Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f545cb29-8814-4cd2-8474-142d37f94263.roa
File:                     f545cb29-8814-4cd2-8474-142d37f94263.roa (raw, json)
Hash identifier:          k2GduOKLRNJXAp1b7qDrr92n+pE4hJ2dKdvUtXvSyhc=
Subject key identifier:   C7:98:3A:48:64:0E:77:8E:D6:70:A9:26:4E:2B:3E:B3:6D:FF:AB:8E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       39058513ADE9288EC076940C3357585889D1A778
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f545cb29-8814-4cd2-8474-142d37f94263.roa
Signing time:             Sat 16 May 2026 00:50:09 +0000
ROA not before:           Sat 16 May 2026 00:50:09 +0000
ROA not after:            Fri 14 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f12::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:05:85:13:ad:e9:28:8e:c0:76:94:0c:33:57:58:58:89:d1:a7:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 16 00:50:09 2026 GMT
            Not After : Aug 14 23:59:59 2026 GMT
        Subject: serialNumber=45a367b9df3ca38dfe2a5be84f79be2b454c8ab84e04312c528791cd733755e8, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c2:38:fb:68:9c:b5:96:d7:69:53:b8:f0:02:
                    0d:b0:dc:d3:45:94:e1:97:14:a9:a2:4a:4e:2d:33:
                    2c:ca:8a:53:38:fa:e2:85:6b:e7:a5:b1:75:1f:86:
                    75:18:47:f8:df:7b:7b:6f:ab:73:04:34:c6:15:8a:
                    b1:b5:81:8e:58:18:e8:02:44:98:f6:a7:52:2c:27:
                    a8:5f:ea:77:86:9d:2f:44:86:b1:23:48:9f:6c:27:
                    d2:4b:3d:0f:ee:6f:50:aa:19:f2:de:91:71:87:38:
                    e0:f0:ff:69:75:4f:be:ed:bf:58:57:41:b6:a6:14:
                    13:d1:ff:8c:ae:eb:39:77:3f:36:72:72:5f:ed:ab:
                    95:96:49:0c:74:16:ee:38:ea:f6:23:4c:97:38:83:
                    8a:cf:03:cf:5b:85:c8:f3:d9:fb:a7:78:29:94:40:
                    0d:b4:fb:cb:83:ad:61:0e:01:84:d1:83:2a:62:0c:
                    78:1b:b6:23:92:3d:72:67:99:77:1d:da:55:9b:44:
                    97:7c:af:fc:6e:ff:f9:24:af:d8:cb:52:a9:9a:59:
                    54:e3:e8:5b:b2:4c:2f:22:11:2a:2c:49:72:3a:da:
                    85:a4:ef:b9:d1:5d:9b:24:d8:de:de:b4:89:2c:df:
                    96:f9:23:ea:61:87:48:7a:44:72:82:28:73:da:88:
                    64:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:98:3A:48:64:0E:77:8E:D6:70:A9:26:4E:2B:3E:B3:6D:FF:AB:8E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f545cb29-8814-4cd2-8474-142d37f94263.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f12::/38

    Signature Algorithm: sha256WithRSAEncryption
         d0:fb:d3:fc:49:2e:d4:9b:2c:a9:de:92:63:10:25:66:c6:df:
         e3:2b:f4:87:dc:b7:ea:5c:98:8d:f3:74:f6:aa:fe:a7:9d:91:
         82:69:2b:96:a2:0b:55:f7:3a:0e:9c:68:fb:37:43:08:91:08:
         ee:13:32:4d:a4:7a:80:ba:83:90:18:3a:4a:ed:c4:ee:e3:63:
         57:99:ce:52:c7:10:5b:ed:80:98:a6:24:97:4d:7a:71:fc:ad:
         e1:b2:9c:c6:8b:ed:48:b1:c4:78:e8:99:c6:3c:08:c1:03:35:
         20:78:a9:e8:40:e3:7c:c6:7b:57:6d:d2:7e:7f:3d:af:31:d0:
         9a:90:83:e1:c5:47:4b:0a:f8:8e:dc:04:9f:42:04:96:a3:c4:
         a7:89:f6:3d:70:32:95:83:45:14:61:5a:a1:1c:24:23:ea:20:
         8e:fa:0b:02:76:57:bd:d5:a1:c5:fd:a6:20:83:3f:0f:6d:e0:
         de:d3:7f:03:96:8f:95:1d:5b:df:39:ac:53:c4:4f:bd:52:3d:
         2d:62:0a:92:73:e2:bf:49:f0:d0:79:f4:17:d7:4e:13:7d:5f:
         a1:ef:9a:ae:e0:55:04:91:16:d7:fb:60:74:7e:13:4a:96:60:
         af:76:b1:6d:16:5e:0c:be:e5:de:c1:6b:ab:ab:86:56:43:3f:
         24:ba:a2:b2
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 13 11:22:07 2026 by rpki-client