Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8e5d3690-089a-4f12-91b2-7a9ea7972515.roa
File:                     8e5d3690-089a-4f12-91b2-7a9ea7972515.roa (raw, json)
Hash identifier:          9FaDS2wGM9u9Q+1j8kBQwzZDWvJn1sVXbFcEYOKB3hc=
Subject key identifier:   F2:3D:31:12:85:2E:51:47:D8:C6:14:0F:79:1C:42:C7:20:C5:22:D6
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0B63790A5FFF9C74B4AD04FC1B1A475B5AA85185
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8e5d3690-089a-4f12-91b2-7a9ea7972515.roa
Signing time:             Sun 31 May 2026 00:51:53 +0000
ROA not before:           Sun 31 May 2026 00:51:53 +0000
ROA not after:            Sat 29 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fe9:c000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:63:79:0a:5f:ff:9c:74:b4:ad:04:fc:1b:1a:47:5b:5a:a8:51:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 31 00:51:53 2026 GMT
            Not After : Aug 29 23:59:59 2026 GMT
        Subject: serialNumber=3121d75db307eb00506c5c1b38a939d48464f987dc9312a65270cfa17c4f436d, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:46:ef:bf:0b:da:5a:a0:79:de:ba:fc:a9:da:
                    16:5e:f2:ea:6a:28:fd:d8:78:0b:53:ae:fe:9c:40:
                    e2:81:fd:bd:53:2a:62:1c:07:23:60:26:17:cb:c2:
                    d5:ab:0f:b7:7f:51:87:7d:b7:19:3d:d4:a6:c7:6a:
                    7b:c8:67:91:83:05:7c:58:06:84:f3:f1:f2:f3:b0:
                    10:f7:b2:2f:47:c9:f0:b3:aa:dc:89:99:3b:44:69:
                    c1:4f:17:3c:17:14:d7:c6:cc:78:61:54:8c:20:e4:
                    65:e5:68:76:37:3f:a7:e8:3b:8f:e2:3a:f9:8d:35:
                    4e:0e:28:13:9f:de:c0:1d:2d:e6:fe:1d:54:c8:16:
                    f7:fb:60:4f:b7:cf:52:c0:33:61:8b:2d:86:a5:e1:
                    27:7a:01:07:c2:56:0a:c7:3f:46:4d:73:47:3e:5b:
                    60:79:71:92:a2:37:5f:c6:54:fc:d1:ff:c3:ba:a7:
                    d0:c0:29:19:75:f1:0e:c1:3e:32:9b:23:06:c0:1d:
                    d7:94:00:1f:34:d9:ec:af:d6:50:3e:61:14:be:32:
                    30:ea:a1:b2:cb:45:50:c5:a9:d9:86:1c:6b:44:d7:
                    c9:20:2a:0d:a1:19:05:90:b4:5b:8e:87:6e:fa:b7:
                    36:d4:5c:61:ec:5e:62:1e:b8:24:89:e4:60:47:b7:
                    51:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:3D:31:12:85:2E:51:47:D8:C6:14:0F:79:1C:42:C7:20:C5:22:D6
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8e5d3690-089a-4f12-91b2-7a9ea7972515.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fe9:c000::/40

    Signature Algorithm: sha256WithRSAEncryption
         8c:df:f6:10:6a:37:86:fe:f2:50:dd:90:bf:50:04:f6:10:f5:
         f5:ac:85:00:f7:44:6a:63:81:68:86:b8:8f:a9:7e:2b:d2:1d:
         93:31:93:73:26:b9:bb:63:2c:83:73:22:d2:7b:1f:1a:70:8d:
         1e:0d:8a:47:53:2d:70:74:59:85:a4:29:a4:03:01:06:d7:36:
         24:41:69:40:cc:ac:f3:41:f2:7b:d1:04:59:cc:4e:54:33:7f:
         38:ed:ef:37:f6:2a:34:5a:a0:7f:ed:f2:27:25:4a:18:f5:20:
         c9:cf:ec:06:68:ca:83:5f:76:70:2c:8a:a1:51:e8:53:ad:82:
         3c:af:5f:b0:70:49:1d:74:b6:4c:ba:1d:d0:ff:00:bf:62:46:
         57:48:aa:6b:d8:3c:03:23:a5:3e:e5:c4:ad:a3:6e:31:1a:12:
         ef:b2:a9:53:e7:f2:a9:bd:15:31:cd:43:c4:b2:1c:75:70:1b:
         55:f1:f6:c8:ce:2d:cc:50:0c:b5:f6:b7:6c:59:35:a1:4c:fa:
         6e:a6:e0:3d:e9:cb:d4:5f:ce:91:fa:ef:ad:e9:d7:f0:b0:f2:
         d4:5e:9f:b4:2f:af:11:e6:87:b4:06:e2:9e:b9:08:9c:8e:6c:
         13:f8:cb:2f:51:eb:6a:c3:42:98:46:0f:34:35:dd:2a:54:70:
         ff:ac:78:9c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 13 05:51:04 2026 by rpki-client