Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7dbec330-e7ce-48df-8a7e-fb241155ebde.roa
File:                     7dbec330-e7ce-48df-8a7e-fb241155ebde.roa (raw, json)
Hash identifier:          zpzTjFY41yAZKXQhTnrMw6pVn3lKRhWeO8udQ1/1XKM=
Subject key identifier:   F3:F7:27:8A:C5:50:6F:CF:F8:94:57:F7:AC:3D:C3:08:06:FB:5A:26
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5E40126DFF63E927CE337EB5678680D2CC367416
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7dbec330-e7ce-48df-8a7e-fb241155ebde.roa
Signing time:             Fri 22 May 2026 16:35:58 +0000
ROA not before:           Fri 22 May 2026 16:35:58 +0000
ROA not after:            Thu 20 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fe8:4080::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:40:12:6d:ff:63:e9:27:ce:33:7e:b5:67:86:80:d2:cc:36:74:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 22 16:35:58 2026 GMT
            Not After : Aug 20 23:59:59 2026 GMT
        Subject: serialNumber=65bd5ab3caaa6b33b38c03448dd7aa2a2ea1ae955af42820f03478561205b06c, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:29:aa:78:14:17:1f:ff:7b:56:6b:1f:36:fd:
                    5b:e0:56:c9:1a:6e:ed:8c:f2:bc:22:d0:50:5d:7f:
                    4f:ba:a4:b9:08:2a:0e:2c:5e:0d:bf:9f:99:a2:9f:
                    56:f6:3f:a4:c4:27:b9:3a:bd:fd:ed:53:27:c4:2a:
                    86:84:6e:32:de:1b:a1:28:11:45:08:ee:3c:df:20:
                    cb:b3:bd:7f:4d:32:6c:ed:75:24:5a:f4:96:42:d3:
                    eb:af:b6:df:4d:88:2d:bd:f9:34:8f:ba:b1:2f:8b:
                    b6:69:27:8a:04:13:a4:e9:91:a0:f1:f7:0f:28:d8:
                    30:62:dd:7b:c8:f0:24:a0:fa:ff:57:c3:b8:08:d3:
                    a8:8e:15:15:d4:e2:29:42:2b:c8:cc:2e:70:50:3c:
                    4c:93:a5:6c:9d:4a:49:49:b9:46:a3:49:22:6b:69:
                    dc:9d:cc:06:ec:a7:f2:c8:a9:f0:08:87:c0:8e:e9:
                    46:d8:bf:64:e6:e0:64:12:3b:ae:22:95:93:9c:b0:
                    3e:37:bc:33:0d:73:84:5a:d5:4e:ab:b3:38:d2:f7:
                    b1:57:ee:3a:17:d2:dc:26:ef:95:e6:cb:36:34:c1:
                    9a:eb:f0:b7:c9:46:7d:81:17:c8:9b:d1:d2:c7:5d:
                    89:3a:66:2f:03:12:f8:71:9b:7a:63:76:34:c0:26:
                    da:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:F7:27:8A:C5:50:6F:CF:F8:94:57:F7:AC:3D:C3:08:06:FB:5A:26
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7dbec330-e7ce-48df-8a7e-fb241155ebde.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fe8:4080::/48

    Signature Algorithm: sha256WithRSAEncryption
         96:95:df:64:a6:ab:20:e6:49:5d:5c:1c:ad:60:cc:f0:6f:30:
         40:e5:41:7f:1d:a4:3f:57:18:31:56:8d:25:01:c5:56:d3:2a:
         de:62:2f:d4:4b:93:45:09:51:2c:6f:9b:df:5f:21:03:e8:04:
         a0:ef:9c:c5:00:12:77:3e:b3:cb:e5:b7:cc:02:60:75:c0:9b:
         43:09:0a:53:f7:e2:fb:63:eb:c0:29:c2:81:5b:8d:66:28:26:
         44:66:71:39:d6:09:49:b1:f2:fa:ec:18:72:5f:41:12:e4:14:
         4f:84:d0:2e:20:23:4b:7f:69:40:e9:4b:8f:e1:c3:52:a8:e6:
         21:cc:e1:82:e9:bc:eb:81:51:25:58:81:52:e9:5d:75:14:e0:
         63:0c:12:39:66:da:f5:06:7d:ed:6b:f5:f5:a7:29:a6:14:5b:
         b1:c0:a0:fd:9e:5f:47:a8:4c:b6:24:d4:d6:e4:c5:5e:9e:08:
         17:97:aa:3b:7c:05:c4:cc:ec:1e:14:f4:ac:4d:c5:47:4d:60:
         35:9e:fe:13:13:5d:03:69:5e:12:8d:bf:2c:4a:f3:a9:4a:d0:
         8e:e5:77:a8:46:20:1b:fc:f3:6b:ef:bb:68:99:fe:a7:2f:67:
         57:93:96:6b:08:83:8d:c8:3e:9e:00:5e:3a:77:4d:d6:14:ed:
         83:c8:4d:6a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 13 06:39:36 2026 by rpki-client