:a7:7a:
         a7:6f:e4:d8:ef:4e:1c:20:c0:16:04:77:78:6c:f4:8f:a5:3d:
         67:38:9c:7a:e0:56:98:71:5e:30:18:2d:1c:3a:14:69:4c:40:
         d1:ab:39:27:7e:54:74:8e:55:e7:93:2d:30:ed:90:83:e9:9e:
         64:65:66:14
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 13 10:58:24 2026 by rpki-client