Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a0dc793d-9eee-4685-9f69-65a430499e3a.roa
File:                     a0dc793d-9eee-4685-9f69-65a430499e3a.roa (raw, json)
Hash identifier:          LIclBP0peKCukLEwLrd/iqRgcUCO69Tp29dmoKUV/dE=
Subject key identifier:   0F:BB:CB:9B:F1:DF:14:42:1B:66:94:E0:E2:DB:9C:27:67:62:01:EF
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       412B3D55D15EABF2C5C5C7AC8024E055F4370FFE
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a0dc793d-9eee-4685-9f69-65a430499e3a.roa
Signing time:             Sat 18 Jul 2026 00:21:01 +0000
ROA not before:           Sat 18 Jul 2026 00:21:01 +0000
ROA not after:            Fri 16 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f22::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:2b:3d:55:d1:5e:ab:f2:c5:c5:c7:ac:80:24:e0:55:f4:37:0f:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 18 00:21:01 2026 GMT
            Not After : Oct 16 23:59:59 2026 GMT
        Subject: serialNumber=50a907678d2739bb78d7dd9fe76883ecbbe0700bc5065f1d7b9cc85d554cb4cd, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:37:23:5d:04:53:13:76:29:2a:14:7d:6d:ab:
                    bb:66:fe:77:bd:95:cc:4d:9e:28:c3:9d:0e:44:87:
                    91:bd:c0:b7:1d:60:38:5e:f6:2f:b9:d0:19:56:91:
                    d4:68:56:0d:c1:45:df:70:c1:f9:c2:49:a1:c5:df:
                    81:6f:92:42:bd:12:3e:e9:89:17:29:37:71:16:3d:
                    ef:03:20:e9:66:2f:ad:43:96:54:07:56:9f:ab:7a:
                    b5:ba:5b:79:55:98:76:d1:50:4d:94:8d:5b:f0:ff:
                    b4:aa:7d:04:e5:5a:85:c0:54:57:b3:0f:33:70:c6:
                    b3:6e:95:e6:ab:6f:9c:eb:73:33:9e:3e:2e:5d:85:
                    74:b6:1a:2b:44:a3:59:08:d9:ef:d3:e7:0e:3b:b9:
                    b4:d8:fc:8d:d4:78:92:f3:ca:01:35:79:8b:74:16:
                    c2:f3:9a:26:b6:26:55:0e:ea:55:d0:5e:e8:3a:c6:
                    e3:67:d5:03:2f:f2:0d:fa:e1:56:c6:e7:3d:a9:a6:
                    b6:63:6c:0f:d2:2a:e5:6b:e7:e2:4a:f7:93:2e:57:
                    65:b2:3d:6b:1b:35:6e:b1:84:98:57:92:49:05:79:
                    1a:d4:26:9b:21:1d:ff:3d:7b:3d:a2:31:cc:8b:84:
                    e9:16:5a:5b:48:d2:29:42:44:9e:c1:da:b7:34:31:
                    e0:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:BB:CB:9B:F1:DF:14:42:1B:66:94:E0:E2:DB:9C:27:67:62:01:EF
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a0dc793d-9eee-4685-9f69-65a430499e3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f22::/36

    Signature Algorithm: sha256WithRSAEncryption
         31:70:09:0e:fa:69:7b:f2:70:3a:e9:2c:0c:5d:c8:e9:d2:7a:
         2d:06:5b:cd:70:98:a4:67:83:3a:b5:fc:c4:64:1b:3d:8e:fa:
         9e:88:09:cc:6b:ae:4e:9a:ac:df:53:2a:7e:66:73:ba:94:5b:
         fd:bf:ee:d9:ad:cc:80:f3:db:ef:a9:07:20:d9:a4:60:dd:2c:
         e1:c0:ee:84:78:4e:2c:30:7d:5e:70:01:9c:88:a1:5c:97:e1:
         87:43:72:a7:77:88:03:8a:67:72:cb:bd:85:40:d7:48:d9:7c:
         57:ed:fb:6c:46:18:ee:15:4c:54:56:dc:4e:f8:62:91:d7:86:
         c2:46:71:32:84:44:c0:f8:40:f0:de:c4:10:8e:26:f2:09:82:
         0e:9a:11:3f:9b:4c:a5:09:19:5b:35:04:9e:77:d4:93:53:49:
         f3:3e:1d:ac:8f:b3:97:d2:92:57:86:2d:8e:36:11:c8:4f:bf:
         85:8a:e6:a2:9d:3e:86:af:47:7e:07:96:38:a4:90:6a:2a:74:
         e9:97:f3:7a:43:ee:f3:58:bd:4d:37:ac:11:87:b1:46:8f:1f:
         a3:9a:fc:ae:6b:3d:5c:21:9e:bf:fc:76:fb:89:2b:0d:e3:13:
         43:80:c5:62:b5:35:74:4f:1f:3a:78:d0:68:80:5b:a8:ee:3f:
         9c:b7:d6:d2
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:44:34 2026 by rpki-client