Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f3f5c3f7-98f8-42ee-a214-0e48fa9f76a1.roa
File:                     f3f5c3f7-98f8-42ee-a214-0e48fa9f76a1.roa (raw, json)
Hash identifier:          mEgw5+bCL/xL1DNdUl1UqtNqWPZEdffA/9BNZboqsns=
Subject key identifier:   AF:31:89:39:54:D8:33:25:EA:E1:1B:67:97:C0:DD:D2:98:C4:02:16
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       253F9EB2EE44454FDF17FBA629577D388B8A8800
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f3f5c3f7-98f8-42ee-a214-0e48fa9f76a1.roa
Signing time:             Tue 21 Jul 2026 00:51:22 +0000
ROA not before:           Tue 21 Jul 2026 00:51:22 +0000
ROA not after:            Mon 19 Oct 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1ff2:8010::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:3f:9e:b2:ee:44:45:4f:df:17:fb:a6:29:57:7d:38:8b:8a:88:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 21 00:51:22 2026 GMT
            Not After : Oct 19 23:59:59 2026 GMT
        Subject: serialNumber=219dde760e2529b882933e5243e316630965e3fb4733482b4eb42dfbabec4407, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:dc:a3:e8:8c:b9:7a:31:9c:c3:d7:d3:e9:41:
                    d9:87:f0:38:aa:61:2d:93:5f:a7:0c:28:c9:03:aa:
                    29:4d:8f:d2:30:9f:d5:c1:82:40:a4:55:42:af:37:
                    93:9a:77:68:17:14:ab:d5:6c:c3:ac:da:0a:9f:da:
                    64:e8:a0:78:21:15:c9:21:c9:49:45:35:3a:22:41:
                    78:ab:00:32:a2:0c:00:15:3d:42:4d:49:eb:34:12:
                    22:9d:0b:60:d9:5d:00:da:a7:31:9d:30:e7:58:27:
                    2d:9d:97:7b:3e:18:7f:92:d0:d6:b9:ab:3e:6b:b6:
                    e1:c2:50:a1:56:bd:82:79:b3:81:a6:68:f0:0d:55:
                    ae:c4:ba:e4:05:8d:3b:00:8d:16:56:e5:95:3a:a1:
                    5f:0e:cc:87:96:f8:40:45:a6:7c:7f:57:d2:7f:90:
                    0d:fa:e2:60:0c:7d:f3:ed:d1:54:cd:7d:b7:48:1d:
                    b0:f8:2c:dd:87:43:6b:8e:c8:0e:43:f6:df:c4:63:
                    54:b2:b6:68:fc:86:4b:83:cd:4f:75:cd:36:61:72:
                    15:a2:e0:59:e5:1a:96:13:4c:d7:1c:f3:6c:25:c1:
                    9a:09:39:90:6a:ac:8e:7d:bc:85:ed:f0:3e:0a:f1:
                    bb:6c:3b:00:63:fc:ca:23:9b:b4:4f:36:e9:b1:74:
                    de:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:31:89:39:54:D8:33:25:EA:E1:1B:67:97:C0:DD:D2:98:C4:02:16
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f3f5c3f7-98f8-42ee-a214-0e48fa9f76a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff2:8010::/48

    Signature Algorithm: sha256WithRSAEncryption
         d2:61:89:17:25:09:ab:66:c9:d0:f3:d4:03:3f:48:98:86:d6:
         e5:15:5e:9c:35:b9:b9:d8:39:fb:c7:f2:d6:7c:e9:43:35:cc:
         01:af:0d:42:02:5d:76:a3:c3:7f:4f:f1:43:ae:82:e6:e6:33:
         fb:f7:74:fa:21:ec:96:19:55:fe:71:e5:78:e5:a0:ad:9d:2f:
         64:29:b8:e1:dd:c6:b2:f4:61:4e:17:85:ee:fd:33:0b:f9:35:
         5b:5c:f5:2b:e0:29:39:d1:5a:ef:55:d5:f5:e7:b0:b5:e6:23:
         a9:9b:50:ca:78:bc:7f:e8:98:1c:01:c1:64:e5:fc:aa:c3:58:
         78:d4:3b:f8:ea:af:07:b6:ad:65:f6:0b:0f:04:8d:57:f2:b1:
         f7:25:c3:81:c0:dd:e3:5a:f0:4b:60:84:8a:63:86:8a:03:35:
         68:f7:09:b9:d8:ca:9b:39:c4:6d:35:3f:9b:25:bd:cf:02:87:
         88:66:4d:d2:7c:00:79:87:36:91:b0:b4:89:cd:f3:2e:6b:7c:
         1f:c1:92:16:0c:6b:f4:f3:08:7c:ab:76:42:4f:76:1c:df:64:
         e5:5a:74:fa:c5:37:80:ef:e2:ad:ac:b2:24:62:e7:aa:49:f6:
         5f:e0:35:83:4b:b0:91:2f:6b:21:c8:0a:46:e9:39:00:58:7d:
         5f:f3:b9:a4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:04:24 2026 by rpki-client