Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5c1a805c-d068-478c-9e6b-378bde6fc1c0.roa
File:                     5c1a805c-d068-478c-9e6b-378bde6fc1c0.roa (raw, json)
Hash identifier:          lb0f3gDGK0+eztkxfQRNDYx24JFzg0U6wxwOZRkdcDQ=
Subject key identifier:   F4:96:0E:44:CC:90:99:8B:A1:56:C2:C3:F4:0F:41:09:25:15:4B:FC
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       527D7D8B741781DD385DDD4543AFF9F831CB192C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5c1a805c-d068-478c-9e6b-378bde6fc1c0.roa
Signing time:             Fri 15 May 2026 01:31:06 +0000
ROA not before:           Fri 15 May 2026 01:31:06 +0000
ROA not after:            Thu 13 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f00:40b0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:7d:7d:8b:74:17:81:dd:38:5d:dd:45:43:af:f9:f8:31:cb:19:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 15 01:31:06 2026 GMT
            Not After : Aug 13 23:59:59 2026 GMT
        Subject: serialNumber=ebb0c04af665d39e1e4c904c1b62c4cf66b9d3afcb3ddb53afdd76711372dd9b, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:cb:ce:15:22:89:9b:fe:37:c5:ea:6a:95:08:
                    39:c8:3b:6a:ed:5e:34:c4:f5:33:21:72:1a:8f:6b:
                    08:f4:1d:2a:23:91:51:6f:9b:05:24:a1:7f:05:45:
                    da:5a:58:56:f5:af:21:6f:16:21:26:4e:29:28:e5:
                    a7:ea:d4:a8:f5:e2:25:28:d2:8d:81:ed:41:5f:f0:
                    31:03:ea:52:87:ff:f6:0f:74:9e:a2:81:d8:a1:57:
                    ce:cf:5f:8d:48:d6:23:49:42:27:21:76:87:5f:8e:
                    a2:03:4b:e9:35:3c:2b:fa:ed:37:54:dd:cc:d7:f7:
                    4c:6e:79:72:b5:0d:b0:e5:60:13:3b:9b:ed:e0:91:
                    7d:14:52:f1:2c:0b:07:36:73:e6:69:d7:1d:9d:94:
                    ad:63:b6:ee:0d:52:66:76:e1:1f:c0:4d:94:74:80:
                    a4:94:d5:aa:3b:5f:2d:3b:ab:85:dd:e8:f4:bf:19:
                    01:2e:67:de:e4:96:dc:e0:54:da:88:87:5b:f5:40:
                    be:84:d6:06:6a:95:85:f8:42:03:b2:16:f0:98:c8:
                    0a:c0:7f:db:c2:c5:50:61:4a:70:dd:f4:1b:76:3e:
                    ea:55:27:7e:eb:c6:63:42:25:99:dc:1d:83:95:11:
                    8d:f1:f9:11:d9:c0:b8:de:42:7a:04:39:9d:15:ca:
                    e8:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:96:0E:44:CC:90:99:8B:A1:56:C2:C3:F4:0F:41:09:25:15:4B:FC
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5c1a805c-d068-478c-9e6b-378bde6fc1c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f00:40b0::/48

    Signature Algorithm: sha256WithRSAEncryption
         10:b6:20:10:bd:5d:f2:e8:10:99:88:c3:08:6b:2f:8e:4b:ec:
         5c:87:16:aa:87:0e:a7:71:f6:bb:51:7d:0c:71:c2:1b:b7:17:
         9d:42:3f:c3:da:66:9d:5f:7f:06:1f:d6:da:6f:b1:21:fe:47:
         30:df:c3:05:75:8f:dc:7b:ea:2d:3b:10:af:89:ae:b4:e0:8e:
         50:fe:d1:20:30:d9:5e:a8:dc:9b:19:ef:7b:28:cc:eb:39:47:
         32:d9:c5:5c:0e:72:2f:e6:fa:a0:ac:c7:24:ba:03:41:f8:6b:
         7b:64:7a:5b:e6:1a:87:28:cd:40:06:5c:19:57:15:d0:73:f6:
         52:8d:c9:ef:a6:14:72:37:c9:f8:54:44:cb:36:81:29:b8:2c:
         bd:9c:36:fe:54:42:a9:4d:c5:60:cf:7a:83:fb:a7:c2:73:90:
         6a:77:d4:e1:c0:2a:43:52:3c:96:da:9f:07:e3:65:26:f3:a2:
         ea:06:92:7c:fa:c6:e1:67:6d:c1:6f:dc:2a:f5:2e:5e:7e:5b:
         00:9b:a3:6e:85:f3:4c:82:fe:6f:60:35:a3:59:11:99:4f:5f:
         9b:25:51:2f:de:ef:93:e1:40:9b:ff:ec:25:f2:12:e5:36:4e:
         f7:1a:c4:de:dd:aa:75:e4:b2:2c:cc:b8:7b:db:b8:f0:89:70:
         2e:70:9c:6a
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUUn19i3QXgd04Xd1FQ6/5+DHLGSwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTE1MDEzMTA2WhcNMjYwODEzMjM1OTU5
WjB6MUkwRwYDVQQFE0BlYmIwYzA0YWY2NjVkMzllMWU0YzkwNGMxYjYyYzRjZjY2
YjlkM2FmY2IzZGRiNTNhZmRkNzY3MTEzNzJkZDliMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCvy84VIomb/jfF6mqVCDnIO2rtXjTE9TMhchqPawj0HSoj
kVFvmwUkoX8FRdpaWFb1ryFvFiEmTiko5afq1Kj14iUo0o2B7UFf8DED6lKH//YP
dJ6igdihV87PX41I1iNJQichdodfjqIDS+k1PCv67TdU3czX90xueXK1DbDlYBM7
m+3gkX0UUvEsCwc2c+Zp1x2dlK1jtu4NUmZ24R/ATZR0gKSU1ao7Xy07q4Xd6PS/
GQEuZ97kltzgVNqIh1v1QL6E1gZqlYX4QgOyFvCYyArAf9vCxVBhSnDd9Bt2PupV
J37rxmNCJZncHYOVEY3x+RHZwLjeQnoEOZ0VyugDAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQU9JYORMyQmYuhVsLD9A9BCSUVS/wwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzVjMWE4MDVjLWQwNjgtNDc4Yy05ZTZiLTM3OGJkZTZmYzFjMC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAB8AQLAwDQYJKoZIhvcNAQELBQADggEBABC2IBC9XfLoEJmIwwhrL45L
7FyHFqqHDqdx9rtRfQxxwhu3F51CP8PaZp1ffwYf1tpvsSH+RzDfwwV1j9x76i07
EK+JrrTgjlD+0SAw2V6o3JsZ73sozOs5RzLZxVwOci/m+qCsxyS6A0H4a3tkelvm
GocozUAGXBlXFdBz9lKNye+mFHI3yfhURMs2gSm4LL2cNv5UQqlNxWDPeoP7p8Jz
kGp31OHAKkNSPJbanwfjZSbzouoGknz6xuFnbcFv3Cr1Ll5+WwCbo26F80yC/m9g
NaNZEZlPX5slUS/e75PhQJv/7CXyEuU2TvcaxN7dqnXksizMuHvbuPCJcC5wnGo=
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:11:29 2026 by rpki-client