Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9bb5b3ff-d7f0-4096-afb0-76a4caac2233.roa
File:                     9bb5b3ff-d7f0-4096-afb0-76a4caac2233.roa (raw, json)
Hash identifier:          1ROenKrEqFhmURIoyYS8AL5SMLFVyscrzxr+Wbj3gSU=
Subject key identifier:   BA:44:AB:39:66:5B:02:A5:7F:7C:F8:0F:20:19:20:4F:9C:69:73:A1
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       06BE9B8F884162E0C408FDE72433862E983180C3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9bb5b3ff-d7f0-4096-afb0-76a4caac2233.roa
Signing time:             Sat 16 May 2026 00:40:35 +0000
ROA not before:           Sat 16 May 2026 00:40:35 +0000
ROA not after:            Fri 14 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff1:4000::/39 maxlen: 39
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:be:9b:8f:88:41:62:e0:c4:08:fd:e7:24:33:86:2e:98:31:80:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 16 00:40:35 2026 GMT
            Not After : Aug 14 23:59:59 2026 GMT
        Subject: serialNumber=395926f6c72f34c54161510a3535b949e480764f6401e1d61b9e09f10bd91e90, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:c1:ea:93:4d:d1:1f:2d:c6:2c:25:35:13:2e:
                    dc:42:16:e5:91:58:bb:6a:9a:fe:d5:2e:dd:76:01:
                    c3:de:f5:d4:8c:30:ab:cf:01:03:72:a4:c6:02:58:
                    dc:30:69:ec:d2:b3:72:37:c9:34:b9:3a:77:51:97:
                    66:0e:0d:cd:e1:3c:f3:ae:4f:f7:bb:bc:c3:6e:e2:
                    97:1b:e6:19:e9:4e:a8:e8:38:bf:5c:b4:3d:6b:02:
                    f9:40:33:67:1e:a7:f5:b7:0a:39:cb:17:fb:9b:1a:
                    a4:7d:36:df:45:6f:97:23:24:f1:ea:8a:f1:05:62:
                    9e:4b:7b:ab:5f:79:a8:af:79:46:80:f2:10:c8:e3:
                    e7:56:a5:a0:97:a9:cc:5a:5d:c9:dd:d9:9b:e4:bb:
                    15:04:6d:41:9d:ea:e0:8c:81:89:75:41:72:b1:29:
                    aa:d2:1d:15:8a:28:4e:be:b6:36:57:60:61:f7:0e:
                    43:f2:bd:08:14:9f:05:d5:9b:ef:a6:7c:fc:fd:f2:
                    1d:2f:c9:3c:47:82:fe:89:cb:c9:b0:96:e6:8e:b8:
                    a7:03:d7:73:8a:06:69:8f:aa:8f:22:c8:d0:73:e8:
                    20:8a:90:3f:b9:8d:09:f6:ae:99:01:38:1c:01:d9:
                    cb:12:07:cd:63:fb:76:4b:da:8b:b9:3e:e3:60:c8:
                    4e:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:44:AB:39:66:5B:02:A5:7F:7C:F8:0F:20:19:20:4F:9C:69:73:A1
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9bb5b3ff-d7f0-4096-afb0-76a4caac2233.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff1:4000::/39

    Signature Algorithm: sha256WithRSAEncryption
         10:a8:a3:8b:29:20:e4:6c:56:e4:e8:9e:da:c7:6e:8b:72:f5:
         ac:3a:0e:91:02:b3:41:ea:aa:89:5d:dd:08:45:2d:27:37:9b:
         ce:e2:e5:06:4b:d1:c2:77:b9:b2:09:5a:c3:e2:02:f3:ba:cb:
         c4:55:de:c6:0f:e2:b9:7b:e8:bf:fb:d0:64:7c:82:cc:09:b1:
         01:48:21:b0:0b:26:d1:99:4f:a1:1d:ed:b9:ef:92:58:70:14:
         72:63:c6:ad:25:49:4e:ec:fc:8b:ed:94:eb:91:17:9f:62:2f:
         9c:c9:2c:26:0a:b3:40:68:42:c3:cc:16:be:31:c4:ca:db:5d:
         29:2e:f9:5d:11:47:56:6a:b6:47:c6:68:39:41:0a:06:91:29:
         6f:0e:3d:a0:7e:88:07:55:cb:67:0f:38:62:28:77:60:aa:6d:
         d7:d6:ba:e5:df:87:c4:3c:32:f9:93:df:b0:c5:fe:f5:6d:4c:
         1a:d8:05:c8:e2:de:82:36:a0:3b:2a:d2:8b:7f:73:57:cf:85:
         c7:59:f4:cd:53:8f:59:29:86:d4:6c:f7:28:79:7e:31:58:c4:
         fe:6a:76:51:63:72:e1:f6:5c:06:b8:b9:3c:0e:a3:7a:ad:6f:
         15:27:cd:89:84:3f:36:73:58:4b:25:3c:87:ce:cf:54:7e:f4:
         d4:eb:60:3e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:18:08 2026 by rpki-client