Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/06ea2b4a-6dfc-489d-b8f1-dc7f93cac1c3.roa
File:                     06ea2b4a-6dfc-489d-b8f1-dc7f93cac1c3.roa (raw, json)
Hash identifier:          Ag3Rw8KVqTmoXIOc5AKmsRnHeGleZ9/tamC4nlPeURQ=
Subject key identifier:   73:FD:ED:6D:0F:9D:7F:B1:53:DA:A5:9D:97:07:6F:49:9A:FD:F1:84
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       642661D84FAB5B4163ABAD9726ED2F46F71783B8
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/06ea2b4a-6dfc-489d-b8f1-dc7f93cac1c3.roa
Signing time:             Tue 05 Aug 2025 18:30:28 +0000
ROA not before:           Tue 05 Aug 2025 18:30:28 +0000
ROA not after:            Tue 09 Sep 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:f0fb:e900::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:26:61:d8:4f:ab:5b:41:63:ab:ad:97:26:ed:2f:46:f7:17:83:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Aug  5 18:30:28 2025 GMT
            Not After : Sep  9 23:59:59 2025 GMT
        Subject: serialNumber=61edfe71e69854e2b708571349a585f10bd3fb79d16e090cca694aa8a319cb1b, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:23:92:95:2b:b4:64:44:49:b0:4b:2c:fc:33:
                    46:1c:6a:6c:1c:98:ea:53:07:31:35:af:09:69:3d:
                    8c:d8:cf:0a:33:53:fc:ca:fb:1b:1f:97:b0:a1:5f:
                    49:ef:8e:5a:c0:c3:4b:8d:11:fd:be:ab:10:19:d0:
                    74:a4:a7:39:e2:18:26:a8:d0:95:6b:be:ba:1f:0d:
                    b6:89:18:fd:b5:71:d8:11:09:63:5d:b9:1e:cc:3f:
                    d1:fe:6b:76:13:2c:94:6e:4b:6c:3a:9d:72:29:d5:
                    4c:8f:69:aa:bb:a9:60:83:62:27:81:4a:c3:13:0f:
                    68:b4:29:61:01:5f:83:4a:30:38:ee:ba:59:e7:e6:
                    8b:6a:7e:b4:33:a7:1f:86:84:02:87:42:4a:9b:a5:
                    e2:c3:0b:a8:3e:fb:f7:7f:d1:c5:5c:7a:65:2e:11:
                    09:de:e3:3c:1c:13:23:db:01:56:bf:0f:15:f6:4d:
                    a8:cb:ab:35:f4:db:9b:44:4d:a5:4a:82:2d:a7:14:
                    9b:5d:37:71:46:b2:6d:12:85:5c:a6:b8:7b:bc:51:
                    7c:cf:61:7a:20:e3:e5:d5:e9:80:6c:49:1c:07:5d:
                    54:d2:60:80:fc:63:e3:c6:10:93:4e:62:f2:87:39:
                    48:bc:38:a7:12:f6:6d:74:a3:e3:16:d0:5f:83:a2:
                    63:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:FD:ED:6D:0F:9D:7F:B1:53:DA:A5:9D:97:07:6F:49:9A:FD:F1:84
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/06ea2b4a-6dfc-489d-b8f1-dc7f93cac1c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0fb:e900::/42

    Signature Algorithm: sha256WithRSAEncryption
         4a:eb:4d:86:76:cf:72:22:2e:56:2e:cb:ae:ed:2b:67:5f:2f:
         dc:e2:68:c3:5f:cf:a1:1a:02:d7:70:94:9c:6b:48:db:bb:52:
         d8:90:1f:1c:f9:7e:a4:11:f1:dd:36:1d:5c:bc:f5:38:4b:f8:
         d7:67:e5:ca:01:e3:7c:1b:3f:bb:b6:1d:f1:d7:98:79:e0:1e:
         f4:dd:f9:f7:1c:f5:9c:a4:b1:49:91:52:74:10:9d:8f:6a:48:
         04:d3:2c:e6:ae:0c:6c:da:ff:a6:fb:f4:79:e3:46:14:a9:06:
         70:77:20:ad:df:4a:7f:20:e2:c0:a3:e5:5b:25:a0:22:4d:e9:
         c7:05:4b:8a:14:2c:d5:1f:b1:51:1a:ff:7f:dd:09:07:72:86:
         8c:c0:64:0c:db:d4:63:e7:cf:e5:e1:23:d1:d3:ea:a6:7c:9c:
         b3:3e:be:fc:9b:1d:9e:56:34:59:81:33:14:ef:5c:71:34:47:
         ed:f6:05:b7:f6:0b:4c:09:ad:8d:6a:41:94:57:8a:18:65:40:
         41:c5:24:68:32:bb:54:22:83:b4:5d:1d:dc:20:1f:0f:ce:e9:
         39:d0:2f:d9:d2:10:51:f8:e9:a1:aa:01:8e:61:f4:9a:7d:6f:
         8b:5a:26:14:09:70:5d:92:e5:1e:a1:7c:2f:5c:43:18:7d:87:
         c1:a5:84:bb
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:13:13 2025 by rpki-client