Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/10e53fc3-75a8-464c-ac59-a91a3ed4aa64.roa
File:                     10e53fc3-75a8-464c-ac59-a91a3ed4aa64.roa (raw, json)
Hash identifier:          6dFfsqUtQyiVuSjVWf5Z/5l5b2lW2PsEi7b9TY+ciBg=
Subject key identifier:   DE:75:64:A7:2C:69:DC:9F:20:01:5E:17:2A:9A:6E:EE:4F:92:24:FA
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0B0DCDBF1FCA49B24ACEBE33130B42137AA8AD57
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/10e53fc3-75a8-464c-ac59-a91a3ed4aa64.roa
Signing time:             Fri 17 Jul 2026 05:17:16 +0000
ROA not before:           Fri 17 Jul 2026 05:17:16 +0000
ROA not after:            Thu 15 Oct 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1f01:4942::/47 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:0d:cd:bf:1f:ca:49:b2:4a:ce:be:33:13:0b:42:13:7a:a8:ad:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 17 05:17:16 2026 GMT
            Not After : Oct 15 23:59:59 2026 GMT
        Subject: serialNumber=ea52c76e3d9e1f94855ce87184d472992d2dd13a0c7b96f22e5386ba73d57e7a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:48:57:ac:d1:6f:67:92:df:95:25:e2:7f:05:
                    8a:2e:bd:ab:6f:17:f8:e7:98:6b:f0:82:c0:64:67:
                    9e:12:1c:bf:40:3c:a4:c6:a9:40:37:9d:9c:85:57:
                    a9:56:de:38:1b:47:18:19:71:b3:5d:ca:ed:e7:39:
                    ef:2a:87:06:65:a8:c8:dd:b7:b1:c6:da:ec:d1:3d:
                    c6:7b:2c:b8:66:9c:da:78:db:14:81:20:e0:75:65:
                    d2:ad:85:4f:0f:ce:2d:8b:ed:8b:c0:23:e3:5c:06:
                    4a:75:5a:a1:fd:ea:dd:74:10:a2:5e:b6:fa:ef:52:
                    4c:8b:58:3d:98:ec:64:9a:45:9a:0f:01:2c:3c:fb:
                    3d:bc:aa:2a:92:fa:ae:9e:d7:11:4e:18:a6:fb:eb:
                    42:55:c2:dd:26:d0:d8:e9:6b:ef:59:0e:ec:74:95:
                    0d:ef:f6:2e:05:b8:01:ee:b9:e1:f8:f2:43:9d:0c:
                    c7:a9:98:f2:36:2e:b4:53:7b:d0:59:de:07:fb:df:
                    8a:c7:c3:af:46:68:51:6f:26:e1:ce:f5:4d:86:69:
                    f2:02:61:cd:2b:68:e5:37:2b:af:65:ca:59:e6:ea:
                    8d:1e:6f:de:c4:7f:7d:d4:1c:b0:5f:ab:21:44:64:
                    f6:b4:69:30:97:9a:c2:59:52:c7:d5:03:b6:11:cf:
                    7b:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:75:64:A7:2C:69:DC:9F:20:01:5E:17:2A:9A:6E:EE:4F:92:24:FA
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/10e53fc3-75a8-464c-ac59-a91a3ed4aa64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f01:4942::/47

    Signature Algorithm: sha256WithRSAEncryption
         03:2b:c8:46:1e:9b:b9:5d:bb:83:fb:e2:6b:47:1a:4e:11:6e:
         b0:e8:47:dc:e7:19:6e:c8:cc:06:57:57:e1:f8:e6:cb:4b:3e:
         35:79:50:8e:29:2b:c6:49:33:e8:9d:4f:3e:76:0c:ac:21:2e:
         e7:73:c8:6b:0a:c1:ad:9a:4e:ae:aa:5e:9b:63:1e:a3:06:74:
         44:dc:f8:6c:ba:06:eb:de:89:a1:0f:71:c3:6e:67:c5:fe:3f:
         0f:f3:c1:c4:72:3d:77:1a:f0:8f:b4:15:e1:96:08:e8:88:2f:
         7d:62:d9:55:b0:44:42:8e:53:20:88:2f:ef:21:91:a1:31:20:
         d4:90:53:ff:77:8c:bc:a5:50:d8:dd:9d:57:c2:0a:ee:68:9c:
         25:e9:14:ac:91:4d:c8:b8:16:43:f2:af:d2:90:69:ff:69:6b:
         bd:1c:7d:cc:fe:bc:f0:82:56:46:e2:15:a2:37:9c:c0:09:f0:
         5b:28:10:20:36:16:21:df:cb:8e:29:e7:6e:ca:d7:41:52:aa:
         ff:9b:16:66:2c:52:45:94:06:56:7e:2b:be:61:f9:71:1e:9a:
         e8:2a:30:97:05:6b:ae:6b:da:fc:67:b9:19:d3:72:0e:f5:90:
         f0:9a:a3:69:18:50:ec:fa:11:aa:97:0b:02:12:0e:46:07:d8:
         fd:f0:6d:e9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:17:57 2026 by rpki-client