Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6565871d-6b66-46ca-94ef-05cbb552e3d0.roa
File:                     6565871d-6b66-46ca-94ef-05cbb552e3d0.roa (raw, json)
Hash identifier:          0qe1QaWrRY+SpxVT+AHIpbFsSleRfIVccnI7vkzoIiY=
Subject key identifier:   BB:4B:8F:54:C2:0B:27:A6:7C:88:28:10:E9:DE:DD:8E:64:D9:1A:84
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       39322A7C77D624711D84B7A067281D2E5F648957
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6565871d-6b66-46ca-94ef-05cbb552e3d0.roa
Signing time:             Fri 22 May 2026 16:32:34 +0000
ROA not before:           Fri 22 May 2026 16:32:34 +0000
ROA not after:            Thu 20 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fe0:3400::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:32:2a:7c:77:d6:24:71:1d:84:b7:a0:67:28:1d:2e:5f:64:89:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 22 16:32:34 2026 GMT
            Not After : Aug 20 23:59:59 2026 GMT
        Subject: serialNumber=eb5d9f85e68ebe32809886111eef539037a043f3e6fc7ceca8b0babc53d05c10, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:21:82:ef:d0:e2:f1:55:ad:cb:33:ca:df:dd:
                    4f:42:cc:b3:14:ca:eb:6a:08:80:4b:1d:10:04:17:
                    15:29:72:f2:64:ed:30:cd:c0:e0:ee:23:5b:5d:86:
                    a8:d3:45:ce:32:b9:5e:34:81:8f:26:68:a4:9d:39:
                    7e:6d:80:ed:f9:6b:2a:bd:2a:f9:bf:23:f5:1c:67:
                    2d:70:63:e2:39:42:27:52:45:a7:72:3f:d8:60:b4:
                    ac:73:d3:c0:71:16:c5:e4:02:72:50:dc:77:e8:5b:
                    05:f6:b5:21:96:26:4c:7d:0d:f6:d6:f2:d9:0e:67:
                    0e:69:dd:99:81:cf:f1:6f:e0:b7:26:3e:ab:b1:a8:
                    11:e5:e2:55:c6:da:44:ed:7e:f7:f6:a9:81:40:37:
                    49:f3:ab:60:28:22:35:86:e5:53:51:f8:6c:b9:4d:
                    2b:d1:c0:d9:99:52:c0:6a:48:4a:6e:c9:75:5d:0b:
                    c5:b0:4a:70:e4:26:f2:fc:7c:f0:ef:66:3a:bf:42:
                    c2:0d:fc:e3:98:27:e7:a1:83:37:ad:f9:c2:47:3d:
                    91:9b:07:9a:c4:d1:46:7e:16:c9:d0:01:7b:e9:93:
                    f3:e1:78:73:a1:d2:08:67:73:ec:aa:70:93:62:55:
                    0f:2f:db:af:7f:4a:1e:e9:5b:37:1e:3d:a6:d1:b8:
                    d0:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:4B:8F:54:C2:0B:27:A6:7C:88:28:10:E9:DE:DD:8E:64:D9:1A:84
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6565871d-6b66-46ca-94ef-05cbb552e3d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fe0:3400::/40

    Signature Algorithm: sha256WithRSAEncryption
         23:e0:41:17:de:3d:dc:3a:13:92:e4:33:f4:20:81:d3:0e:45:
         55:42:a6:74:ba:aa:15:f6:2b:9f:2e:93:0f:ae:15:b3:2b:0d:
         22:39:70:c7:3f:2b:ec:a9:ae:15:72:a3:f4:82:45:16:49:97:
         a1:96:ce:76:af:b7:40:f3:57:9c:38:6d:2b:b7:1c:35:fe:70:
         70:a3:1d:70:87:d0:b0:a8:46:11:1d:e5:f2:83:d7:be:d6:0e:
         7b:90:5a:ae:c0:24:8f:fa:17:78:83:b8:a2:c7:86:a8:11:96:
         62:66:d5:6d:60:b0:11:ac:3b:18:bf:60:c8:0f:08:ec:ab:02:
         59:c4:95:64:2b:49:0b:e1:f2:66:5b:70:33:59:fa:2a:e8:92:
         7d:a5:d7:46:9a:39:d1:3d:92:e3:16:0a:7b:51:3e:02:b9:5d:
         ec:c1:92:76:ab:14:2f:f7:8d:5b:fa:b0:b0:a0:22:2c:b3:e2:
         d6:fc:49:24:cf:f6:7b:6f:13:a8:ea:74:c0:5c:59:4e:1f:17:
         5b:b6:5e:2e:97:2b:31:04:59:99:aa:3b:7c:d5:2a:7d:06:4f:
         b1:9d:01:35:f2:e3:de:83:da:68:37:80:23:f0:ee:9b:dc:37:
         81:18:31:19:0b:bc:45:77:98:19:3c:1a:a0:06:96:5c:4c:43:
         39:19:d3:30
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 13 06:38:32 2026 by rpki-client