Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9bff93e5-d08c-4c01-9251-abcb997a5276.roa
File:                     9bff93e5-d08c-4c01-9251-abcb997a5276.roa (raw, json)
Hash identifier:          3l2RSSbx0IGr5lxBGI+X3MVhiX6JIVTX9+EIKzJx21c=
Subject key identifier:   7C:8F:93:FA:B4:95:E7:7E:15:FD:94:2D:27:55:B8:F0:38:D0:A4:D2
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       05AD1C8836068DE3BDD26E855163673E233B49CB
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9bff93e5-d08c-4c01-9251-abcb997a5276.roa
Signing time:             Tue 24 Feb 2026 01:01:57 +0000
ROA not before:           Tue 24 Feb 2026 01:01:57 +0000
ROA not after:            Mon 25 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f00:4020::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:ad:1c:88:36:06:8d:e3:bd:d2:6e:85:51:63:67:3e:23:3b:49:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 24 01:01:57 2026 GMT
            Not After : May 25 23:59:59 2026 GMT
        Subject: serialNumber=adec79316e4892b208611e7dbb638b1b90caab6055db104eccde7efdc4659307, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:09:c8:33:10:f3:2f:d4:6c:b7:18:69:a6:bb:
                    2d:57:1d:c5:d1:87:cd:34:a6:cc:96:a9:97:e9:c0:
                    25:0f:41:b8:7b:47:d3:1a:6a:29:97:49:29:6e:82:
                    55:fe:c8:1f:50:24:43:e8:de:a7:36:47:ea:50:b2:
                    36:41:9d:8c:b5:20:1e:04:bc:34:7d:26:8e:3a:28:
                    e2:c9:0c:51:5d:f4:08:44:02:6e:54:40:87:2b:34:
                    e5:70:7d:b8:65:c0:5e:a8:a8:12:9b:65:ec:df:c8:
                    cf:da:5d:b3:16:4c:d4:4b:22:47:14:60:1f:16:a0:
                    ba:53:65:0c:9a:c4:ca:1b:c8:48:17:11:8d:4d:40:
                    78:ac:f5:6a:60:8a:22:51:ca:11:77:30:be:bd:90:
                    a7:5e:58:e6:a7:ce:0f:7c:9c:5a:49:c0:a7:b3:ba:
                    4d:29:dd:81:e4:3e:85:fa:93:bb:1b:e1:9d:8b:8e:
                    0e:39:48:b9:81:e7:f4:98:1b:44:36:ba:d8:1b:b5:
                    e6:53:a1:57:bb:59:bc:da:18:a1:7e:ec:9c:c8:dc:
                    88:90:a3:11:f1:3d:f2:54:a4:26:87:06:58:ec:0c:
                    a4:9d:8b:6a:68:b5:d1:0b:e8:cf:6f:a0:8d:b6:01:
                    72:c1:61:9e:78:f6:8a:56:83:33:a1:ed:ea:e8:80:
                    eb:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:8F:93:FA:B4:95:E7:7E:15:FD:94:2D:27:55:B8:F0:38:D0:A4:D2
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9bff93e5-d08c-4c01-9251-abcb997a5276.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f00:4020::/48

    Signature Algorithm: sha256WithRSAEncryption
         09:73:66:90:5d:4b:e9:41:22:07:a3:3d:b8:bb:61:3e:55:5b:
         b0:24:c3:0c:9f:ea:0d:db:91:ee:19:60:b7:09:3f:e2:4e:e9:
         c8:85:9d:d7:f1:a4:4d:48:38:9d:65:3a:5b:77:4e:34:6d:1c:
         76:6f:e7:0f:e8:62:1c:64:55:ab:88:97:54:9e:cc:37:33:4a:
         50:76:a9:1d:2f:3a:b1:42:7b:d6:34:69:37:a0:e9:34:a9:f1:
         70:91:09:cf:b0:a3:ef:42:22:bd:46:9f:2c:27:90:b3:f3:99:
         2d:21:fd:e9:ac:7c:97:bd:10:d6:56:8d:4b:fb:81:1f:26:86:
         d1:0b:89:3f:87:e4:fd:60:ec:14:33:ea:e5:f5:3a:e8:ff:22:
         ca:b1:0e:0e:d1:59:91:f5:56:26:27:20:9a:b5:60:45:bb:72:
         79:b8:fd:e7:25:de:80:20:18:a1:32:7a:36:8c:88:51:e7:92:
         c2:e9:62:0b:41:7d:83:9d:dc:09:33:fc:b7:9b:9b:60:6c:97:
         8e:32:be:d1:88:df:2d:80:df:0e:de:7c:ea:1e:93:66:1b:e8:
         99:3d:a0:4c:dd:70:a5:f1:46:22:a2:1d:61:19:3f:f7:6c:cc:
         76:a7:78:93:3d:9c:87:06:14:66:14:89:88:ae:67:2c:7c:d0:
         ff:ca:6e:99
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:27:21 2026 by rpki-client