Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8f4fae19-cc7d-49f7-8fa7-b124a35561c1.roa
File:                     8f4fae19-cc7d-49f7-8fa7-b124a35561c1.roa (raw, json)
Hash identifier:          qxx7/JUDofk0GT4VFGHlc0Uj85XWVtlT/laUJ4j6nhQ=
Subject key identifier:   19:40:6A:FE:77:46:C3:2E:AF:8E:4F:EB:58:D0:25:CA:3F:BC:1B:29
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1D069DDF0A9D090D55E5DC4EADEEB1103A6CB7D4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8f4fae19-cc7d-49f7-8fa7-b124a35561c1.roa
Signing time:             Sun 31 May 2026 00:51:58 +0000
ROA not before:           Sun 31 May 2026 00:51:58 +0000
ROA not after:            Sat 29 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fe9:2080::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:06:9d:df:0a:9d:09:0d:55:e5:dc:4e:ad:ee:b1:10:3a:6c:b7:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 31 00:51:58 2026 GMT
            Not After : Aug 29 23:59:59 2026 GMT
        Subject: serialNumber=f3ef61dff158d360275414ffb5f9c3062dbdf621537f17fc7b47455da1281739, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:bd:69:60:d2:e9:b8:2c:e0:a7:c6:e6:50:90:
                    ec:92:7a:d5:c0:fc:7c:d7:8a:0c:d1:7a:23:eb:e6:
                    7d:84:0d:8f:66:79:52:35:3c:de:f3:c5:77:3a:10:
                    9e:fe:45:08:e1:95:2a:9b:b2:1f:42:24:ac:74:c1:
                    09:e6:f5:04:86:a2:7e:0f:31:03:e9:de:c5:00:df:
                    6e:2d:ae:b4:67:26:a5:20:78:85:7f:6d:ee:e9:45:
                    cd:b2:fd:99:56:47:7f:ca:27:ed:9f:ce:ad:47:ab:
                    00:28:b2:cc:3d:36:51:36:15:24:2e:52:ce:fd:d6:
                    26:c5:7a:38:63:ef:b6:cb:89:fd:fd:f1:62:e1:d4:
                    e5:0e:29:9a:ea:b3:85:14:44:b7:cb:a3:fc:c2:67:
                    dc:dd:0d:08:03:20:3c:c8:c6:9b:70:3f:db:37:a0:
                    18:97:f6:ef:39:2a:c9:0c:cd:cc:55:46:e4:6d:98:
                    f7:0b:85:ae:e3:63:ad:82:46:5a:04:7f:ab:30:1a:
                    1b:d9:64:f9:f5:cc:96:5a:ad:2b:7b:53:88:1f:34:
                    50:59:9c:af:0c:86:8e:4e:e0:b4:41:2f:86:86:4c:
                    a9:44:53:5c:6b:8e:69:0b:20:b4:72:04:c8:6c:fb:
                    a9:f4:50:56:05:ca:ff:94:4a:55:aa:76:5a:6b:ee:
                    43:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:40:6A:FE:77:46:C3:2E:AF:8E:4F:EB:58:D0:25:CA:3F:BC:1B:29
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8f4fae19-cc7d-49f7-8fa7-b124a35561c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fe9:2080::/48

    Signature Algorithm: sha256WithRSAEncryption
         53:00:7a:5d:1a:28:fc:8c:a8:33:03:e6:43:17:51:a6:e1:2b:
         d2:b3:6d:ae:be:ef:bf:1e:5a:63:f7:9a:22:1d:77:5c:f6:5b:
         06:47:d8:0a:7d:d1:c3:e4:8d:30:6a:aa:39:99:37:9e:55:ea:
         ab:e1:b7:d0:6f:9f:b9:d0:6a:55:38:db:6a:26:c3:84:29:51:
         ed:30:98:2b:94:8c:b7:ca:e8:16:ae:88:ed:81:73:d3:8c:b9:
         25:61:78:68:cd:0b:59:84:8e:c8:6d:bd:6f:ab:d3:8b:56:86:
         24:f9:23:d9:47:df:58:cc:87:3b:12:58:93:83:d9:9a:7f:ae:
         cf:cf:f6:70:9e:e4:37:63:bd:17:97:28:2a:9c:86:ef:21:5c:
         5f:c9:4a:de:36:06:32:40:f5:a2:26:c1:eb:a1:0b:b7:bc:f1:
         44:1c:09:a7:78:ad:74:f5:27:11:c7:5c:76:1a:38:07:33:b1:
         1b:c9:7d:29:81:28:0b:6e:32:f5:5c:74:4d:f9:c1:ba:80:bd:
         74:b4:01:25:20:15:7e:99:63:f8:7f:18:71:c4:77:cf:da:cd:
         50:31:6e:82:b2:6d:5b:1f:e2:ad:62:23:cd:23:81:33:4f:79:
         6d:d0:84:4a:39:03:f6:f9:09:4f:3f:db:33:e3:81:f7:03:5c:
         ef:77:7a:35
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUHQad3wqdCQ1V5dxOre6xEDpst9QwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTMxMDA1MTU4WhcNMjYwODI5MjM1OTU5
WjB6MUkwRwYDVQQFE0BmM2VmNjFkZmYxNThkMzYwMjc1NDE0ZmZiNWY5YzMwNjJk
YmRmNjIxNTM3ZjE3ZmM3YjQ3NDU1ZGExMjgxNzM5MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC8vWlg0um4LOCnxuZQkOySetXA/HzXigzReiPr5n2EDY9m
eVI1PN7zxXc6EJ7+RQjhlSqbsh9CJKx0wQnm9QSGon4PMQPp3sUA324trrRnJqUg
eIV/be7pRc2y/ZlWR3/KJ+2fzq1HqwAossw9NlE2FSQuUs791ibFejhj77bLif39
8WLh1OUOKZrqs4UURLfLo/zCZ9zdDQgDIDzIxptwP9s3oBiX9u85KskMzcxVRuRt
mPcLha7jY62CRloEf6swGhvZZPn1zJZarSt7U4gfNFBZnK8Mho5O4LRBL4aGTKlE
U1xrjmkLILRyBMhs+6n0UFYFyv+USlWqdlpr7kODAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUGUBq/ndGwy6vjk/rWNAlyj+8GykwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzhmNGZhZTE5LWNjN2QtNDlmNy04ZmE3LWIxMjRhMzU1NjFjMS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAB/pIIAwDQYJKoZIhvcNAQELBQADggEBAFMAel0aKPyMqDMD5kMXUabh
K9Kzba6+778eWmP3miIdd1z2WwZH2Ap90cPkjTBqqjmZN55V6qvht9Bvn7nQalU4
22omw4QpUe0wmCuUjLfK6BauiO2Bc9OMuSVheGjNC1mEjshtvW+r04tWhiT5I9lH
31jMhzsSWJOD2Zp/rs/P9nCe5DdjvReXKCqchu8hXF/JSt42BjJA9aImweuhC7e8
8UQcCad4rXT1JxHHXHYaOAczsRvJfSmBKAtuMvVcdE35wbqAvXS0ASUgFX6ZY/h/
GHHEd8/azVAxboKybVsf4q1iI80jgTNPeW3QhEo5A/b5CU8/2zPjgfcDXO93ejU=
-----END CERTIFICATE-----
Generated at Sat Jun 13 11:07:46 2026 by rpki-client