Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e86fc22e-29f4-4cc9-bdf1-05710d575781.roa
File:                     e86fc22e-29f4-4cc9-bdf1-05710d575781.roa (raw, json)
Hash identifier:          M6/D4m7tMOKq+utmVBOuWZOqzmVUoyJ1ejJuVrgeKxw=
Subject key identifier:   18:8F:05:B3:0A:1E:37:FB:E0:2C:15:90:03:AA:41:19:35:4C:42:22
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       65A861137BD0F0FE20EE0D52CF1C3B7CEDBEE0D2
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e86fc22e-29f4-4cc9-bdf1-05710d575781.roa
Signing time:             Sun 17 May 2026 00:11:02 +0000
ROA not before:           Sun 17 May 2026 00:11:02 +0000
ROA not after:            Sat 15 Aug 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1ffc:8000::/39 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:a8:61:13:7b:d0:f0:fe:20:ee:0d:52:cf:1c:3b:7c:ed:be:e0:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 17 00:11:02 2026 GMT
            Not After : Aug 15 23:59:59 2026 GMT
        Subject: serialNumber=3213bd97f2b96c23f0f25a2f8fbf2f37028cd3b24998fd7de1ed11f05cf98574, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:de:a9:0c:72:47:0a:00:11:92:be:b0:23:ba:
                    8e:92:aa:3c:a1:ab:c7:06:6a:3b:cf:2c:65:fc:57:
                    b6:87:e1:32:bb:d6:5d:69:9a:f4:d2:d0:43:fc:eb:
                    41:2e:bb:38:6f:e8:dc:d6:c5:fb:45:65:a8:64:60:
                    d9:5a:73:59:fa:6d:71:95:64:89:ff:cc:93:4c:b9:
                    8f:6e:0a:d6:8a:04:58:ac:68:17:aa:61:a9:bd:c3:
                    a1:2c:50:44:d1:dc:35:d5:a3:d6:eb:e3:e6:29:b7:
                    05:e0:43:01:dc:fe:e1:bd:76:f8:62:bd:2b:3f:3e:
                    91:68:91:55:89:97:0d:51:21:75:64:2d:76:02:74:
                    09:d3:17:55:8f:2c:0a:ba:6a:2a:53:f2:fa:09:49:
                    5a:c7:12:b1:85:bd:3a:6c:55:e1:a9:4a:e1:e9:12:
                    67:85:45:2b:43:46:92:17:e0:86:c9:35:68:0e:ac:
                    ef:d7:14:35:65:45:f2:fd:d6:83:76:ff:74:3a:83:
                    39:03:6b:93:12:f0:91:a9:4b:5d:7b:eb:6c:6b:e2:
                    8a:c0:42:17:e9:4d:fd:69:92:1f:ca:b5:f6:c0:40:
                    bb:e7:c3:e6:63:d3:31:75:06:06:b9:3d:cb:4a:95:
                    e6:99:7c:fd:cb:1a:b8:2d:0f:99:c8:7c:e3:32:c5:
                    df:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:8F:05:B3:0A:1E:37:FB:E0:2C:15:90:03:AA:41:19:35:4C:42:22
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e86fc22e-29f4-4cc9-bdf1-05710d575781.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ffc:8000::/39

    Signature Algorithm: sha256WithRSAEncryption
         91:8a:b0:d8:58:1f:48:d0:39:88:70:85:4f:e8:31:cc:bd:9e:
         78:8c:dc:8e:ed:cd:81:21:cb:de:ef:d1:03:85:3f:de:02:0b:
         da:9b:07:f9:cd:b8:09:73:4b:8e:ca:52:2c:ea:13:29:db:b4:
         80:a2:90:15:4d:ee:08:15:df:12:ba:14:3a:69:89:ba:2a:6c:
         8c:fa:c6:4a:ca:00:64:53:c6:14:89:30:85:e7:7d:d3:4a:14:
         0b:74:37:ef:c1:c5:8c:a0:0e:c6:22:f1:aa:e7:fd:c3:2a:96:
         85:1a:a5:c9:a3:5e:78:29:48:49:41:38:22:72:d6:d6:fc:74:
         71:5b:83:ee:01:9a:6e:db:d5:b2:07:c3:d9:72:4e:21:17:22:
         93:88:47:99:27:69:64:1a:3d:d7:fc:f5:42:35:46:3c:67:89:
         77:bb:b4:c9:75:ea:2d:fc:8f:6a:02:a8:1a:57:66:92:48:8e:
         bd:e1:5f:f4:40:17:b8:bf:a3:20:ff:5e:a7:5c:84:2f:01:82:
         51:aa:7c:ba:1f:c0:48:58:ed:71:bb:cb:15:75:c2:65:97:af:
         60:3b:7a:73:51:ee:a9:26:16:6d:d8:db:5d:37:2f:21:5a:93:
         b2:30:10:d6:d4:67:38:9c:6a:af:66:70:96:27:8d:af:ac:38:
         19:79:f1:98
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 13 05:48:44 2026 by rpki-client