Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c0e12959-2d6a-4827-b7b0-4cc94c4e15f1.roa
File:                     c0e12959-2d6a-4827-b7b0-4cc94c4e15f1.roa (raw, json)
Hash identifier:          gBSPE00RomS/05lAo4Q9lEIfp5J6Sqc5dxTUA9RZAcU=
Subject key identifier:   EC:30:4F:FF:8C:63:F2:90:FB:84:43:A5:34:BC:E5:34:F4:16:F6:04
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       452A01DFBDE7D1D827BC0F4FDE32F1E46DA51C1F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c0e12959-2d6a-4827-b7b0-4cc94c4e15f1.roa
Signing time:             Tue 24 Feb 2026 00:10:11 +0000
ROA not before:           Tue 24 Feb 2026 00:10:11 +0000
ROA not after:            Mon 25 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f11:c000::/37 maxlen: 37
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:2a:01:df:bd:e7:d1:d8:27:bc:0f:4f:de:32:f1:e4:6d:a5:1c:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 24 00:10:11 2026 GMT
            Not After : May 25 23:59:59 2026 GMT
        Subject: serialNumber=99278eac248de80eba6bbb09d6d3ae65671d31263e5cb12074f0d77f7e59ad85, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:95:43:89:72:c1:b3:52:ed:2a:42:53:3a:0b:
                    5f:54:f1:1d:cd:22:e8:d3:a5:24:9f:18:c6:76:7a:
                    35:c1:53:62:c5:dd:f6:7a:5f:76:8f:6b:16:ec:f4:
                    96:ac:d4:4d:78:80:e0:e9:5a:d2:6a:fd:fc:02:33:
                    1b:4a:07:e3:11:d0:cd:6e:e6:1c:22:13:8f:b0:42:
                    79:31:e0:0a:6e:2b:82:8c:93:68:e3:4a:34:48:a4:
                    63:a2:58:5c:f0:78:0b:2b:71:c6:18:19:d1:df:bc:
                    07:48:ca:bc:33:0b:d6:02:53:aa:4a:8d:c9:9e:62:
                    6a:a9:59:9f:0b:0e:1c:9b:4f:8a:de:0c:7b:54:1a:
                    d1:62:b7:67:be:da:38:82:c6:7b:ec:91:f9:d0:df:
                    4b:ca:94:fd:78:0f:cf:aa:43:aa:91:50:45:67:3b:
                    0f:f6:5b:cf:c3:31:0b:e0:07:18:06:5b:a4:14:8d:
                    87:ea:6f:16:c1:48:7e:6b:9e:35:94:8f:da:59:d2:
                    3e:73:c7:90:3c:d8:e9:34:62:b1:bd:46:ee:4b:1d:
                    06:25:f2:a4:96:38:f3:f3:d1:32:35:d1:44:17:cc:
                    e1:0f:c2:ec:0b:1d:b8:63:29:cb:5c:7f:6e:c3:b3:
                    a9:14:6f:9d:8d:00:46:97:28:4a:5c:f8:58:14:58:
                    fe:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:30:4F:FF:8C:63:F2:90:FB:84:43:A5:34:BC:E5:34:F4:16:F6:04
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c0e12959-2d6a-4827-b7b0-4cc94c4e15f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f11:c000::/37

    Signature Algorithm: sha256WithRSAEncryption
         75:bf:96:09:37:cd:1a:73:1d:af:f6:53:89:8e:f0:c7:6e:af:
         43:9c:03:dc:87:c4:65:bb:ec:d1:8c:74:09:ec:4a:af:ab:4d:
         50:8f:e0:2d:18:6a:52:e3:73:9f:12:74:a1:d3:4d:e6:1e:1c:
         32:b1:65:24:0e:74:36:52:2a:01:30:4f:b0:c8:34:ab:20:35:
         ea:18:15:5d:d4:7b:4b:a7:2f:64:4f:48:94:57:9a:7c:73:83:
         e2:80:8c:e4:2a:61:5f:53:c2:23:c9:c8:91:06:8a:a2:47:2c:
         01:5e:42:3d:b5:49:06:73:ef:f7:2b:47:b0:a8:a5:ae:9f:67:
         e1:68:92:c1:a2:53:d2:ce:59:e3:85:13:e5:f4:e8:61:f5:c5:
         6b:bb:80:7e:c6:5e:04:eb:3b:ee:5d:3c:9d:6e:31:ae:5c:ee:
         75:ca:dc:0b:b9:36:7c:4b:34:0e:76:62:8a:a6:4d:89:78:a7:
         dc:a6:59:2c:4e:aa:c4:cc:91:55:cf:45:c8:1b:e7:25:c2:03:
         2d:ff:99:6f:60:e6:23:41:11:91:73:9c:ee:a9:61:ee:0f:6d:
         bc:53:99:d5:88:09:01:69:83:cb:98:8c:c2:a1:2d:93:d2:2d:
         0e:62:d1:e6:d2:cc:52:5f:4c:65:fd:c3:7f:01:52:0e:b0:35:
         fb:15:c2:76
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:18:28 2026 by rpki-client