Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8a0dd1dc-7a09-419a-a3ed-faeabd7b2149.roa
File:                     8a0dd1dc-7a09-419a-a3ed-faeabd7b2149.roa (raw, json)
Hash identifier:          21w0pf1v844Z2Q8ToHDPrIYM3ZhVIR8NQCBN7tSGbOQ=
Subject key identifier:   29:B7:C8:A0:93:C2:76:14:DD:7C:C5:F4:1B:8E:1F:5C:E3:78:D7:10
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       50D0DDBA4B1567B12C29A62DDA32D04B89393B33
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8a0dd1dc-7a09-419a-a3ed-faeabd7b2149.roa
Signing time:             Wed 25 Feb 2026 01:50:37 +0000
ROA not before:           Wed 25 Feb 2026 01:50:37 +0000
ROA not after:            Tue 26 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f1c:c000::/37 maxlen: 37
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:d0:dd:ba:4b:15:67:b1:2c:29:a6:2d:da:32:d0:4b:89:39:3b:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 25 01:50:37 2026 GMT
            Not After : May 26 23:59:59 2026 GMT
        Subject: serialNumber=d44876f2e885338da5f7f1f1ce6411d43cef093dd0d6ccfb0a412d2e0048c0d5, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:83:42:39:a3:ce:10:60:0a:fa:ab:ee:c6:f9:
                    9a:81:13:b9:4f:4a:ec:1b:89:05:b1:2f:1d:3a:cf:
                    4b:01:57:45:86:63:db:9e:33:1e:3a:6b:8b:17:ed:
                    c0:36:dd:6b:14:da:87:7a:4d:b7:ab:29:a5:a5:80:
                    86:2b:c7:c3:0c:ad:18:7b:3c:84:b0:97:7c:2c:41:
                    01:f8:6d:cf:cc:ab:d1:d4:cc:1e:e6:91:e6:c6:77:
                    59:c9:62:1a:d7:74:2b:36:a3:d9:05:f4:8b:fa:ec:
                    c4:5d:43:28:1b:99:c1:b3:c7:80:76:c6:72:d0:f6:
                    1a:1e:6f:b6:b0:63:61:fb:7a:66:97:4b:62:c9:4b:
                    a9:7c:57:9c:70:10:49:74:ce:5c:29:8f:0c:e7:fc:
                    a0:04:92:90:d4:d2:ab:d7:55:97:02:bd:a7:37:c7:
                    96:60:2e:43:06:b9:e4:4c:e0:3a:25:7c:96:99:aa:
                    59:af:b3:e0:68:01:64:95:0d:0e:5e:c2:8f:a7:18:
                    ef:be:fd:c5:27:a0:30:31:fd:2b:9f:5f:76:c8:7a:
                    54:c2:0a:00:b5:4a:21:d8:b5:f8:b0:0c:22:f3:83:
                    33:86:78:12:ba:f3:83:f7:67:01:d4:b0:06:a8:78:
                    9e:e0:1d:75:f2:56:56:e3:54:29:11:d8:ec:b8:65:
                    ab:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:B7:C8:A0:93:C2:76:14:DD:7C:C5:F4:1B:8E:1F:5C:E3:78:D7:10
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8a0dd1dc-7a09-419a-a3ed-faeabd7b2149.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f1c:c000::/37

    Signature Algorithm: sha256WithRSAEncryption
         18:f5:e2:f0:0e:bc:0e:4a:8a:f0:78:d2:78:78:cd:15:9c:09:
         9d:b2:42:e8:ae:c6:db:6f:1b:6a:60:85:24:d6:d0:0e:90:91:
         bc:b7:a2:a2:e5:ae:34:e1:ad:1e:77:b7:c2:71:0a:55:f7:6c:
         09:5e:73:d0:cf:c1:b7:49:b7:94:23:9e:be:9e:c0:04:84:ef:
         c3:4b:70:86:32:5d:22:5d:2d:f4:52:1a:c9:ef:19:31:c0:5a:
         c9:6b:72:ea:36:ef:0e:e9:c3:bd:4f:2f:02:28:13:2e:7c:6e:
         00:56:9b:3f:81:00:41:2b:81:ac:23:41:59:5c:86:73:70:22:
         2a:1f:b2:af:46:27:c1:59:e8:da:4d:10:cc:7b:5e:e2:be:df:
         fe:d9:93:08:0d:81:b3:55:99:3e:5e:b2:b2:a8:ec:4c:ef:5d:
         28:1c:27:a2:c9:86:1c:35:1a:4d:b3:43:b6:b5:50:bb:d6:87:
         d6:f7:08:7c:09:8c:e2:94:dd:ec:98:93:06:3c:9f:d4:8a:10:
         2c:3c:e9:51:f5:bf:9c:8e:9d:ff:06:51:f1:a6:af:ce:74:5e:
         df:2b:d0:16:29:d3:6e:6d:95:31:5d:75:8d:fd:88:8b:c2:9b:
         6c:a5:ec:7f:94:0d:d6:37:e0:42:72:fb:bf:07:62:4b:f4:dc:
         e6:63:c3:b0
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUUNDduksVZ7EsKaYt2jLQS4k5OzMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjI1MDE1MDM3WhcNMjYwNTI2MjM1OTU5
WjB6MUkwRwYDVQQFE0BkNDQ4NzZmMmU4ODUzMzhkYTVmN2YxZjFjZTY0MTFkNDNj
ZWYwOTNkZDBkNmNjZmIwYTQxMmQyZTAwNDhjMGQ1MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCtg0I5o84QYAr6q+7G+ZqBE7lPSuwbiQWxLx06z0sBV0WG
Y9ueMx46a4sX7cA23WsU2od6TberKaWlgIYrx8MMrRh7PISwl3wsQQH4bc/Mq9HU
zB7mkebGd1nJYhrXdCs2o9kF9Iv67MRdQygbmcGzx4B2xnLQ9hoeb7awY2H7emaX
S2LJS6l8V5xwEEl0zlwpjwzn/KAEkpDU0qvXVZcCvac3x5ZgLkMGueRM4DolfJaZ
qlmvs+BoAWSVDQ5ewo+nGO++/cUnoDAx/SufX3bIelTCCgC1SiHYtfiwDCLzgzOG
eBK684P3ZwHUsAaoeJ7gHXXyVlbjVCkR2Oy4ZatnAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUKbfIoJPCdhTdfMX0G44fXON41xAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzhhMGRkMWRjLTdhMDktNDE5YS1hM2VkLWZhZWFiZDdiMjE0OS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgMmAB8cwDANBgkqhkiG9w0BAQsFAAOCAQEAGPXi8A68DkqK8HjSeHjNFZwJ
nbJC6K7G228bamCFJNbQDpCRvLeiouWuNOGtHne3wnEKVfdsCV5z0M/Bt0m3lCOe
vp7ABITvw0twhjJdIl0t9FIaye8ZMcBayWty6jbvDunDvU8vAigTLnxuAFabP4EA
QSuBrCNBWVyGc3AiKh+yr0YnwVno2k0QzHte4r7f/tmTCA2Bs1WZPl6ysqjsTO9d
KBwnosmGHDUaTbNDtrVQu9aH1vcIfAmM4pTd7JiTBjyf1IoQLDzpUfW/nI6d/wZR
8aavznRe3yvQFinTbm2VMV11jf2Ii8KbbKXsf5QN1jfgQnL7vwdiS/Tc5mPDsA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:54:51 2026 by rpki-client