Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/84f379a5-7566-4771-9096-e4caa876ae50.roa
File:                     84f379a5-7566-4771-9096-e4caa876ae50.roa (raw, json)
Hash identifier:          QyK2U006MbkvsNBY+s6qbLhRhgq0iqoim2ucDs5yHuM=
Subject key identifier:   4F:B8:17:CB:75:EB:B7:69:07:F6:0F:03:5B:7C:5D:C0:62:9B:F5:32
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1FE395C93D8B867BA0051BF536328587B119B1B1
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/84f379a5-7566-4771-9096-e4caa876ae50.roa
Signing time:             Sat 16 May 2026 02:10:10 +0000
ROA not before:           Sat 16 May 2026 02:10:10 +0000
ROA not after:            Fri 14 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f00:7400::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:e3:95:c9:3d:8b:86:7b:a0:05:1b:f5:36:32:85:87:b1:19:b1:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 16 02:10:10 2026 GMT
            Not After : Aug 14 23:59:59 2026 GMT
        Subject: serialNumber=cd253e93441c123500cc9aebcd2cea0da393480945cf70ace0a765106c0acdc5, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:bc:a3:e2:32:16:2a:27:f8:63:51:fe:c3:e4:
                    aa:24:ca:49:b1:d9:29:d8:86:fe:22:4a:4d:16:d1:
                    9b:ea:a9:68:e6:4d:2b:56:23:75:96:92:54:05:c6:
                    e2:a1:3e:f5:8e:20:80:ab:b8:ef:c6:0e:13:f4:60:
                    df:fd:97:d6:d3:6d:fe:bb:02:5d:70:40:ab:3b:e2:
                    0a:ac:df:2a:a8:32:36:21:47:c3:9b:2f:9a:83:5d:
                    63:1c:74:e0:e2:90:b7:36:1b:3e:63:d0:54:de:35:
                    fd:cf:be:31:6b:63:ab:37:61:11:23:14:99:2a:46:
                    33:63:32:8f:5b:e9:a4:97:de:c8:ee:bc:aa:d0:57:
                    c8:c0:fa:1d:0f:f5:12:b1:a4:d0:6d:c9:21:81:5b:
                    33:16:6b:0c:f2:29:03:fe:a1:0a:12:01:04:2e:51:
                    be:85:d6:3d:19:54:da:f7:de:bc:4e:a9:b4:2d:2d:
                    9c:e9:5d:ea:f6:7c:12:52:83:28:2f:ce:2b:35:60:
                    85:a3:20:41:2b:6b:67:d1:27:5f:22:57:d9:9b:0f:
                    d2:3a:3e:95:eb:02:dd:88:6f:c5:1d:22:c6:72:e1:
                    f7:fc:c3:b4:6d:2c:56:26:f7:a4:1c:87:db:39:fd:
                    fe:48:8f:8d:91:6d:d8:a2:31:d6:e0:f6:54:08:c4:
                    27:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:B8:17:CB:75:EB:B7:69:07:F6:0F:03:5B:7C:5D:C0:62:9B:F5:32
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/84f379a5-7566-4771-9096-e4caa876ae50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f00:7400::/40

    Signature Algorithm: sha256WithRSAEncryption
         8b:e8:d9:66:fb:23:83:e4:41:ef:3a:cf:4b:3a:6b:ca:e1:4f:
         9c:fc:9d:9a:48:61:31:06:b4:1e:2d:13:06:50:14:b3:7d:2f:
         93:f2:cc:a3:26:a2:80:ac:67:37:23:5c:c2:7e:dd:8c:f9:0c:
         37:07:26:a9:9a:82:bb:ea:63:1c:85:fa:01:2b:fb:1f:e8:3e:
         58:9e:d7:4d:38:a2:d0:bb:f2:cd:66:10:c5:dd:f9:66:e7:9b:
         30:31:2c:9d:0e:c7:b7:d1:47:ac:e9:d4:85:a5:dc:46:7f:88:
         35:e3:ec:6a:9e:11:e9:70:26:ae:ce:e9:de:8b:8e:13:fd:e6:
         d1:ce:84:47:8b:9c:36:ed:62:af:f7:cc:6b:f4:c0:be:ef:77:
         48:a2:a2:a8:a2:4b:5f:3f:d7:41:f1:77:b7:b1:b2:22:a1:79:
         01:99:4f:d3:c5:36:cf:e5:67:e7:16:0f:6d:96:92:28:db:60:
         4e:51:7e:1c:e9:d2:40:73:7b:19:4e:1f:e7:5f:3a:5d:ab:40:
         85:94:15:26:02:f4:21:ef:07:33:12:f3:41:e3:aa:8f:c2:56:
         a6:63:3f:b7:1b:d1:e5:fd:cc:06:6a:41:fc:9b:3f:98:54:6a:
         83:44:41:f0:42:f4:0e:4a:65:87:26:0d:aa:77:cb:c3:62:66:
         94:40:3d:d2
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:30:38 2026 by rpki-client