Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c7d6c05e-b445-4685-9bdb-bb448d74ef34.roa
File:                     c7d6c05e-b445-4685-9bdb-bb448d74ef34.roa (raw, json)
Hash identifier:          k+hg5ixXbP/IyRogBf50wu3evm0w/wAvFFXQMWa8EPQ=
Subject key identifier:   54:52:F4:1D:BC:6E:1B:3A:52:A6:47:57:31:9B:F0:78:51:3E:37:B5
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1FEC884F8AE1D9E1ACF0EACDD5FD4E7A62860289
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c7d6c05e-b445-4685-9bdb-bb448d74ef34.roa
Signing time:             Wed 11 Feb 2026 00:40:04 +0000
ROA not before:           Wed 11 Feb 2026 00:40:04 +0000
ROA not after:            Tue 12 May 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1f61:80e0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:ec:88:4f:8a:e1:d9:e1:ac:f0:ea:cd:d5:fd:4e:7a:62:86:02:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 11 00:40:04 2026 GMT
            Not After : May 12 23:59:59 2026 GMT
        Subject: serialNumber=a3efb5fb1f35dd718bfca95f47b9354c43833a3b8098150f1131ac82b843ba57, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:de:19:f0:d4:0b:db:77:86:5e:07:bb:25:b4:
                    d7:32:f8:64:8c:8d:c7:a8:43:ad:34:82:9b:07:6f:
                    6e:2f:29:a2:05:6a:f1:75:55:28:03:0d:e8:87:fd:
                    3f:36:a3:95:e4:44:b6:d0:97:4d:0b:a4:af:0a:3e:
                    21:58:96:78:14:55:e8:f2:25:2d:5b:f6:ed:8c:77:
                    85:ae:bd:c0:20:35:18:a4:80:f8:16:36:fc:e3:aa:
                    00:de:e9:c9:d4:f1:ea:35:76:04:b0:0e:93:3c:26:
                    af:9e:67:d8:58:b6:91:c7:2f:97:19:12:10:99:7e:
                    4a:66:d2:9e:19:b3:b2:ec:51:a2:d4:8a:0d:4b:90:
                    a0:f1:4b:12:01:4d:a7:ea:47:85:90:83:cf:cf:c2:
                    6d:ba:a0:4c:05:6f:59:55:0f:b8:7f:f3:2c:4b:fa:
                    8d:80:b1:cd:3c:f6:20:db:54:80:f4:e0:c8:eb:c8:
                    aa:86:ed:71:bc:c9:d5:d6:1b:94:54:8d:a9:72:19:
                    1f:d9:b7:6d:1c:f0:68:ff:97:39:0a:76:0b:7c:e2:
                    50:ba:d8:4e:0d:d5:0f:89:b2:d5:c5:17:d3:cb:dd:
                    31:35:8f:64:26:3b:41:4e:da:e9:6f:b6:6b:d0:5e:
                    26:f3:b9:1d:a1:7b:56:19:4b:3e:93:1c:81:19:02:
                    24:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:52:F4:1D:BC:6E:1B:3A:52:A6:47:57:31:9B:F0:78:51:3E:37:B5
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c7d6c05e-b445-4685-9bdb-bb448d74ef34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f61:80e0::/48

    Signature Algorithm: sha256WithRSAEncryption
         13:d1:ac:92:61:b5:e5:33:eb:f9:07:a4:b1:64:2b:d7:da:e8:
         5b:df:f8:2e:70:56:d6:26:31:7d:f3:3e:4f:da:20:5c:ad:65:
         e1:3b:c4:76:03:ef:30:63:74:63:b2:69:b7:ec:3d:4c:f2:15:
         5c:86:48:9b:98:fc:87:f2:35:62:93:ec:35:b5:1c:9c:f9:20:
         03:34:07:b9:06:2a:72:c8:a9:1b:45:ec:76:ca:51:8c:67:13:
         ea:1f:63:08:d0:a0:02:91:3f:99:55:61:7d:75:40:0a:86:e6:
         84:07:85:c0:12:c3:ed:ed:12:db:e1:15:6c:c1:e1:f9:8a:30:
         5f:d6:85:a7:f9:29:4a:d3:cd:f2:b4:f9:e8:71:5f:0d:f8:cb:
         f5:22:69:72:a2:92:d0:94:61:a8:db:4d:81:86:18:2f:86:cc:
         93:e8:82:1d:1e:5e:36:87:c6:59:f3:01:86:b2:93:ab:6b:bf:
         8b:e4:7e:19:d1:85:c0:4c:d0:04:89:9b:66:41:de:36:20:66:
         56:e3:e7:dd:60:0e:e1:15:7e:5a:fc:17:71:5b:6f:4d:79:9b:
         45:c3:8a:25:e8:b4:7d:eb:2e:d2:83:55:a6:18:bb:4a:dd:d2:
         8c:98:a6:4e:83:eb:de:32:2f:96:2a:a3:ce:8a:1e:c3:2b:ad:
         d4:91:d5:2a
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUH+yIT4rh2eGs8OrN1f1OemKGAokwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjExMDA0MDA0WhcNMjYwNTEyMjM1OTU5
WjB6MUkwRwYDVQQFE0BhM2VmYjVmYjFmMzVkZDcxOGJmY2E5NWY0N2I5MzU0YzQz
ODMzYTNiODA5ODE1MGYxMTMxYWM4MmI4NDNiYTU3MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCU3hnw1Avbd4ZeB7sltNcy+GSMjceoQ600gpsHb24vKaIF
avF1VSgDDeiH/T82o5XkRLbQl00LpK8KPiFYlngUVejyJS1b9u2Md4WuvcAgNRik
gPgWNvzjqgDe6cnU8eo1dgSwDpM8Jq+eZ9hYtpHHL5cZEhCZfkpm0p4Zs7LsUaLU
ig1LkKDxSxIBTafqR4WQg8/Pwm26oEwFb1lVD7h/8yxL+o2Asc089iDbVID04Mjr
yKqG7XG8ydXWG5RUjalyGR/Zt20c8Gj/lzkKdgt84lC62E4N1Q+JstXFF9PL3TE1
j2QmO0FO2ulvtmvQXibzuR2he1YZSz6THIEZAiSJAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUVFL0HbxuGzpSpkdXMZvweFE+N7UwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2M3ZDZjMDVlLWI0NDUtNDY4NS05YmRiLWJiNDQ4ZDc0ZWYzNC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAB9hgOAwDQYJKoZIhvcNAQELBQADggEBABPRrJJhteUz6/kHpLFkK9fa
6Fvf+C5wVtYmMX3zPk/aIFytZeE7xHYD7zBjdGOyabfsPUzyFVyGSJuY/IfyNWKT
7DW1HJz5IAM0B7kGKnLIqRtF7HbKUYxnE+ofYwjQoAKRP5lVYX11QAqG5oQHhcAS
w+3tEtvhFWzB4fmKMF/Whaf5KUrTzfK0+ehxXw34y/UiaXKiktCUYajbTYGGGC+G
zJPogh0eXjaHxlnzAYayk6trv4vkfhnRhcBM0ASJm2ZB3jYgZlbj591gDuEVflr8
F3Fbb015m0XDiiXotH3rLtKDVaYYu0rd0oyYpk6D694yL5Yqo86KHsMrrdSR1So=
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:14:23 2026 by rpki-client