Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9329df6e-d3c0-435c-9a13-f009c71ae52b.roa
File:                     9329df6e-d3c0-435c-9a13-f009c71ae52b.roa (raw, json)
Hash identifier:          FX/lB5L0P/WGmNFGdddc6T/+1m9zxtsI1IubKTcn/mA=
Subject key identifier:   40:8D:4E:68:AB:27:C4:0E:A2:DE:A4:5D:EA:6E:78:00:8D:F8:B0:7B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1F8BD966D3E1EECB495CD18766E9697EF1D15DE5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9329df6e-d3c0-435c-9a13-f009c71ae52b.roa
Signing time:             Thu 26 Feb 2026 00:41:23 +0000
ROA not before:           Thu 26 Feb 2026 00:41:23 +0000
ROA not after:            Wed 27 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff3:8080::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:8b:d9:66:d3:e1:ee:cb:49:5c:d1:87:66:e9:69:7e:f1:d1:5d:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 26 00:41:23 2026 GMT
            Not After : May 27 23:59:59 2026 GMT
        Subject: serialNumber=4f9fe8b68d9cf2f953ebc6240f711d10fb1b6703f08df8465f180f400fe42943, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:73:e5:32:6c:ac:73:35:7b:92:ee:fb:26:eb:
                    bb:6b:22:17:3e:26:8e:db:a8:c4:78:ef:6a:b9:34:
                    4b:da:f0:c2:f9:db:bc:fa:14:b3:f9:82:bc:b6:53:
                    53:2c:29:3d:55:bb:fb:ec:aa:14:77:c1:6c:c9:b2:
                    67:52:dd:68:57:83:b1:0c:46:d0:10:38:2b:67:3f:
                    84:9f:47:21:6a:55:31:5f:b4:8e:ad:89:c6:ef:5c:
                    54:30:aa:ed:6b:cb:4b:8f:10:5f:65:73:b6:ac:44:
                    d9:ff:d9:cd:ac:0e:ad:f8:ae:05:b8:44:f4:07:1a:
                    d7:72:91:ea:0c:f1:73:27:e7:8b:62:13:fc:ba:f4:
                    a2:f8:cc:3e:24:68:28:10:f5:21:be:14:6c:7b:fa:
                    5b:48:53:ef:a3:9f:ba:31:ec:78:ee:d4:1b:2c:42:
                    05:cf:8a:3c:1b:a5:7a:7b:37:b8:c0:2d:17:78:79:
                    ab:d1:33:2f:1d:d4:4d:0c:b5:97:4e:c8:ea:63:dc:
                    fd:69:b1:a1:d7:58:35:1a:25:f4:d4:5a:dd:c7:05:
                    a6:de:f6:8d:8e:32:f3:31:ed:98:eb:64:aa:29:91:
                    cb:36:2a:c1:fa:f7:d8:52:da:51:d9:58:01:5b:8b:
                    ce:bf:74:17:b4:d1:c2:16:35:59:a9:ea:8b:cf:69:
                    d2:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:8D:4E:68:AB:27:C4:0E:A2:DE:A4:5D:EA:6E:78:00:8D:F8:B0:7B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9329df6e-d3c0-435c-9a13-f009c71ae52b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff3:8080::/46

    Signature Algorithm: sha256WithRSAEncryption
         20:16:98:95:ae:08:dc:cd:11:62:6c:cd:9b:42:0f:72:18:af:
         57:2b:72:2c:63:36:0c:5c:32:58:a0:56:12:fb:11:b3:7e:79:
         fb:d5:c9:a7:a6:37:2e:b6:17:a2:05:77:44:e2:ba:a4:18:9a:
         da:9a:1b:99:2e:34:ca:23:9a:eb:64:b6:23:7f:50:ab:e0:50:
         54:2d:3d:d7:18:4c:fe:57:a5:95:35:7c:17:fe:70:82:67:b0:
         0b:a5:a9:9d:a8:6e:8d:a7:96:7e:d4:20:7b:9c:e4:06:74:20:
         82:17:91:19:be:0e:15:85:e4:7b:fa:d1:04:af:be:a2:83:57:
         2a:1b:8f:c3:c6:93:4c:6b:15:94:7d:e9:52:69:22:8b:17:ae:
         00:03:34:ef:25:d0:73:53:9c:75:59:ff:40:06:a2:43:f4:a9:
         b5:a8:80:31:9a:d9:55:c9:54:34:2d:00:66:6c:4d:e6:c0:cc:
         6e:f4:27:13:df:b5:20:74:fb:f8:96:ba:b9:5b:a2:c2:5c:46:
         92:70:00:69:3f:fd:8d:52:3b:87:5c:45:1c:26:8a:e2:17:f8:
         4f:c5:32:45:f0:11:1d:b2:e1:fc:8f:88:fd:46:d7:4f:d7:b7:
         cf:77:e7:e4:d2:e7:01:ba:bf:72:24:d2:11:68:f5:ab:41:b4:
         37:ac:15:a2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:49:38 2026 by rpki-client