Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e1dc7bf4-6ab8-4976-91d7-d66e530e8716.roa
File:                     e1dc7bf4-6ab8-4976-91d7-d66e530e8716.roa (raw, json)
Hash identifier:          pzFVH18x+fSG0B7o4LUnyHyRm9supi0eS4HSQHJ3Bik=
Subject key identifier:   91:66:F2:BF:1C:E2:23:7E:CC:A1:E4:97:37:A4:68:86:9A:71:BC:75
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       62B02A78D2CB02F01F0931C2E3C11468215DD7E1
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e1dc7bf4-6ab8-4976-91d7-d66e530e8716.roa
Signing time:             Fri 03 Apr 2026 00:11:13 +0000
ROA not before:           Fri 03 Apr 2026 00:11:13 +0000
ROA not after:            Thu 02 Jul 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1feb:e040::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:b0:2a:78:d2:cb:02:f0:1f:09:31:c2:e3:c1:14:68:21:5d:d7:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr  3 00:11:13 2026 GMT
            Not After : Jul  2 23:59:59 2026 GMT
        Subject: serialNumber=1201d30159090313a8c0174f7cdc93bd099af116484b34ea9ac5f4e90c7f20dd, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:9e:8b:ed:c7:15:17:81:8a:ee:c0:d5:e7:a7:
                    c5:0c:2f:3c:d3:af:bd:d0:9e:ad:58:ac:5d:41:d0:
                    24:cc:5c:7d:de:ec:06:ec:10:36:a1:e4:67:e3:b8:
                    59:14:fa:20:04:20:68:3e:cb:41:60:66:b8:1b:63:
                    9e:9f:d2:ad:c4:b9:58:ee:3a:0f:e3:e2:16:e0:6f:
                    57:fb:d4:03:e3:7d:cc:67:a5:83:11:87:f8:50:64:
                    90:73:47:a4:dc:87:86:d0:5e:80:2a:c0:ae:fc:f5:
                    29:5e:6f:26:17:06:34:02:a3:20:a3:03:9e:8c:07:
                    35:7b:fd:05:1a:46:4a:3c:2e:92:16:44:6c:56:55:
                    63:a4:ef:c1:11:13:13:0d:9c:19:b5:0d:1f:29:35:
                    42:67:d8:01:fa:6a:0d:70:e2:fc:18:8b:e3:60:ca:
                    d6:70:52:31:19:0f:e7:9f:bf:4c:b2:92:2e:39:84:
                    6b:fb:4c:2e:f2:37:5d:d0:c2:17:06:ed:25:a4:94:
                    41:81:ab:5b:41:61:e3:84:2a:aa:21:96:91:86:73:
                    b1:80:47:42:04:ad:15:d2:34:2c:56:b6:35:f2:d3:
                    b4:e5:6b:96:15:cd:0e:f5:d6:d3:1c:5d:51:0f:3a:
                    80:2d:03:31:1f:5c:d8:21:fc:b4:fb:05:e9:8b:59:
                    77:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:66:F2:BF:1C:E2:23:7E:CC:A1:E4:97:37:A4:68:86:9A:71:BC:75
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e1dc7bf4-6ab8-4976-91d7-d66e530e8716.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1feb:e040::/48

    Signature Algorithm: sha256WithRSAEncryption
         3a:12:0c:c1:9e:9a:89:b8:44:ea:ca:ee:9e:fb:0d:a9:04:05:
         98:61:8b:69:07:c3:5e:88:54:19:6b:b5:ac:f5:c1:a8:13:34:
         47:f8:67:25:5b:17:20:1a:2c:41:75:db:fc:2c:a0:b2:52:47:
         e1:ac:8f:ae:43:77:fc:e2:9d:2c:d3:5c:0a:ad:fd:a4:98:7d:
         18:a0:b9:f3:a2:44:04:8d:ee:32:09:78:a7:36:fc:84:fb:71:
         63:e9:00:a0:54:ba:3b:bb:d3:d8:c4:9f:d4:6c:bb:77:cf:6a:
         5d:09:01:a1:09:96:a6:58:0e:15:80:96:e9:1e:ca:90:2c:35:
         2b:83:14:ce:3b:ea:20:0b:46:e8:9f:2e:65:79:7c:de:8f:67:
         d3:10:eb:02:bd:5f:e3:44:e0:46:47:4d:dd:a6:66:b9:35:c7:
         07:8b:f6:9e:fb:43:98:eb:11:7a:73:4b:5b:5b:cf:c4:4f:cd:
         2b:67:ed:be:83:fc:42:be:af:46:32:d7:37:97:9f:9b:58:29:
         f1:18:fe:ab:e7:fb:c3:36:2b:d6:2a:57:3b:1e:59:d8:47:5e:
         c6:7a:8b:cc:8c:21:77:a7:6b:8f:03:49:f5:1a:a6:ae:3f:a7:
         fe:6a:40:16:40:67:56:53:00:30:2d:af:55:a7:ee:f9:00:71:
         9f:b1:9e:c9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 17 03:38:48 2026 by rpki-client