Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/94209e4d-7b05-4729-b164-804591eea8be.roa
File:                     94209e4d-7b05-4729-b164-804591eea8be.roa (raw, json)
Hash identifier:          sqLcXuZ9naN4GfRJGM//nG9jPfV2i/cCSG2Y2qzhkEk=
Subject key identifier:   DC:CE:BD:29:4B:BD:8E:29:45:70:56:AF:16:B2:4B:38:11:F6:75:E9
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       047D266C91B0ABCDC7A752A3BB8B9F7B077778F4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/94209e4d-7b05-4729-b164-804591eea8be.roa
Signing time:             Sat 16 May 2026 00:31:28 +0000
ROA not before:           Sat 16 May 2026 00:31:28 +0000
ROA not after:            Fri 14 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fb8:3400::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:7d:26:6c:91:b0:ab:cd:c7:a7:52:a3:bb:8b:9f:7b:07:77:78:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 16 00:31:28 2026 GMT
            Not After : Aug 14 23:59:59 2026 GMT
        Subject: serialNumber=9a0f32954478c31d55cd8bc629729f646cb92acea9a58f4b38a9231838e7eb05, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:5d:7d:2e:7e:7b:be:0a:e4:0f:4e:3f:23:1f:
                    c2:59:4c:39:d0:5a:f9:0d:25:8b:3d:f2:e2:69:26:
                    47:c1:4b:5f:b8:63:72:fd:48:c4:62:6e:84:7e:23:
                    32:1f:04:aa:75:d2:13:86:10:74:bf:3b:2a:21:4a:
                    0a:1a:7b:30:c4:90:86:19:10:8e:96:c4:03:40:e6:
                    32:ad:46:74:a1:12:8a:46:7d:6a:50:c1:39:d6:f1:
                    09:59:27:2c:91:2d:43:17:31:f7:8e:a6:67:c9:90:
                    09:a1:68:90:4f:c4:00:9c:97:ca:93:df:21:0d:5f:
                    bd:ee:e9:f8:5f:67:6d:38:6c:1d:d3:30:ee:70:53:
                    98:2e:2a:ac:8b:a9:b0:3f:b0:77:b7:2e:96:aa:c1:
                    32:0e:60:dc:e8:9a:4a:20:b4:d9:07:1f:2b:da:14:
                    e7:c3:75:94:fb:6b:5a:5e:33:b6:be:ec:fc:59:44:
                    54:ed:67:4b:be:7e:ac:9c:9e:77:5b:b8:56:ba:ee:
                    51:ed:3d:4a:f1:ce:30:5d:54:01:69:4a:f6:1b:70:
                    c0:f0:69:51:c7:23:d8:e9:4f:c6:ec:18:66:3e:d7:
                    aa:fd:57:fa:97:e5:a2:26:70:db:c3:63:72:4f:8c:
                    77:e2:57:98:76:cb:96:31:2f:d6:cd:d3:0a:c8:0a:
                    f0:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:CE:BD:29:4B:BD:8E:29:45:70:56:AF:16:B2:4B:38:11:F6:75:E9
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/94209e4d-7b05-4729-b164-804591eea8be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fb8:3400::/40

    Signature Algorithm: sha256WithRSAEncryption
         45:4d:1a:49:f7:8b:fc:bc:6e:23:44:34:72:4e:90:08:73:d1:
         65:58:3f:60:ce:77:74:8b:1a:26:05:6d:86:06:bf:50:2d:14:
         9c:bd:9b:f1:5c:71:ea:08:10:ac:5b:08:e2:f4:99:de:91:df:
         ab:e1:ea:3e:6f:e6:80:84:a6:b9:a5:c9:d2:e8:47:f1:29:6e:
         90:36:fd:21:5f:58:37:85:40:2c:dc:27:d1:14:29:62:2c:2a:
         e0:49:61:70:07:f5:bf:c4:e0:42:04:a4:5c:0c:1e:03:32:21:
         7d:e9:6b:0f:a1:c2:a8:48:8f:76:f4:9e:48:80:eb:c2:de:c6:
         71:27:35:ca:8e:e8:d3:46:10:79:32:2a:05:eb:ae:b5:ec:a1:
         d1:b4:07:6a:22:e6:2b:33:16:17:0c:31:3c:84:14:32:23:8c:
         19:6e:31:b6:7a:1a:54:82:15:25:19:e5:8a:2f:c7:53:af:6b:
         2b:d6:42:47:78:ed:38:37:e6:d6:f0:74:64:7e:a6:9d:45:f7:
         5a:d1:1a:44:88:8e:78:24:47:97:a6:bb:d1:d7:ce:25:68:60:
         2e:c0:c4:f2:78:28:ec:c4:1e:f6:55:8c:33:1d:5e:5a:2c:56:
         33:60:4f:b4:4d:2f:b3:e6:6e:bf:4d:ce:4b:dc:a6:22:9e:ef:
         df:f5:23:bb
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:30:47 2026 by rpki-client