Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/efe6f6cf-4796-46a7-9acc-01904c6ad2b9.roa
File:                     efe6f6cf-4796-46a7-9acc-01904c6ad2b9.roa (raw, json)
Hash identifier:          dhU/MLTovSS3W6Dg3zlsXtKJTxR6CGDHdEHnXonUu4s=
Subject key identifier:   2E:F8:B5:EC:BD:58:CE:CD:F0:F8:17:82:7B:E9:C7:1D:A4:20:E7:E0
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       24BA5D5430615AA1A8CAF23EB666D2AEC1F8C2B7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/efe6f6cf-4796-46a7-9acc-01904c6ad2b9.roa
Signing time:             Thu 23 Jul 2026 00:20:45 +0000
ROA not before:           Thu 23 Jul 2026 00:20:45 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff5:4000::/39 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:ba:5d:54:30:61:5a:a1:a8:ca:f2:3e:b6:66:d2:ae:c1:f8:c2:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 23 00:20:45 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=158d2a9564aae48f00c1fcbdc3fce4ece933566941bb236e1eebfd55c9e17d03, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:86:d7:3d:24:11:80:84:a5:b8:cb:12:e5:ad:
                    e3:ed:29:43:37:ce:56:10:b3:c0:17:f9:db:18:4b:
                    ff:ae:ba:3e:22:4f:3f:2d:67:b9:b1:3e:f7:63:ec:
                    26:b5:dd:14:fc:20:5b:40:71:cf:06:10:f4:ce:a3:
                    fc:47:30:f1:42:01:51:c0:45:77:9f:fa:ba:48:39:
                    7b:1b:cc:86:e3:4a:5f:7f:c8:a1:cb:68:61:4b:a9:
                    55:83:58:5e:5f:70:e6:39:26:60:7d:7b:b3:30:b6:
                    8d:eb:f9:b0:1a:3a:3c:d8:42:6a:2d:fd:d6:c4:91:
                    e4:ac:40:71:a3:7f:0b:83:bb:9f:34:61:df:13:a1:
                    2e:17:5c:c8:30:7d:88:e1:31:a7:1a:50:98:10:07:
                    4a:74:7c:08:fb:0f:f6:17:1d:c9:32:ac:21:0b:e2:
                    c8:50:54:13:e0:7d:7e:4f:6b:88:86:cd:79:65:03:
                    b8:0f:38:9f:9a:3d:6a:bd:c3:59:8b:b3:2d:d8:ea:
                    88:86:a8:be:2a:98:dd:1c:4d:6d:20:21:3e:f4:8b:
                    8d:3e:e5:5f:bb:2f:9a:75:17:b5:7d:07:6b:af:77:
                    d7:97:c2:e5:5b:df:28:d9:16:4b:86:0c:0e:81:f7:
                    cb:ac:f7:68:f3:39:04:9f:53:74:2e:12:cb:9d:3d:
                    2e:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:F8:B5:EC:BD:58:CE:CD:F0:F8:17:82:7B:E9:C7:1D:A4:20:E7:E0
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/efe6f6cf-4796-46a7-9acc-01904c6ad2b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff5:4000::/39

    Signature Algorithm: sha256WithRSAEncryption
         07:af:36:1b:65:02:b9:54:fa:38:78:5c:fc:4e:f3:a1:e4:83:
         42:79:4f:81:70:66:6f:c5:39:77:5b:81:9e:3d:94:7c:5e:83:
         3c:df:c4:83:ff:19:54:08:aa:1b:11:42:30:6d:ce:de:24:53:
         44:75:08:9b:d1:92:aa:cc:4f:d7:45:7f:94:2f:70:3a:27:bd:
         e2:98:a7:ae:b9:97:e8:d9:1d:7d:91:f8:50:34:db:11:dc:92:
         17:e0:14:ea:b0:ab:22:cd:2e:b4:df:6d:1e:ce:13:d2:27:48:
         35:dd:cc:c0:92:3f:60:73:9e:45:c8:f5:2f:4c:85:3d:ba:1f:
         ca:9e:08:90:47:7d:0e:67:0c:6f:a1:59:8a:92:00:2c:17:29:
         9e:45:25:eb:c3:14:03:e6:de:63:44:32:71:a4:86:da:66:20:
         78:45:94:3e:e5:d8:90:4f:74:d6:f6:bd:9e:73:ea:3a:9c:93:
         37:73:a9:e8:16:43:6c:cf:8c:d2:4d:99:fc:ac:8b:0d:32:aa:
         21:b8:74:cb:8c:82:30:18:47:70:c1:23:f0:37:76:c6:11:a6:
         f6:ee:b3:f1:b1:44:1e:85:5b:72:43:0c:13:51:46:1a:14:a0:
         1d:8b:8c:37:f7:f8:5a:ac:2f:6f:34:21:72:46:39:53:58:76:
         91:9b:10:82
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:44:14 2026 by rpki-client