Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b370a306-45cd-449e-ac1b-36ca2dff5513.roa
File:                     b370a306-45cd-449e-ac1b-36ca2dff5513.roa (raw, json)
Hash identifier:          oYFzLoJ7zTzXcpbLN3xVuJ4inZp5zeyHVauun31Ks7E=
Subject key identifier:   83:ED:7D:49:4F:29:F9:5A:5F:0F:DE:FE:13:05:93:B9:48:E0:26:D3
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       355739F77861D24AC39EC67E1EF3178967BDE0B4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b370a306-45cd-449e-ac1b-36ca2dff5513.roa
Signing time:             Tue 07 Apr 2026 21:51:54 +0000
ROA not before:           Tue 07 Apr 2026 21:51:54 +0000
ROA not after:            Mon 06 Jul 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1ff5:8200::/39 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:57:39:f7:78:61:d2:4a:c3:9e:c6:7e:1e:f3:17:89:67:bd:e0:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr  7 21:51:54 2026 GMT
            Not After : Jul  6 23:59:59 2026 GMT
        Subject: serialNumber=b415b21ed0044c4f4f579a4ecfcfc18a1c951b7159db9e4a23c51fc7fe5373f2, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:36:a0:0e:65:84:e4:9b:d8:4e:2b:d5:23:12:
                    20:70:cb:21:6b:7e:66:22:b5:28:b1:84:a7:c0:b1:
                    b5:f0:49:2f:eb:8b:17:c6:a5:71:83:f6:bc:5a:c7:
                    2e:3a:10:34:67:70:6d:f9:91:0f:93:73:c8:4f:ca:
                    ee:3f:33:da:aa:28:15:54:6f:66:bf:bf:64:7c:47:
                    f0:b0:6b:c6:4e:81:c3:45:0f:41:b0:ba:c9:6a:b4:
                    5f:ea:dd:22:23:bd:ef:1e:0a:5a:e0:5d:5b:4b:25:
                    3f:f5:b6:12:07:6f:5e:bc:a9:f0:b6:c3:c1:f9:f3:
                    97:9c:b2:d6:2e:52:7a:59:c3:2e:08:cd:03:5b:07:
                    b1:27:e9:ff:81:3d:1a:a2:cd:e4:64:3f:0f:29:47:
                    1b:77:8f:f6:11:2e:27:d7:14:8d:18:69:2a:6e:06:
                    d9:20:51:fa:0c:c4:69:ca:04:f5:19:2c:1c:63:3c:
                    09:12:5f:b6:d5:68:63:f7:71:6d:2f:65:34:d7:a4:
                    a5:aa:5a:48:ee:cd:cf:0a:58:1c:83:82:18:29:79:
                    4f:db:28:aa:58:db:f6:e6:a3:a6:35:83:f1:7f:ec:
                    9a:bd:27:bc:5a:1f:3b:84:83:f8:e8:bf:cc:b8:98:
                    7a:35:7c:bc:60:6f:65:eb:fd:e4:0b:9c:44:cf:71:
                    2a:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:ED:7D:49:4F:29:F9:5A:5F:0F:DE:FE:13:05:93:B9:48:E0:26:D3
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b370a306-45cd-449e-ac1b-36ca2dff5513.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff5:8200::/39

    Signature Algorithm: sha256WithRSAEncryption
         0b:35:bc:b0:39:f3:a0:ed:32:ce:b8:3a:a2:ec:b6:3f:f8:48:
         eb:33:f8:8f:ef:34:a9:85:fa:4b:bb:90:23:15:1e:c4:b4:1e:
         7a:fb:9d:36:80:db:1d:fa:1c:cc:6e:0d:44:7d:50:f9:83:b4:
         da:02:7b:d8:a7:59:a4:e3:de:cf:0a:db:19:39:40:49:53:43:
         7d:14:c1:d9:b8:b9:c5:c6:43:15:a3:24:ae:0e:6d:58:90:9e:
         a1:69:20:97:53:74:a8:d3:c0:9c:f1:c9:d4:83:be:5e:d4:42:
         4a:8d:2c:40:f1:35:16:b6:03:b8:45:ac:d1:45:5d:ae:c6:35:
         3d:aa:4d:f6:49:b1:33:4d:59:bd:15:6c:b0:0a:b6:fa:5a:42:
         b0:18:a7:a8:07:c2:2b:ed:05:68:dd:b6:d3:94:36:dc:6b:a7:
         5a:12:53:6a:b3:9d:eb:8d:0e:a7:f9:26:70:3f:77:09:8d:63:
         a5:71:16:63:3e:d1:94:d8:16:fb:1a:a9:2e:cd:eb:d1:06:85:
         78:7a:68:23:80:56:a4:24:0f:ce:a8:5b:bc:06:49:da:3e:a6:
         6d:9e:ca:dd:f8:71:e6:a1:b8:bd:eb:50:8b:19:4f:e7:a8:fe:
         23:51:59:53:c0:46:74:50:75:40:c5:d3:fc:b2:32:a4:af:47:
         2b:57:b0:00
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 05:57:55 2026 by rpki-client