Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/03426574-913b-4f83-8b2d-c2aacea18087.roa
File:                     03426574-913b-4f83-8b2d-c2aacea18087.roa (raw, json)
Hash identifier:          5DBfpXDJc22pZUwPGdHFHg53oI2+71rPRKRYzAjIspA=
Subject key identifier:   BA:5D:57:FC:BC:5F:1B:F8:18:3F:98:62:31:AC:F1:16:A2:29:6A:C5
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       35F0482E965A4A4874AEC0831C2E5931AE338759
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/03426574-913b-4f83-8b2d-c2aacea18087.roa
Signing time:             Tue 12 May 2026 01:10:52 +0000
ROA not before:           Tue 12 May 2026 01:10:52 +0000
ROA not after:            Mon 10 Aug 2026 23:59:59 +0000
asID:                     8987
IP address blocks:        2600:1f69:2000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:f0:48:2e:96:5a:4a:48:74:ae:c0:83:1c:2e:59:31:ae:33:87:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 12 01:10:52 2026 GMT
            Not After : Aug 10 23:59:59 2026 GMT
        Subject: serialNumber=a278b57b6c62483ccd5eba76bcb188e5b1016521d29286d3d0ccca70a60b2432, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:44:e2:0a:33:c9:f5:15:12:35:b4:79:22:2e:
                    0e:73:51:fc:95:7f:07:eb:9c:b4:de:60:57:c1:42:
                    d1:3d:ef:8d:02:eb:c0:10:61:4c:56:0d:4d:cc:36:
                    b7:47:c4:74:40:d3:96:4f:d0:84:2a:3f:6c:f6:16:
                    51:61:dd:84:15:b8:54:bd:be:ac:ea:b7:b1:1c:2d:
                    9c:9e:af:33:7c:d2:ec:5a:eb:50:9f:9b:cd:92:e2:
                    d0:28:c2:e2:ed:b6:33:d5:21:98:0d:2d:9d:78:cb:
                    0a:cf:62:ee:30:aa:4b:57:ba:bd:7f:f1:80:9e:57:
                    64:bc:d4:6a:d2:77:92:51:a7:9f:46:f8:ab:80:88:
                    5c:8d:f1:1f:0c:e3:04:2b:ef:b8:28:51:2e:88:63:
                    dd:52:ff:2f:87:60:06:a9:75:84:e9:6b:fa:85:33:
                    88:61:be:0a:15:5d:d4:22:28:69:a3:d1:43:24:ca:
                    08:da:3e:81:b9:c2:84:68:6a:69:7f:ea:32:2c:3d:
                    0f:0e:27:f0:f2:67:4f:e7:d4:5c:13:15:4b:09:39:
                    2f:c5:f3:e4:38:19:dd:17:00:07:44:97:a5:c0:a0:
                    9f:2b:f4:ff:8d:bb:9b:cc:d8:22:9a:c4:74:26:27:
                    fd:2c:28:a4:ce:c4:44:5a:59:25:84:90:44:01:66:
                    48:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:5D:57:FC:BC:5F:1B:F8:18:3F:98:62:31:AC:F1:16:A2:29:6A:C5
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/03426574-913b-4f83-8b2d-c2aacea18087.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f69:2000::/40

    Signature Algorithm: sha256WithRSAEncryption
         59:56:3c:bf:97:2d:a6:6b:8d:6f:6b:3a:76:5c:45:7c:cd:87:
         7c:68:bb:60:ab:43:c6:e1:a9:63:28:b6:9f:71:7b:51:79:0b:
         fe:d5:07:43:85:b6:14:88:ab:75:e7:ae:88:89:59:9c:6a:ce:
         d7:3a:50:ef:de:6a:d6:5e:14:bb:48:83:9e:5d:78:0f:6a:17:
         47:20:38:8b:ad:f2:cd:54:12:ef:46:07:80:04:a5:07:b7:91:
         48:dd:c7:d4:ba:7c:c7:d1:4d:6f:a1:89:69:b2:48:8f:78:b8:
         ab:b9:a7:22:9a:3f:4a:03:f8:8a:16:b2:79:b2:67:9e:20:3c:
         a3:39:63:46:27:c6:c9:c8:25:c2:75:23:50:60:37:c1:f2:f5:
         50:c5:f2:4b:cc:c3:95:c0:17:41:ee:ad:9b:8c:4d:f3:26:3c:
         b0:c9:9e:ae:e7:02:53:c0:95:95:5f:21:93:e9:60:e6:df:a2:
         66:c1:84:58:b1:83:07:82:28:14:b0:fc:ca:46:73:97:8d:14:
         e9:01:6e:6b:a7:97:ca:f7:f4:38:7a:bc:09:8d:d7:91:fd:5c:
         10:93:cc:a0:34:c6:01:2c:12:64:65:b8:1d:d5:d2:97:66:20:
         3b:c4:ac:88:3c:66:f6:25:df:59:ed:94:87:35:df:a3:60:05:
         95:74:2b:39
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 01:00:04 2026 by rpki-client