Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1b982328-a8a7-4ba6-b134-dbdb73c2f00b.roa
File:                     1b982328-a8a7-4ba6-b134-dbdb73c2f00b.roa (raw, json)
Hash identifier:          Oc5wZarRLfVyynEk0/zu12GjZlwdwp0AeePC/doU6zE=
Subject key identifier:   7A:0E:06:73:0F:11:C7:F0:0A:17:B0:56:7F:A1:A9:58:D0:CF:50:8A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0DDB519EDB9F551945FEE6D1823501B22BC872B8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1b982328-a8a7-4ba6-b134-dbdb73c2f00b.roa
Signing time:             Tue 12 May 2026 00:50:14 +0000
ROA not before:           Tue 12 May 2026 00:50:14 +0000
ROA not after:            Mon 10 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fec:5800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:db:51:9e:db:9f:55:19:45:fe:e6:d1:82:35:01:b2:2b:c8:72:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 12 00:50:14 2026 GMT
            Not After : Aug 10 23:59:59 2026 GMT
        Subject: serialNumber=644cb531c66e742bb0ade351b5e2291dedc0f1475a98874fd56ebd7928595660, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:2b:b9:f3:84:34:08:c0:f7:e0:fd:a2:81:3b:
                    b4:06:36:3d:78:13:3d:eb:0e:a0:98:e6:18:a1:c1:
                    97:92:e9:7c:87:c6:50:5e:a2:a7:e3:05:19:ba:41:
                    8d:3f:ff:3d:b5:8d:29:42:a2:3e:33:75:cf:cd:8c:
                    14:e6:d2:3d:74:bc:c5:2f:1a:f1:ca:37:e7:b8:c8:
                    32:ba:00:96:f9:37:1d:ef:5d:03:4e:be:50:2e:1c:
                    a1:a2:48:86:3a:83:87:4c:d1:5d:0a:c3:39:2b:81:
                    d7:21:f5:04:36:c2:c1:cc:da:44:87:aa:6e:0b:92:
                    fa:71:a5:ba:e4:65:38:e4:4c:dc:fb:a0:59:09:3f:
                    d4:1b:ec:3d:03:e7:6b:ad:62:f0:85:7e:2e:34:79:
                    10:3a:c3:b2:4e:3e:2c:e0:79:80:3b:45:85:02:87:
                    f0:45:1d:8a:d7:78:06:f9:e4:34:a2:b5:04:d0:5c:
                    79:e3:9b:4f:e6:ae:a5:60:9f:1c:c0:e7:2e:da:8d:
                    4d:63:86:9f:b6:b9:bc:c4:d8:7b:fe:0c:1d:09:8c:
                    3c:b3:d6:d0:9d:59:98:f6:1c:71:42:aa:37:fe:77:
                    dd:83:2b:24:2b:8a:83:ba:12:ec:9c:02:fa:89:ef:
                    88:ea:21:1d:12:b6:5a:93:6d:1c:e3:1c:75:0a:c0:
                    a4:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:0E:06:73:0F:11:C7:F0:0A:17:B0:56:7F:A1:A9:58:D0:CF:50:8A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1b982328-a8a7-4ba6-b134-dbdb73c2f00b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fec:5800::/48

    Signature Algorithm: sha256WithRSAEncryption
         9f:1b:06:7d:47:1b:86:68:2f:4f:c2:10:e2:18:6a:3c:9f:40:
         7a:2b:f3:7b:43:45:0c:4c:77:08:29:20:80:1a:b2:2d:c5:df:
         c1:8c:74:9e:e0:c0:37:3d:90:f8:e2:73:6d:07:13:6d:bc:34:
         59:05:7e:eb:33:aa:0d:d7:cf:8d:84:81:04:25:3b:b3:89:6d:
         e8:99:28:7a:7b:9c:ae:0c:57:48:2c:10:1e:08:a6:38:f0:0f:
         4f:25:75:49:31:9a:3c:6e:83:22:50:6f:95:7f:4b:fe:11:07:
         db:07:0b:8d:0b:65:e0:bd:ed:24:57:b4:99:95:a6:5b:17:04:
         d8:9d:24:99:f2:d3:90:cb:00:06:72:30:2d:f4:13:43:0c:fa:
         41:fe:43:58:1d:c2:78:f3:2a:f0:91:03:cc:7f:40:99:af:a1:
         ad:13:8e:6f:cc:75:89:6a:df:1d:96:34:22:0c:11:c5:12:41:
         b8:47:39:a8:1b:20:0c:b3:ba:d7:aa:56:e6:43:c9:80:44:30:
         89:f6:54:e3:8b:af:8e:82:14:a3:45:6d:13:74:a4:21:b7:1b:
         b5:2c:18:a1:34:28:24:b3:72:48:ba:9c:ad:0e:43:da:97:f9:
         29:5c:d1:d4:e3:f6:14:d4:f5:3e:30:60:54:5e:e3:ef:0f:8f:
         e3:b0:09:97
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 00:16:52 2026 by rpki-client