Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/803f3a95-a624-4af0-8fbd-52c2e78f6985.roa
File:                     803f3a95-a624-4af0-8fbd-52c2e78f6985.roa (raw, json)
Hash identifier:          0iSUg7ysTcyklzRZ4Rr1xVcnuo0C++SU24jKxY3ccCI=
Subject key identifier:   82:26:89:A6:D7:50:F1:36:40:62:C0:4D:72:1D:79:E2:3C:5F:31:53
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3F9181A76DB09DD241EEB4968F9A5F0490323878
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/803f3a95-a624-4af0-8fbd-52c2e78f6985.roa
Signing time:             Sat 16 May 2026 00:20:12 +0000
ROA not before:           Sat 16 May 2026 00:20:12 +0000
ROA not after:            Fri 14 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f18:c800::/37 maxlen: 37
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:91:81:a7:6d:b0:9d:d2:41:ee:b4:96:8f:9a:5f:04:90:32:38:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 16 00:20:12 2026 GMT
            Not After : Aug 14 23:59:59 2026 GMT
        Subject: serialNumber=2201f31bf90ab22cec7e990407b35253846074cc3bb4918ec7db06ffba36be1e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e6:65:9f:41:61:3e:b4:b5:85:38:91:cb:37:
                    c3:ab:ed:81:ec:8d:78:de:34:ca:81:2d:ad:bf:0e:
                    bf:43:24:e9:ad:a0:95:24:55:9c:89:88:ca:6a:ed:
                    47:7b:15:e1:a8:b1:e3:a5:55:42:88:4c:1c:75:36:
                    cf:da:8d:61:75:d1:78:77:d6:d6:9b:f5:6a:16:f1:
                    56:77:4c:70:cc:08:81:cb:6e:b1:b2:48:af:ed:29:
                    fd:2a:e4:a1:93:63:96:f3:3f:02:73:bb:56:5c:c9:
                    6b:53:cf:71:7c:0c:04:5c:0e:0e:b0:89:0f:7a:ec:
                    5a:0a:a0:0e:3a:48:20:c9:ba:33:24:ac:34:b3:97:
                    96:ba:02:16:42:9f:0c:54:76:28:3c:99:85:04:9a:
                    c2:6b:2a:c1:de:e4:a1:1b:97:e6:c3:b4:c4:d5:15:
                    9a:8e:48:0a:4a:10:fa:9b:27:d8:b9:07:a0:20:4a:
                    fa:d2:f2:b8:89:b7:c0:64:56:4c:e4:f5:7c:de:5a:
                    5d:88:4b:a5:42:2b:4f:cc:e3:d3:dc:9a:09:55:c7:
                    3b:bf:30:5e:17:1f:46:67:3e:f4:60:b8:72:57:87:
                    9c:d3:c5:ba:ac:6e:7e:90:58:62:87:34:0b:92:f4:
                    00:2e:a6:46:87:24:08:d0:74:06:26:01:aa:a3:73:
                    c6:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:26:89:A6:D7:50:F1:36:40:62:C0:4D:72:1D:79:E2:3C:5F:31:53
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/803f3a95-a624-4af0-8fbd-52c2e78f6985.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f18:c800::/37

    Signature Algorithm: sha256WithRSAEncryption
         06:1b:3a:09:73:a9:4a:0f:d3:50:2c:1e:07:15:b4:0d:e4:29:
         29:36:f1:6e:07:42:1c:0d:55:59:e6:df:73:5e:07:b3:41:47:
         bc:f6:d4:3a:11:50:ab:ef:79:6f:f0:75:95:b2:c6:0e:c4:52:
         3c:66:bb:24:5f:75:5d:8a:6f:69:89:1d:6d:80:b7:bf:ff:72:
         49:e4:a8:a2:58:ec:61:fa:84:09:22:dc:6b:05:3d:2d:55:51:
         ea:bd:23:1e:7c:ff:7a:d8:71:86:d6:24:82:e2:56:67:53:22:
         43:62:0e:86:07:b5:81:68:1a:66:14:4d:3d:c0:7d:51:db:d0:
         42:87:b7:9f:1c:58:50:83:7a:d4:74:0a:43:4e:44:44:8e:19:
         0e:78:b6:32:0e:0e:fb:95:de:c6:58:68:29:54:f0:59:e4:d8:
         34:b6:85:3d:bb:ba:b7:10:31:5c:df:7a:2c:d8:3b:a1:74:13:
         a4:61:78:57:75:52:22:0f:a2:a2:75:0f:e0:e5:65:0f:7d:e4:
         57:f9:85:a7:e4:b8:b4:3a:4b:c4:00:63:d7:d2:dc:4d:fc:ef:
         50:f0:74:09:9e:ef:d0:73:d6:36:fd:54:42:fd:df:1c:48:66:
         d5:16:94:15:f6:58:29:58:96:b1:a6:39:50:e7:4b:83:a3:54:
         4a:cc:95:0b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 13 05:50:20 2026 by rpki-client