Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/62dd63a9-5e0e-40b9-b703-4ee480c60a4f.roa
File:                     62dd63a9-5e0e-40b9-b703-4ee480c60a4f.roa (raw, json)
Hash identifier:          ob5raVB6e1PKV8XyqRa9iEhbbpnJsPzOGm/n0vc5BJ0=
Subject key identifier:   A2:D7:C3:17:72:83:DB:F0:BD:0B:73:25:FB:84:F7:83:52:B9:BA:FA
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       356DF5C281707C82DBF8E4476EE0BC9BBDAF3783
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/62dd63a9-5e0e-40b9-b703-4ee480c60a4f.roa
Signing time:             Fri 24 Jul 2026 16:47:56 +0000
ROA not before:           Fri 24 Jul 2026 16:47:56 +0000
ROA not after:            Thu 22 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f1a:2000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:6d:f5:c2:81:70:7c:82:db:f8:e4:47:6e:e0:bc:9b:bd:af:37:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 24 16:47:56 2026 GMT
            Not After : Oct 22 23:59:59 2026 GMT
        Subject: serialNumber=25bdf644b1f1f4fdaaca2f33c9ba902fcacc31d2335a7e7f9fc8ce06b6e107c2, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:2c:0f:e0:12:5b:4a:23:8b:38:3b:7d:7f:18:
                    47:d6:c5:c4:10:08:0c:b2:cc:77:0d:c4:d5:a3:80:
                    65:c3:77:98:f6:fe:36:3c:66:b2:ac:14:e0:47:d8:
                    2a:2b:c6:ff:0a:a2:0a:cf:11:a6:04:12:b0:99:10:
                    b7:7c:8d:72:5f:81:75:66:fb:00:8f:a2:e8:c8:6f:
                    bb:80:4d:82:f1:ed:31:4d:d4:a1:b1:d7:ab:8b:18:
                    f5:af:37:7a:26:1b:e1:8d:96:e0:47:c3:b4:9c:7a:
                    07:09:e8:22:5f:8a:e2:07:d3:b6:0b:d7:56:7a:cc:
                    2e:ce:1e:55:a7:a4:f0:fc:aa:7a:41:96:97:2e:4f:
                    01:5d:43:92:b2:6b:4a:e5:76:95:1d:06:3f:d2:a2:
                    bb:95:4c:12:f9:b0:14:70:84:43:5c:15:7a:26:6a:
                    f4:9b:36:07:e6:83:00:39:82:e0:94:60:e6:4e:f6:
                    d6:14:eb:e2:d2:d8:9f:63:59:5a:80:4d:e7:49:87:
                    49:5b:53:43:0d:6c:6d:2d:0a:7e:ba:b8:ff:89:e1:
                    f3:89:ae:6f:07:16:37:f5:5a:78:f7:45:be:33:da:
                    b0:01:b3:ef:c7:a2:70:d2:9e:89:e5:ce:65:b2:12:
                    c6:e7:99:e8:97:13:62:91:97:6b:f3:14:e7:30:31:
                    4e:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:D7:C3:17:72:83:DB:F0:BD:0B:73:25:FB:84:F7:83:52:B9:BA:FA
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/62dd63a9-5e0e-40b9-b703-4ee480c60a4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f1a:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         45:ed:d9:c7:2a:c0:6c:51:2f:90:c2:ea:61:88:75:bc:db:3e:
         c5:c9:29:12:9c:02:93:c7:98:33:bb:ae:a0:c1:d0:a5:c5:b0:
         28:c2:33:95:ae:68:75:3c:fd:ae:85:32:21:61:15:60:57:2f:
         d5:85:19:92:c7:a3:46:fa:11:39:46:75:85:c6:7e:99:a2:60:
         15:96:76:b6:36:78:3f:d2:d7:c7:9c:00:85:e5:ef:ea:4d:e5:
         e1:3f:53:ec:f4:6a:34:6e:df:ca:40:7d:49:c4:57:05:11:44:
         d5:b4:83:d6:4e:2e:95:f5:6c:6d:91:09:1b:f8:72:c3:ba:0e:
         58:61:86:e9:aa:4a:fa:76:89:b9:e2:0e:8f:a5:9c:37:4d:0c:
         83:d4:f8:1a:f4:d1:79:34:f5:88:80:25:a9:9b:4f:f1:1f:8e:
         29:32:54:a7:2c:22:2e:53:29:5e:da:1b:b6:fa:8a:bb:3a:fc:
         46:c8:6f:1f:5d:11:d6:db:b1:8d:50:0c:d4:14:53:1a:83:d0:
         bb:ee:59:7b:ea:79:ca:d7:f1:c4:55:0c:6d:66:bf:8d:21:eb:
         b3:ad:aa:d3:ce:8a:34:96:e3:8d:ae:9a:2b:58:0a:6b:5c:84:
         51:43:b9:dc:f5:20:12:f0:7c:0d:1e:32:27:eb:67:b6:f9:d1:
         c5:fb:0e:1d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Jul 28 16:58:12 2026 by rpki-client