Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/be7eaf59-5a96-4b40-9b96-3c9374ff1cdc.roa
File:                     be7eaf59-5a96-4b40-9b96-3c9374ff1cdc.roa (raw, json)
Hash identifier:          l24invBuUpf0mGWmjihrshxotn2sroT0ObpPT6J1/lA=
Subject key identifier:   E7:52:64:67:45:47:EC:33:30:A2:1B:13:6F:D1:1E:62:99:F5:A6:FF
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       570497FFEB14BEC3ACAD1C57C51FBC5760530057
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/be7eaf59-5a96-4b40-9b96-3c9374ff1cdc.roa
Signing time:             Sun 17 May 2026 00:50:07 +0000
ROA not before:           Sun 17 May 2026 00:50:07 +0000
ROA not after:            Sat 15 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff3:8000::/39 maxlen: 39
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 18 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:04:97:ff:eb:14:be:c3:ac:ad:1c:57:c5:1f:bc:57:60:53:00:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 17 00:50:07 2026 GMT
            Not After : Aug 15 23:59:59 2026 GMT
        Subject: serialNumber=2578b8435a01df038cf3f8bcd53ecf54ddd8150e9ca4184e25ef09320a4ce209, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b7:42:8b:79:4d:3e:70:fb:59:32:d2:44:38:
                    23:30:54:9f:35:8c:43:d7:3e:d5:fc:e5:10:7c:45:
                    52:aa:5c:26:99:c3:f3:ea:e0:a2:5b:09:8d:35:58:
                    ac:c9:36:72:36:30:2d:4c:a7:cd:ed:21:ad:cf:0c:
                    bc:51:6c:ad:14:61:27:77:33:8e:55:90:05:fd:10:
                    6a:f7:51:62:24:28:63:21:11:fd:34:7b:14:c0:32:
                    89:be:bf:de:83:a0:56:89:70:d0:fb:59:44:31:92:
                    b4:c0:ce:be:d2:5c:48:21:3c:c1:8f:f9:64:ac:fc:
                    7e:6b:21:fc:8a:55:4a:48:61:94:07:a1:11:8b:e6:
                    e6:b8:aa:b0:de:8e:73:e0:9c:67:90:7b:b8:71:70:
                    47:6e:21:f2:aa:bd:89:e8:5a:68:11:25:61:78:d4:
                    0c:5c:96:7d:c0:37:61:1b:cf:55:40:80:fc:a4:f2:
                    a4:a8:41:c1:d7:cd:49:19:0f:88:1d:3b:bd:46:9a:
                    ab:32:7a:7b:a1:8b:7e:9a:b5:18:18:55:7b:ce:c3:
                    e8:1a:95:73:d0:cf:d2:b6:4f:54:48:a0:41:8d:d3:
                    38:e8:64:77:d9:da:99:ac:69:55:9f:b9:b7:2a:83:
                    4b:28:b8:f0:f3:4f:11:a5:00:b3:8a:cd:18:6a:de:
                    a4:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:52:64:67:45:47:EC:33:30:A2:1B:13:6F:D1:1E:62:99:F5:A6:FF
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/be7eaf59-5a96-4b40-9b96-3c9374ff1cdc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff3:8000::/39

    Signature Algorithm: sha256WithRSAEncryption
         47:ac:ad:54:09:4a:23:86:10:2f:6e:f7:59:da:a6:dc:b9:98:
         86:68:6d:cd:f2:8b:08:64:dd:ae:51:e7:c6:67:4e:46:05:cc:
         68:dd:a8:85:c1:c9:45:73:d3:88:38:e1:b9:4a:29:2a:1f:60:
         51:94:10:e7:6f:ca:f9:7b:ee:e8:af:f8:18:b3:37:bd:59:26:
         a1:28:32:65:da:30:9c:5c:d0:c9:5c:b1:24:27:62:8a:c6:58:
         77:74:25:68:9b:f7:3c:4e:78:84:01:10:7f:88:f3:d8:2d:ee:
         10:2a:aa:ea:0a:0a:1b:c1:ba:42:ae:96:c2:14:df:2e:ac:d8:
         f8:e9:61:63:76:83:14:d2:c4:11:6a:3e:ca:fd:ba:e1:0d:e3:
         c2:83:ec:0e:dd:f7:af:24:1c:9f:8a:fe:8c:0a:b0:fb:6e:09:
         71:c6:08:0f:8c:7c:4e:c9:81:c6:ae:22:99:8e:90:66:a0:34:
         b7:bb:3e:72:4e:52:ee:46:dc:1f:4c:ac:06:2d:6f:17:13:79:
         29:d3:76:72:7b:71:ab:f1:5f:a6:f5:7c:ec:b3:37:3e:11:b1:
         d2:ca:1c:d8:72:17:d0:78:bd:aa:7e:2c:98:33:e2:c5:3b:4a:
         70:80:e6:7a:c9:da:bb:41:c6:68:7d:6f:ca:b4:ca:12:15:1f:
         e4:88:b5:d0
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:24:16 2026 by rpki-client