Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1c6fc4b5-684e-4b51-8a8b-002e83881325.roa
File:                     1c6fc4b5-684e-4b51-8a8b-002e83881325.roa (raw, json)
Hash identifier:          SaFmoOh2eC2T80GFiM00P4EymQSxrTK/gjG5TVWvbKk=
Subject key identifier:   52:EF:5C:E0:B9:9D:BD:39:F1:4D:CD:8E:50:FF:BE:E2:0E:BF:93:6B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       44BE1FDDEEE6B5D4D9EBA3BCEF9A80BC44441AE2
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1c6fc4b5-684e-4b51-8a8b-002e83881325.roa
Signing time:             Tue 12 May 2026 01:00:56 +0000
ROA not before:           Tue 12 May 2026 01:00:56 +0000
ROA not after:            Mon 10 Aug 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1fec:8800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:be:1f:dd:ee:e6:b5:d4:d9:eb:a3:bc:ef:9a:80:bc:44:44:1a:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 12 01:00:56 2026 GMT
            Not After : Aug 10 23:59:59 2026 GMT
        Subject: serialNumber=b59dccae025955ad9e47449963d224621f7e676c66013550eb4af83aa02ff497, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:d6:71:6d:24:25:8d:d4:00:3a:df:70:a9:da:
                    0e:05:37:51:25:b8:87:0c:03:a0:bb:0b:08:62:6e:
                    82:81:48:62:07:99:fc:57:2a:76:1d:d0:3f:3a:a8:
                    0d:d9:68:91:85:3a:ac:20:60:d2:8a:8a:7f:f3:60:
                    a4:a8:95:de:ec:c2:21:a5:3c:2a:fb:28:2e:8e:02:
                    5c:1c:f2:76:0d:e3:9e:0d:e3:c4:46:e3:3f:23:12:
                    a0:14:87:58:6b:e0:75:09:ae:0c:03:0c:00:d8:32:
                    e9:24:b0:02:df:fd:b8:39:08:6e:c0:51:ea:77:55:
                    96:e0:ee:5b:93:41:a7:71:e8:24:74:63:eb:33:86:
                    2d:bb:76:e5:aa:39:2a:27:84:b2:66:81:48:93:be:
                    0c:7d:47:1d:7b:be:71:6f:88:3a:8f:c9:e2:c4:e6:
                    ce:bf:bc:ef:b9:fc:d6:e1:0f:e0:ac:7c:56:c0:c0:
                    ff:6c:26:a5:ff:f5:c4:e6:a9:a2:c0:fb:63:0c:a7:
                    bd:0c:8a:cb:0b:e1:d7:dc:23:b6:ef:78:6a:3f:9c:
                    44:d1:09:87:db:d2:df:3b:aa:be:e6:66:d7:6d:49:
                    c7:16:09:72:59:75:28:bc:72:20:00:cf:ab:35:20:
                    20:ee:48:fc:b6:0b:49:53:df:af:59:48:e5:e2:8b:
                    b9:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:EF:5C:E0:B9:9D:BD:39:F1:4D:CD:8E:50:FF:BE:E2:0E:BF:93:6B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1c6fc4b5-684e-4b51-8a8b-002e83881325.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fec:8800::/48

    Signature Algorithm: sha256WithRSAEncryption
         b1:ee:26:be:4c:b2:ad:b4:4c:10:91:69:1e:bc:df:64:fd:99:
         15:65:f0:b4:e1:2a:0c:0f:d2:03:54:fc:2c:5c:1c:7c:17:b4:
         d7:0b:02:96:27:d5:5b:81:b6:b7:d7:20:7a:ad:cc:7b:80:90:
         56:b2:9a:9f:75:70:97:a1:64:9b:c3:fb:b1:a5:2b:8c:9b:5a:
         89:83:f4:8c:90:bf:3b:dd:a0:fb:7e:7f:f6:da:c7:55:c6:09:
         b9:05:33:21:7c:eb:e4:12:bc:8e:a6:d1:5d:7c:6c:0d:69:43:
         9d:11:82:b9:50:34:62:07:d5:c8:fb:d2:f0:47:a1:c9:3b:88:
         04:15:14:97:99:c2:19:be:9b:70:65:e9:dd:d3:19:94:30:fc:
         11:a1:63:56:bd:e8:09:f3:49:28:a5:60:b1:ce:8c:98:f6:d2:
         94:28:fc:73:ba:1a:8d:59:09:d8:42:69:da:f4:f9:f0:07:99:
         10:f7:69:ad:73:fc:df:2c:47:82:56:d6:88:4b:c5:50:c2:d1:
         f8:15:1e:01:22:cb:24:fe:68:0f:0c:e6:c5:bc:08:be:3b:77:
         b4:13:6d:42:cb:f9:fe:fd:e8:3b:39:26:a0:8f:5e:f1:d5:ea:
         8e:66:17:96:c4:50:e8:04:50:55:57:22:ad:40:bb:03:78:75:
         05:76:08:b9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 01:30:57 2026 by rpki-client