Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e2192bcd-3793-4ed3-8250-3a9c0f2490aa.roa
File:                     e2192bcd-3793-4ed3-8250-3a9c0f2490aa.roa (raw, json)
Hash identifier:          V15Q5RWQP7aronQnd9yVS/S/5pNJgO7u4V68ZaOKLCs=
Subject key identifier:   16:13:0C:E1:92:9A:0F:5C:27:59:0A:BA:48:D9:2D:4D:6E:09:3C:2A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6D96E17993F0A654B953F40AB12B2E627ADD84C2
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e2192bcd-3793-4ed3-8250-3a9c0f2490aa.roa
Signing time:             Tue 12 May 2026 00:50:12 +0000
ROA not before:           Tue 12 May 2026 00:50:12 +0000
ROA not after:            Mon 10 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fec:6c00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:96:e1:79:93:f0:a6:54:b9:53:f4:0a:b1:2b:2e:62:7a:dd:84:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 12 00:50:12 2026 GMT
            Not After : Aug 10 23:59:59 2026 GMT
        Subject: serialNumber=80e91a4e4414b789ee1ffe38d5333a74d36a4691603dcbb3f5ed78a573324fdb, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:98:4f:4f:40:c0:61:cd:9a:68:33:e9:5c:de:
                    fd:24:bd:cb:67:b4:23:46:68:eb:9c:04:3a:f8:fd:
                    7b:f0:a8:80:78:d4:31:4c:04:cf:98:63:9e:bf:23:
                    42:5b:73:17:ec:8a:41:68:64:56:66:26:21:47:80:
                    9d:c5:17:d8:a7:5f:8b:64:53:b6:16:f0:87:78:19:
                    60:23:a1:33:97:76:31:f7:f4:ef:1f:a3:79:7f:7d:
                    3f:b2:de:39:bd:45:43:b6:e2:57:ff:69:96:95:e4:
                    b8:a0:20:8a:d4:16:29:0b:10:f9:40:c6:3b:07:52:
                    2b:3e:6f:32:84:8b:0f:c7:da:35:94:dd:8d:a3:dd:
                    8c:21:c8:ab:53:27:7c:50:f2:4a:ee:63:dd:72:1c:
                    78:74:13:f8:d8:15:12:0c:5e:44:34:93:64:23:8d:
                    5d:5e:7e:e5:cf:5c:94:44:99:d0:91:d7:e3:03:b0:
                    8d:73:b5:1d:1a:e9:72:39:59:92:ec:cd:c3:f4:e3:
                    a7:8b:20:52:94:7e:bd:e1:38:49:e7:39:87:7f:11:
                    c8:5a:e4:9c:b1:f7:c9:81:46:02:5b:9d:77:21:3b:
                    8e:a9:c2:d7:52:84:a1:2e:d5:42:fc:62:a0:61:2f:
                    ab:44:47:07:d8:22:76:dd:21:69:a1:73:1e:90:39:
                    43:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:13:0C:E1:92:9A:0F:5C:27:59:0A:BA:48:D9:2D:4D:6E:09:3C:2A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e2192bcd-3793-4ed3-8250-3a9c0f2490aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fec:6c00::/48

    Signature Algorithm: sha256WithRSAEncryption
         ad:b6:d0:25:86:33:4d:85:0f:5c:ff:a9:a9:ff:46:24:0c:10:
         0e:f8:a0:ce:1d:32:ed:04:98:65:7e:30:df:1f:dc:6a:e1:15:
         cb:a3:45:de:09:29:cb:b7:2f:ff:1b:9e:98:aa:32:24:94:cd:
         2c:42:20:17:55:b0:13:f6:8e:d9:2e:2c:38:94:f2:ae:1d:9a:
         c7:42:03:a9:0f:3b:89:d4:e9:c7:b2:b8:87:c3:a9:23:6e:74:
         2d:12:27:53:b3:17:27:b4:59:46:2d:b1:4d:87:36:53:1c:50:
         45:63:88:34:98:fd:b8:15:34:c0:0c:9b:8a:51:01:ed:48:a9:
         d5:e3:0d:56:b8:90:e1:2d:07:3d:17:16:2c:cc:9d:14:c5:53:
         24:9f:21:12:14:02:3f:a3:52:f8:3e:01:6c:05:cb:9a:ce:ef:
         08:c1:57:5d:b6:b5:42:a7:f9:1f:65:06:23:e3:3e:3c:d3:32:
         47:db:12:9d:b7:b1:fe:7f:7b:8e:2a:4f:76:79:ad:1c:80:2b:
         35:36:a0:bd:da:dd:51:29:8e:a7:47:1f:7d:6b:b3:8c:14:be:
         8b:7d:49:8a:fc:70:47:f2:f2:a5:2f:a5:3d:a3:89:3e:63:1b:
         53:25:74:d2:3e:8e:17:8f:08:d9:cb:1d:a7:c4:04:fb:4a:b4:
         e5:48:91:3e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:18:10 2026 by rpki-client