Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eeacc61c-c3c1-4654-be9a-ccf07238a1f9.roa
File:                     eeacc61c-c3c1-4654-be9a-ccf07238a1f9.roa (raw, json)
Hash identifier:          27IOFSsKdlxIUHpSxUkjLLIOu2hf8RJ4xnCZcxPlvXc=
Subject key identifier:   F6:BA:34:90:64:6E:51:00:DC:31:50:6F:2E:F5:D3:97:4F:FE:CB:6F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4A54E20EBFA952978F51BA0766DC81A522E50FBC
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eeacc61c-c3c1-4654-be9a-ccf07238a1f9.roa
Signing time:             Wed 25 Feb 2026 02:20:47 +0000
ROA not before:           Wed 25 Feb 2026 02:20:47 +0000
ROA not after:            Tue 26 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f61:a400::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:54:e2:0e:bf:a9:52:97:8f:51:ba:07:66:dc:81:a5:22:e5:0f:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 25 02:20:47 2026 GMT
            Not After : May 26 23:59:59 2026 GMT
        Subject: serialNumber=59c9969a4bfa75621c4fbbe8afaea22a398080f48817aec1f6a9693b73344066, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:0d:7b:aa:2e:2c:72:17:ce:47:4a:62:0d:fc:
                    22:83:c7:f5:99:00:19:dd:fc:0f:02:da:fb:fb:f8:
                    16:5b:24:15:91:e9:e4:49:09:52:1e:a5:b2:f1:59:
                    0f:33:7a:f8:f1:c7:8b:20:55:88:55:51:57:a7:5d:
                    24:d6:e8:d6:26:b5:bb:7d:fe:6b:4c:b8:7a:54:fd:
                    57:d2:26:d0:9c:ea:50:34:6b:6f:ec:4c:a6:21:59:
                    9c:c6:3c:b3:23:12:5a:6e:d9:d4:99:f2:0f:d5:5f:
                    e0:48:31:98:6c:da:c8:f1:50:b8:83:e0:29:84:95:
                    20:c5:80:1e:e7:1d:69:85:28:8c:82:50:81:6f:7c:
                    6c:4d:96:20:88:e0:cf:0c:5f:c1:b0:ce:12:51:cd:
                    74:d1:00:95:4a:5b:fb:e4:54:18:eb:fe:0b:1b:4a:
                    02:f5:bf:32:27:74:06:b7:b7:e8:2a:a1:50:d0:86:
                    d0:bf:18:65:f4:b7:a2:18:67:f9:02:b7:d9:77:dc:
                    bb:3e:c9:7a:d9:bb:a2:0d:08:ec:c7:7f:b9:33:4f:
                    13:19:6e:b5:48:91:f4:e2:42:75:d3:ec:18:10:43:
                    a7:82:16:e7:3c:9c:29:ef:49:43:c2:b7:f3:8b:40:
                    dc:3a:d7:45:ec:56:fd:ef:6a:71:f2:4c:72:08:d8:
                    be:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:BA:34:90:64:6E:51:00:DC:31:50:6F:2E:F5:D3:97:4F:FE:CB:6F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eeacc61c-c3c1-4654-be9a-ccf07238a1f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f61:a400::/40

    Signature Algorithm: sha256WithRSAEncryption
         88:e3:40:92:75:c4:80:6a:11:b8:98:86:39:88:c8:e3:3d:45:
         64:76:d7:af:52:54:72:39:48:fc:e8:4e:e9:06:57:7b:57:60:
         1c:8c:26:81:64:74:7d:1e:7c:22:88:54:24:71:bf:30:2b:82:
         29:73:5c:4e:2f:c2:57:4a:37:c7:3d:9a:b2:76:0b:f7:40:4f:
         1d:f6:ff:b9:08:6e:3b:a8:9f:8f:d6:48:76:3a:14:35:0a:dd:
         c8:9a:43:20:fd:19:2a:a4:72:ec:2c:7e:03:61:35:65:1e:c1:
         97:df:bc:9e:63:d1:dc:08:ad:9b:fd:b6:df:0d:70:27:bc:e7:
         cf:b1:c5:23:fa:7e:94:f9:89:51:50:be:56:98:0f:7b:2f:55:
         59:1d:0e:24:87:0a:60:f7:1a:46:7a:37:54:7c:f7:69:32:e9:
         5e:ff:29:65:18:ca:dc:63:34:e8:87:49:ba:7a:5e:2e:65:1e:
         6f:a0:b3:5a:11:66:b7:1f:f3:02:e1:94:fa:2d:94:ba:56:eb:
         80:29:c1:80:29:a6:42:e4:80:89:0f:2b:92:99:94:c3:9e:e0:
         55:77:72:ba:a3:f4:89:34:9b:db:d5:4c:a2:11:b0:f0:bd:05:
         eb:70:57:ee:a9:5c:87:ea:a3:9e:3e:89:53:ec:c4:71:51:6d:
         e6:c1:57:16
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:10:48 2026 by rpki-client