Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/79273be4-4b7f-4ed2-96ca-83a5a25236b7.roa
File:                     79273be4-4b7f-4ed2-96ca-83a5a25236b7.roa (raw, json)
Hash identifier:          uhgoR9n6JWqvaHaQjaBBXT1wIIDbC4BkAMA83oaQ//M=
Subject key identifier:   B5:C8:74:A7:8A:9F:05:3C:A9:AD:0C:C9:7F:A3:C5:35:92:4C:C5:35
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6EA9EBDAB180BF3AACA7D918AB81909066395564
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/79273be4-4b7f-4ed2-96ca-83a5a25236b7.roa
Signing time:             Wed 25 Feb 2026 01:10:56 +0000
ROA not before:           Wed 25 Feb 2026 01:10:56 +0000
ROA not after:            Tue 26 May 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1f21:4800::/37 maxlen: 37
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:a9:eb:da:b1:80:bf:3a:ac:a7:d9:18:ab:81:90:90:66:39:55:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 25 01:10:56 2026 GMT
            Not After : May 26 23:59:59 2026 GMT
        Subject: serialNumber=c57ed5bf6a736ed6e1739fbd24a141396e750f92fb3190b183b253ff00f5d57a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c2:df:25:31:f6:c4:aa:44:35:62:7d:b5:48:
                    a6:35:3e:89:38:64:6b:0e:af:87:36:d3:88:26:bd:
                    3c:e0:42:f8:f7:89:69:9e:b4:7d:43:fa:cb:a0:90:
                    b2:89:4c:25:6f:58:45:4f:9e:e0:12:5e:e8:aa:f4:
                    40:84:27:48:fe:ce:6e:8d:14:1f:6f:52:51:c2:73:
                    ba:06:b9:c3:83:b1:79:d1:f7:1b:b3:01:65:fb:9d:
                    de:e5:83:68:5b:b2:72:e6:d2:f1:33:6a:b5:3f:a6:
                    d1:55:0f:6d:5b:24:c1:90:3c:bf:16:61:3a:12:1a:
                    15:50:a4:71:f3:4d:f9:c2:8f:06:e3:ff:05:15:85:
                    c4:34:6a:53:48:04:21:a1:ad:f8:bb:69:86:49:96:
                    b2:03:6c:ab:86:f9:64:06:1b:06:76:67:49:e8:f9:
                    c5:bc:d3:46:79:b2:6a:0f:8f:17:ca:ad:36:d2:4a:
                    b5:cc:cc:79:f0:7e:f2:c5:4b:8b:12:da:ba:49:4d:
                    dc:a0:4b:d8:56:fc:fe:62:88:d5:0e:8c:3a:cc:9f:
                    bc:74:69:4a:36:92:48:cc:23:fe:5c:71:cc:4f:85:
                    6b:5b:da:db:b3:18:75:90:56:56:d0:fe:96:38:67:
                    41:0b:ee:c7:de:64:be:c2:14:79:60:b0:95:cb:ca:
                    f8:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:C8:74:A7:8A:9F:05:3C:A9:AD:0C:C9:7F:A3:C5:35:92:4C:C5:35
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/79273be4-4b7f-4ed2-96ca-83a5a25236b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f21:4800::/37

    Signature Algorithm: sha256WithRSAEncryption
         2d:b3:45:22:ac:8f:db:fa:69:ac:0e:f1:e5:99:98:19:e6:10:
         be:d6:65:08:0c:56:bc:12:5f:c4:46:7d:2a:4c:ef:f4:47:91:
         f2:85:dc:81:58:ff:e1:68:2e:59:00:79:d6:a7:53:db:c9:6d:
         f6:1d:bf:a6:1e:71:7a:99:c8:db:1e:c2:1f:10:dc:06:7c:ff:
         e9:64:e2:d1:95:5f:a2:b1:06:b2:a9:bc:d5:4b:e7:cf:55:92:
         ea:57:80:4d:f1:ec:b9:94:5a:7c:46:ca:02:c1:64:08:68:b7:
         19:f1:bb:21:da:48:8a:54:06:b6:ba:9d:40:7d:8d:55:d1:68:
         c7:fd:cb:a3:20:66:cc:2f:7e:2d:05:c7:06:e5:b2:82:fe:f8:
         68:ba:aa:f3:78:4b:89:de:fc:cf:76:fb:68:e3:af:67:50:e8:
         8b:7b:04:aa:25:27:12:6d:b0:a2:94:01:6e:f5:25:c6:b6:cf:
         bb:7d:3a:ff:e6:29:b1:0d:68:39:a0:7c:79:01:a4:e7:20:24:
         09:dd:84:4a:69:11:a6:25:2d:82:04:1d:dd:fc:c4:97:7d:e1:
         f5:d8:13:83:db:66:ca:0e:fd:58:1d:7c:0d:4d:41:e7:33:8d:
         ea:a4:00:06:92:17:91:27:77:33:4e:a0:20:3b:7c:9a:c0:5f:
         5b:6e:80:0a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:47:26 2026 by rpki-client