Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5c2d1cf3-a4a7-452f-bbda-9a047cd0ecec.roa
File:                     5c2d1cf3-a4a7-452f-bbda-9a047cd0ecec.roa (raw, json)
Hash identifier:          t4hLgMBLvbDmPArJjtSy0sKYDrigoowJ+Tdy5GTh++Q=
Subject key identifier:   90:6A:84:17:60:13:22:73:FE:74:82:3B:FB:9C:B6:8B:26:EF:5F:1B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4C78CB4F3D848BABE98E8499220CC395BB8A92
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5c2d1cf3-a4a7-452f-bbda-9a047cd0ecec.roa
Signing time:             Sat 16 May 2026 00:21:50 +0000
ROA not before:           Sat 16 May 2026 00:21:50 +0000
ROA not after:            Fri 14 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff1:4000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:78:cb:4f:3d:84:8b:ab:e9:8e:84:99:22:0c:c3:95:bb:8a:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 16 00:21:50 2026 GMT
            Not After : Aug 14 23:59:59 2026 GMT
        Subject: serialNumber=502356989a54496cea92c05339f3071685393ca586f4fd5bbb709b8f4c8b6db8, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d5:68:6b:45:67:6e:34:8e:9b:76:e2:ee:e0:
                    a0:b9:61:11:8f:b8:bd:d4:14:31:91:af:c3:24:06:
                    15:9f:2c:ae:ea:5a:28:af:9a:77:aa:88:fe:4e:5f:
                    f6:8b:f1:94:23:f5:55:f6:1f:bc:5d:56:f7:76:cc:
                    85:c3:95:39:69:9b:28:37:ee:55:f9:84:e9:06:ea:
                    94:2b:ce:46:6e:4c:85:74:b2:d0:05:20:e1:06:2b:
                    89:7f:33:71:10:69:42:f1:dc:3e:72:ec:3d:28:7b:
                    5b:32:30:87:21:cc:42:ae:1b:95:cb:46:61:5e:4c:
                    8c:f2:55:cc:60:19:41:a2:13:97:e4:70:6a:d9:38:
                    2f:ed:54:10:3e:d8:4a:79:90:f2:18:3b:46:15:52:
                    51:79:47:3a:ed:ea:2e:53:18:d8:3c:43:d5:d3:44:
                    c5:9f:d2:c3:09:6c:c3:45:5d:6a:5a:cd:c9:e8:ca:
                    eb:37:8b:54:c3:b8:e0:fe:29:60:2d:b4:68:56:f9:
                    3d:10:a3:1b:89:b5:7c:76:34:d2:a9:fa:b9:4d:96:
                    e2:19:dd:7e:4a:25:43:59:9f:f2:90:b4:3e:a1:f3:
                    f0:b9:42:34:e1:b8:32:8d:a2:dc:6c:86:81:47:f1:
                    51:78:d6:fd:09:58:7e:df:b0:53:99:3a:41:38:6c:
                    05:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:6A:84:17:60:13:22:73:FE:74:82:3B:FB:9C:B6:8B:26:EF:5F:1B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5c2d1cf3-a4a7-452f-bbda-9a047cd0ecec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff1:4000::/40

    Signature Algorithm: sha256WithRSAEncryption
         51:bb:6a:4d:16:75:08:8e:0d:f9:b1:fb:62:31:ee:5b:df:32:
         85:41:a5:c3:66:83:2e:65:57:ea:c5:89:3b:0b:41:41:ac:e4:
         f6:51:5a:f1:82:98:6f:f1:75:1d:10:c6:16:57:44:58:49:8f:
         ab:ed:30:29:ea:0f:1f:12:fa:0b:f6:c2:18:91:30:db:02:36:
         02:5b:a0:1f:47:0a:18:8e:c8:bf:37:3e:61:e9:ad:63:86:b9:
         e5:8a:48:db:ea:85:af:5f:0a:3e:a6:81:1f:7e:7b:e4:ef:25:
         cb:e4:ff:e3:34:2a:63:2e:90:4c:4b:a8:fd:ee:5b:ac:66:b5:
         07:ea:ef:4c:0b:07:62:46:ef:24:07:6c:e6:67:32:64:5b:e5:
         33:12:a7:d9:0f:60:fd:76:26:4e:ec:14:69:e7:2b:c7:c9:3c:
         e6:3b:60:32:80:11:ee:dd:9b:72:ad:1c:57:35:7a:84:44:f8:
         24:51:b2:09:b1:5d:8b:34:90:b4:d4:9f:2c:8b:99:23:7b:83:
         cb:54:37:c4:c3:3a:08:7c:9d:79:ee:db:a0:da:2b:04:76:10:
         7a:d7:4d:93:0b:12:f8:4a:22:74:f7:87:7a:2e:de:90:a5:cd:
         99:1b:64:dc:58:a6:1f:21:d4:72:80:87:8e:2b:c2:af:b5:5f:
         57:ed:aa:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:44:29 2026 by rpki-client