Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cb583196-dcb1-451f-b8a3-2f474dc16d0d.roa
File:                     cb583196-dcb1-451f-b8a3-2f474dc16d0d.roa (raw, json)
Hash identifier:          8wOHBMJz2jKD2hW6+K90A+0XtCqPwzsOby0BazLxU3s=
Subject key identifier:   53:0F:F9:6D:A3:B2:C9:C3:D2:79:99:9E:EA:7B:CB:FA:4F:AE:69:9E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       16E134C4C9457B0444910BA04AF4D6F8F1862865
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cb583196-dcb1-451f-b8a3-2f474dc16d0d.roa
Signing time:             Fri 15 May 2026 01:00:05 +0000
ROA not before:           Fri 15 May 2026 01:00:05 +0000
ROA not after:            Thu 13 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f00:40e0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 18 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:e1:34:c4:c9:45:7b:04:44:91:0b:a0:4a:f4:d6:f8:f1:86:28:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 15 01:00:05 2026 GMT
            Not After : Aug 13 23:59:59 2026 GMT
        Subject: serialNumber=81dc0df0b6f6a8a841081d0eb585bd8f0235ee7d871b6e1b8e92ddd89f8c5e32, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:dd:13:42:54:34:f8:15:68:54:89:77:f8:f9:
                    17:6d:73:a9:da:85:46:0a:7f:87:26:51:e9:4c:04:
                    6e:fe:e6:94:e1:f2:58:66:6f:2e:ce:81:0d:b2:24:
                    23:2a:57:06:ed:51:dc:f1:5a:76:c9:b5:ca:90:1b:
                    a4:bb:e3:c0:d3:1d:8d:0d:d4:17:a6:28:4f:a8:c9:
                    23:af:40:f5:27:27:53:34:1f:0e:00:b6:73:69:46:
                    d2:7e:62:3c:71:1e:34:7a:26:2f:6a:3a:58:92:9c:
                    e7:9c:ac:d0:67:8a:b2:a9:35:4a:09:ad:ac:81:a8:
                    9b:ed:a3:a6:45:f6:b8:21:6c:bf:dc:27:95:88:f1:
                    68:f6:67:da:fe:f6:28:ef:56:61:8e:17:62:04:42:
                    c8:82:cc:64:86:2c:66:37:ce:4e:05:a0:c4:2d:95:
                    d7:1a:44:59:b3:df:d2:c6:df:98:9f:9b:17:2f:1a:
                    a3:fd:d5:05:75:c5:c1:cb:9f:c9:49:cf:51:88:a9:
                    ea:fc:e3:78:07:77:14:a8:5b:b6:5a:bc:3b:c6:76:
                    6b:8d:64:c9:85:48:c1:36:eb:cf:44:61:61:6e:d5:
                    18:1c:af:d7:cb:12:0c:78:9f:01:22:42:72:e8:3b:
                    30:c2:07:c4:8c:07:9c:f5:aa:d5:e9:c1:ef:da:f5:
                    fe:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:0F:F9:6D:A3:B2:C9:C3:D2:79:99:9E:EA:7B:CB:FA:4F:AE:69:9E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cb583196-dcb1-451f-b8a3-2f474dc16d0d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f00:40e0::/48

    Signature Algorithm: sha256WithRSAEncryption
         80:60:1b:63:cf:56:8f:51:7b:7e:67:0c:c9:51:b2:92:ab:3d:
         e8:51:dc:85:b3:49:75:3a:0f:a7:8c:d9:c5:72:2e:05:35:ba:
         91:f6:77:e9:cd:81:8c:47:57:e3:b3:57:c8:93:99:5a:28:44:
         33:3a:3f:ba:42:ed:16:1b:98:3f:1c:ee:11:9f:0b:bd:8d:2e:
         3a:56:ae:33:37:45:22:64:2f:cc:e9:7c:ce:11:f4:62:f2:48:
         49:d0:43:93:ac:ff:da:8d:4d:b7:c5:40:12:f4:47:86:d8:bc:
         76:72:25:88:f4:e5:19:a9:51:ef:77:3b:8a:af:54:f6:67:22:
         19:fd:37:8b:07:32:9c:b7:68:b6:22:fc:e4:59:61:cf:27:85:
         1d:02:45:3e:75:4c:3d:75:73:95:b1:7f:7a:41:04:e3:ee:08:
         4f:63:58:26:60:6f:1e:ee:ad:aa:89:00:07:5e:b1:b4:e8:99:
         4f:5a:74:c1:54:fb:67:3c:db:4f:30:a4:db:c9:68:c5:23:5c:
         d4:47:31:e3:1e:ef:37:b9:72:88:ba:23:ba:09:23:22:20:fd:
         c7:92:70:e4:f5:a2:98:70:cf:1f:c5:10:cf:76:bb:d2:3d:99:
         3b:22:a8:fa:f4:f5:d0:92:23:9e:83:e8:e5:0b:54:8e:ca:09:
         b1:cc:11:d6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:04:17 2026 by rpki-client