Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/95b69fbb-e14d-4a29-bd41-4e50e9857860.roa
File:                     95b69fbb-e14d-4a29-bd41-4e50e9857860.roa (raw, json)
Hash identifier:          t+liEWtOZYhrWgl0sz7pws/6s/I1u6SkbcuN8RkEDBk=
Subject key identifier:   6D:2E:27:79:AB:2B:4E:7A:77:06:C6:C1:B5:87:F9:90:77:D0:90:C8
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       501BA92890C0B745C06CCDF4A3945CC0480C04DD
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/95b69fbb-e14d-4a29-bd41-4e50e9857860.roa
Signing time:             Sat 16 May 2026 00:10:44 +0000
ROA not before:           Sat 16 May 2026 00:10:44 +0000
ROA not after:            Fri 14 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f15:8000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:1b:a9:28:90:c0:b7:45:c0:6c:cd:f4:a3:94:5c:c0:48:0c:04:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 16 00:10:44 2026 GMT
            Not After : Aug 14 23:59:59 2026 GMT
        Subject: serialNumber=2764ee88f4ae876a58da133c13bca374be86f746180ecef3793458de46939885, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:19:cb:b8:5b:37:91:46:5d:24:dc:fb:21:82:
                    1e:35:50:ba:47:e8:56:bd:1e:cf:f6:d3:a1:1b:3f:
                    e3:58:ed:80:c8:40:0c:87:38:59:94:a0:ea:43:f1:
                    c6:8f:46:50:47:e8:76:1d:2a:d5:6f:79:a7:ec:be:
                    c7:3e:9c:e9:3a:8a:8e:9e:8f:76:5f:a2:60:1b:46:
                    f0:8b:18:b7:9c:ea:20:66:93:a8:5a:82:a2:69:de:
                    83:5e:a9:de:0c:3c:0d:df:87:39:f6:13:cd:6f:0b:
                    7d:c2:b0:fd:42:aa:69:e2:95:c0:c3:dd:43:34:79:
                    4e:99:39:30:b7:25:25:3f:bf:fe:b5:1e:81:29:3f:
                    db:29:2c:65:02:72:d1:53:5e:07:56:9a:5a:be:7e:
                    1b:bb:0e:da:04:f5:87:4e:63:1a:9c:80:3a:7e:6c:
                    ed:03:b1:3b:11:fb:c2:89:e0:52:24:d5:89:c2:b2:
                    50:2c:e5:92:2d:ba:43:46:9d:44:c4:d1:aa:42:3b:
                    a1:9b:b5:f1:d9:cc:74:6f:6f:e2:2e:e2:22:80:7f:
                    0e:e8:4d:26:3c:4f:58:b7:82:32:ce:6f:c3:eb:f9:
                    a8:ae:91:a6:81:7a:7f:a1:b5:55:10:a9:8e:4e:9e:
                    50:59:9b:fe:a8:79:2c:a4:b3:6d:e5:30:26:79:c4:
                    a9:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:2E:27:79:AB:2B:4E:7A:77:06:C6:C1:B5:87:F9:90:77:D0:90:C8
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/95b69fbb-e14d-4a29-bd41-4e50e9857860.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f15:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         7b:d7:92:77:11:24:8b:4e:58:02:e1:46:05:83:35:60:94:9c:
         ec:59:e1:0e:b3:58:a2:2f:23:ea:94:be:cf:70:12:e7:8f:22:
         5d:3e:ec:de:87:fd:d8:43:f6:72:e0:fd:2b:1c:99:be:d7:f5:
         fc:8c:a0:a2:84:a5:07:f2:13:cd:3c:12:54:0b:57:f8:9e:6e:
         f1:94:e2:f1:0b:04:1f:4b:cd:84:f3:8f:75:22:5e:07:54:c0:
         36:ca:7d:5a:13:76:26:88:9a:1e:b9:64:c5:ce:fc:d4:b8:4b:
         5c:e0:38:ab:a9:44:cd:1e:36:9b:72:f1:82:21:9b:be:45:b6:
         ed:7e:ba:a5:1c:f9:8b:c4:d5:b1:a7:89:04:0b:d2:1b:68:28:
         22:d4:93:f8:77:e1:50:56:ab:8b:46:c1:4d:f8:3d:ab:0a:ce:
         52:69:7e:c3:74:5f:2a:09:20:7d:3a:bb:be:95:71:9b:ec:7f:
         65:66:9a:12:78:40:b5:c2:db:20:bd:83:98:22:a9:98:72:b4:
         c7:e1:63:4a:bc:16:2b:cc:29:e6:59:7d:6e:67:9a:4a:05:f0:
         52:6a:d5:9f:25:d7:59:7b:01:d4:db:d1:ab:3c:e3:3a:e4:d2:
         05:40:f3:7f:4b:37:87:3b:a7:fa:2c:a1:ad:07:16:ef:53:f9:
         8b:12:b8:ad
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:03:22 2026 by rpki-client