Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c0c5622a-6b2a-4735-93cb-494f32f8d339.roa
File:                     c0c5622a-6b2a-4735-93cb-494f32f8d339.roa (raw, json)
Hash identifier:          BReLazjHRnC8x8ZViL9vzR77e/KG/SqBKJ2HYN2B1Pk=
Subject key identifier:   25:43:DF:CE:A1:23:1F:1F:85:84:29:70:B9:9D:FC:F6:F8:8D:8F:D2
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       513C25AFCD3B123A069813FF3A8D87E1D39C32B7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c0c5622a-6b2a-4735-93cb-494f32f8d339.roa
Signing time:             Sat 16 May 2026 02:01:15 +0000
ROA not before:           Sat 16 May 2026 02:01:15 +0000
ROA not after:            Fri 14 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f00:e040::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:3c:25:af:cd:3b:12:3a:06:98:13:ff:3a:8d:87:e1:d3:9c:32:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 16 02:01:15 2026 GMT
            Not After : Aug 14 23:59:59 2026 GMT
        Subject: serialNumber=c9236ef19a8c20f370aa8538592d0dfbbc1f52066748bbb1e93a901adfead4fd, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:30:d1:ba:43:c9:b7:28:f4:24:51:72:05:8c:
                    61:de:18:0d:57:87:c0:40:98:c0:01:ce:fe:8d:8b:
                    8c:1d:c4:19:68:b0:d5:3b:77:77:b2:e4:83:0d:39:
                    38:0d:a8:63:f1:21:be:a8:03:99:24:64:14:79:05:
                    a2:d5:a0:93:6f:84:c1:d0:9e:05:1e:60:b8:0b:7d:
                    d7:a2:e7:41:7e:2a:bb:97:82:54:16:bd:5f:46:0d:
                    0b:24:a4:09:79:7c:4c:60:e2:58:c9:8a:b0:e2:07:
                    87:9f:59:59:4a:4b:04:2d:c5:e4:d4:ca:52:46:b2:
                    11:40:c3:00:0a:1e:e2:3f:93:60:1c:a0:9f:39:60:
                    84:0b:4b:97:de:de:d0:e5:f5:ca:92:9a:d1:05:f5:
                    4f:d2:44:f8:f8:e6:ce:f9:25:fa:1d:1c:28:35:3b:
                    d4:50:b5:12:8e:5b:2f:80:b3:2a:53:87:b7:40:89:
                    c4:a4:f2:b5:36:a2:3b:72:ec:87:70:0e:71:63:06:
                    04:9d:a0:ab:55:2d:ba:e6:37:37:eb:04:95:95:9b:
                    b2:e5:62:21:6d:22:c8:31:d2:da:33:c9:1a:12:ce:
                    41:88:3a:af:4f:c4:ae:2a:3f:03:6b:92:0b:ad:24:
                    bd:95:cc:7c:20:c4:b3:a8:02:f2:e4:fb:7c:46:14:
                    fa:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:43:DF:CE:A1:23:1F:1F:85:84:29:70:B9:9D:FC:F6:F8:8D:8F:D2
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c0c5622a-6b2a-4735-93cb-494f32f8d339.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f00:e040::/48

    Signature Algorithm: sha256WithRSAEncryption
         4f:e5:c8:7d:9a:ed:1d:14:b2:02:e8:1a:ed:e7:f0:e0:20:86:
         47:27:71:f1:8d:6c:ee:df:0c:2b:e2:59:a4:28:bc:4d:fb:53:
         b3:42:e9:45:84:55:e6:d8:b0:3f:87:19:c2:99:f9:41:1d:c7:
         59:b5:26:04:9c:12:12:58:92:4d:d2:47:2a:84:e3:6f:b1:d5:
         c7:40:b4:ce:92:1d:9e:89:ca:62:3c:2b:da:45:70:c4:f6:82:
         cb:5f:c6:5a:3a:23:47:c3:d0:2f:bd:f9:ac:f0:0a:e8:53:8d:
         96:8f:5e:42:d3:49:c7:df:f5:6c:16:30:1e:e8:2b:d9:c1:7b:
         46:8d:25:5f:f5:b6:a7:4a:2c:68:c6:aa:55:43:5a:2b:7b:fd:
         43:16:d8:29:6e:1b:41:63:9b:c8:20:9f:a3:d6:2c:70:54:3e:
         43:1a:d4:35:bc:2a:52:d2:00:42:49:13:77:df:8a:a1:26:ee:
         3e:17:9f:4f:a9:0c:17:d0:e5:9a:35:2c:14:26:51:14:9c:dd:
         f9:2c:9a:99:da:1d:28:94:86:27:40:7b:4c:c0:f0:aa:ee:53:
         f4:ee:19:f6:13:c8:84:11:d1:1a:e8:83:06:16:dd:aa:97:b7:
         fe:80:97:7f:ed:dc:26:89:18:8d:46:2e:1a:55:47:e4:93:57:
         09:85:94:87
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 13 13:06:08 2026 by rpki-client