Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7fac1823-b328-4f8c-8379-f7180469d48a.roa
File:                     7fac1823-b328-4f8c-8379-f7180469d48a.roa (raw, json)
Hash identifier:          ATbtBtHfoQTKBcDgE1G3FCbMoeLcN0ErLfsKw1JY0CE=
Subject key identifier:   72:EA:83:CD:1E:82:F4:83:52:E6:B0:80:62:53:7E:D4:8D:CC:BE:4B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       592EE98F150A16D20C83C85549A157AFD5CBC9C8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7fac1823-b328-4f8c-8379-f7180469d48a.roa
Signing time:             Tue 10 Feb 2026 00:31:09 +0000
ROA not before:           Tue 10 Feb 2026 00:31:09 +0000
ROA not after:            Mon 11 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f2d:8000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:2e:e9:8f:15:0a:16:d2:0c:83:c8:55:49:a1:57:af:d5:cb:c9:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 10 00:31:09 2026 GMT
            Not After : May 11 23:59:59 2026 GMT
        Subject: serialNumber=b200ccaedb617693fd9409ff04b183b60313c224102ff1190110d93487b2b85e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f5:00:e1:86:58:af:6f:7e:b0:a1:38:02:dc:
                    3f:17:aa:74:42:1b:a8:66:ed:71:ee:19:bf:6c:49:
                    21:4f:4c:34:cf:d9:9d:6f:04:b0:7a:0c:c1:d4:b3:
                    4c:ff:9a:26:c2:5a:15:a3:28:45:73:7d:8f:f8:ec:
                    e3:7d:2e:b7:3a:83:0a:af:c3:3e:23:93:59:b2:b2:
                    80:6c:ea:70:e2:ce:b7:06:f2:dc:28:71:e7:d0:1c:
                    6a:4b:6a:5f:7f:46:c4:5f:83:3b:81:a1:0b:0f:3f:
                    53:b1:e8:ab:5f:57:a3:e5:26:42:d8:87:00:29:f8:
                    98:ae:e9:06:40:90:c5:e6:51:ed:a3:34:99:a1:09:
                    45:a1:48:73:f2:3a:2d:be:23:d4:80:bb:1c:81:fa:
                    df:7d:7f:0f:14:42:4c:d4:f0:2e:fd:82:f8:58:6b:
                    a8:57:fd:15:2c:bd:d5:d1:0a:33:8d:b1:f0:da:f6:
                    81:24:e2:b4:09:8a:3b:7a:8b:30:c2:8a:57:c4:b1:
                    67:f9:23:19:26:f2:49:c9:69:ab:c2:e8:fc:b7:55:
                    69:14:2e:63:4a:cb:48:9c:f7:04:a6:76:1b:d5:ac:
                    14:76:83:8c:d1:50:2f:77:b3:3e:cd:3e:5b:80:ff:
                    9b:de:89:f1:a5:ed:28:5c:2c:6c:53:ce:20:fb:71:
                    e5:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:EA:83:CD:1E:82:F4:83:52:E6:B0:80:62:53:7E:D4:8D:CC:BE:4B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7fac1823-b328-4f8c-8379-f7180469d48a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f2d:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         d2:7b:40:42:64:25:cd:7d:b5:11:bd:83:10:9d:e9:2e:30:3c:
         67:6f:29:2c:4f:b5:2e:a1:43:30:7d:e5:2c:56:ed:67:1a:13:
         1d:84:f7:64:54:34:0e:02:aa:ac:14:cc:9b:1d:88:d6:40:98:
         a0:3f:2a:d6:4d:40:db:d6:7f:da:fd:50:d7:82:4d:cf:9d:94:
         47:d3:59:0d:39:99:20:b3:e7:c7:4a:5f:49:f9:61:5d:26:44:
         af:b6:36:d2:85:5a:25:32:91:84:75:08:2e:fe:e2:ca:56:1d:
         0a:12:d1:2c:b2:ae:72:31:36:4e:c6:7b:0b:dc:d5:d6:fa:d8:
         e9:5c:6a:a7:42:4f:fa:9a:74:ff:c7:1a:37:1e:92:30:e9:f2:
         d5:cc:83:13:60:da:0a:1a:79:e6:f7:1d:81:28:b1:22:5d:a0:
         a4:cf:d4:3d:50:dc:38:9c:58:b5:e0:4c:95:a7:25:b4:5f:7c:
         3a:2f:5d:3d:2c:bf:1b:dc:ec:10:1e:8a:37:e4:b4:29:70:0f:
         17:c3:41:bd:35:20:6c:5c:65:ef:c8:5a:13:fb:a3:37:c2:a7:
         31:75:59:09:82:54:02:5b:c4:e9:bf:08:4e:39:1a:42:de:85:
         80:da:77:54:41:47:12:fd:18:5f:62:80:93:03:65:76:02:6e:
         a2:c5:2e:1a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:58:01 2026 by rpki-client