Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6731eb50-d436-42ae-bcc6-90d9e6f43edf.roa
File:                     6731eb50-d436-42ae-bcc6-90d9e6f43edf.roa (raw, json)
Hash identifier:          OafAHec9ELejhmgU8eGP5H5h0jBEKkF1GxaBsAgjla4=
Subject key identifier:   EE:4C:20:7A:42:78:99:B8:A8:BA:E4:3F:D7:AE:1A:07:6B:08:62:A3
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3E4E4222051646CC0BA9FF9D89ADA6A790A49655
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6731eb50-d436-42ae-bcc6-90d9e6f43edf.roa
Signing time:             Fri 08 May 2026 00:41:23 +0000
ROA not before:           Fri 08 May 2026 00:41:23 +0000
ROA not after:            Thu 06 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff6:1000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:4e:42:22:05:16:46:cc:0b:a9:ff:9d:89:ad:a6:a7:90:a4:96:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May  8 00:41:23 2026 GMT
            Not After : Aug  6 23:59:59 2026 GMT
        Subject: serialNumber=b69f32b5b550a1a57d6151d90d83162176300f96f748a48ce1198f2673109201, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:50:d9:cf:6b:53:0a:8a:f6:a6:a7:05:94:cf:
                    77:e2:70:95:68:62:46:33:15:1d:71:4f:9f:35:11:
                    12:75:27:4b:8a:68:43:91:72:06:a3:24:ec:9d:65:
                    c1:1c:4b:d1:18:1e:06:99:2b:d0:7a:58:f0:c3:de:
                    e7:6a:a3:96:60:5f:45:d7:53:49:f3:74:b1:50:a2:
                    94:69:3b:6e:03:df:14:ef:e3:bd:af:6e:b0:6b:35:
                    1f:37:58:19:48:dd:58:2f:47:8d:46:1f:29:37:6c:
                    7a:48:05:22:b2:cf:f3:d6:b4:fe:58:41:c6:52:10:
                    b2:8d:19:82:86:f7:38:23:53:58:24:1b:b5:8b:5f:
                    64:a6:8b:e8:ee:f8:da:a4:5b:35:01:92:7c:d6:44:
                    ab:9f:24:8f:87:90:08:c0:5d:9b:f8:25:a4:27:d9:
                    f2:a1:25:2a:d1:6a:b6:d3:1c:90:34:a0:04:40:19:
                    ad:c1:43:ff:66:ef:ab:6e:8c:ea:6a:d7:11:36:b0:
                    8b:57:2b:07:3a:68:c6:06:f1:70:35:ba:8d:33:da:
                    ef:19:a4:21:29:59:cf:09:d2:40:67:0b:b2:6c:d3:
                    3f:e9:88:98:25:25:95:d1:02:66:d3:aa:f5:cd:38:
                    49:5c:71:64:c7:9b:62:ae:c7:ab:7a:1e:3b:11:f4:
                    95:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:4C:20:7A:42:78:99:B8:A8:BA:E4:3F:D7:AE:1A:07:6B:08:62:A3
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6731eb50-d436-42ae-bcc6-90d9e6f43edf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff6:1000::/48

    Signature Algorithm: sha256WithRSAEncryption
         8b:94:2d:b3:b6:05:c6:b4:18:21:c7:24:45:3d:b3:a9:67:92:
         ea:4d:cd:5f:89:14:64:c4:b1:c5:e6:8c:80:73:aa:7f:cf:94:
         1c:dd:fd:4f:1e:ca:c6:dd:58:a8:0f:6d:d2:ee:98:2e:a2:c6:
         5e:22:5f:c2:e6:4d:dd:a6:bd:b5:08:f7:b1:20:38:72:f7:1b:
         20:e8:96:1b:e9:19:3c:69:ee:80:98:07:6e:f4:fc:4b:ae:f8:
         3e:fc:df:43:b3:df:62:96:c4:9d:f7:5d:f1:67:9c:d3:6d:5b:
         7d:03:85:b5:92:75:f4:38:8d:b5:ea:81:ba:bd:7b:05:68:05:
         85:c0:35:02:96:60:d9:9b:71:65:3f:08:f3:6d:9a:bc:65:8c:
         d2:bf:99:93:4f:c3:43:99:fc:8b:d6:08:1f:e3:47:c6:a5:ae:
         11:e1:65:60:46:e2:c2:f5:90:37:f7:c0:79:47:e6:d9:35:7f:
         d5:27:8f:ae:7d:28:70:23:d1:8c:5f:dd:a0:24:cf:c4:1e:28:
         50:9d:f9:0e:95:32:1a:ab:eb:e7:0b:b8:e0:0f:2e:6f:08:6e:
         ae:06:ce:92:e8:48:2e:d4:97:b9:3d:d3:fc:ef:78:e4:e1:8e:
         98:ce:6c:29:ea:f9:a1:48:86:59:33:dc:8d:ba:f3:92:42:9f:
         e4:29:0d:4f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue May 12 21:43:06 2026 by rpki-client