Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/02dd0cf1-fdbe-4766-ad6f-3102791e6256.roa
File:                     02dd0cf1-fdbe-4766-ad6f-3102791e6256.roa (raw, json)
Hash identifier:          /XhkQx1xZ9xNdb1FpB+Yequqlvk4s/jbqTQCOOFIqaU=
Subject key identifier:   B1:06:A8:CF:81:BE:88:3A:89:07:9F:D4:8F:5E:BB:17:89:03:1E:2F
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       22D5D908848F6523B217A911C007695C534EFDDF
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/02dd0cf1-fdbe-4766-ad6f-3102791e6256.roa
Signing time:             Fri 15 Aug 2025 15:10:40 +0000
ROA not before:           Fri 15 Aug 2025 15:10:40 +0000
ROA not after:            Fri 19 Sep 2025 23:59:59 +0000
asID:                     40045
IP address blocks:        2605:9cc0:c05::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:d5:d9:08:84:8f:65:23:b2:17:a9:11:c0:07:69:5c:53:4e:fd:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Aug 15 15:10:40 2025 GMT
            Not After : Sep 19 23:59:59 2025 GMT
        Subject: serialNumber=ef07b90750a173b945218cefed93cb463cc33e1ababce8c3751a4797aeecbd74, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:60:36:94:be:48:cc:58:cc:10:93:9f:b6:30:
                    7f:95:36:68:e4:29:07:e6:b0:c5:7f:1d:e6:37:50:
                    5e:1b:ef:1d:b3:9a:68:e7:00:57:49:26:b8:94:bc:
                    de:b3:19:91:4b:05:a8:64:0e:09:17:29:0f:95:f0:
                    1d:08:fb:89:ba:0a:b6:3a:00:09:f3:aa:e3:13:46:
                    06:87:20:63:70:cf:0d:f1:23:c9:a9:9b:01:a6:bd:
                    60:ba:07:45:d5:a6:24:e6:36:42:37:22:b8:0d:6f:
                    92:3c:74:dd:3a:7e:ab:b6:d6:fc:54:18:a8:82:18:
                    c0:2e:84:c2:e4:36:a4:24:4e:78:0b:11:7f:eb:62:
                    e3:32:46:1b:17:ad:50:0c:78:69:44:11:30:65:31:
                    ce:2c:20:64:46:76:56:46:e7:3b:ef:c9:11:84:da:
                    94:3c:00:0f:7b:e0:59:37:22:01:ae:02:6f:c1:4d:
                    3a:d8:5f:61:91:74:3d:dc:73:a3:32:26:56:0c:cb:
                    25:52:c5:98:53:6c:95:27:f3:bc:0f:25:53:e2:7c:
                    ad:a8:31:17:19:f4:d9:fb:e7:e6:ee:c8:58:2a:96:
                    ba:b5:43:6c:a6:9f:f9:dc:1d:fb:de:fe:21:59:cf:
                    ba:19:93:ca:aa:ad:47:6c:3a:ed:11:9d:0f:53:bf:
                    a3:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:06:A8:CF:81:BE:88:3A:89:07:9F:D4:8F:5E:BB:17:89:03:1E:2F
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/02dd0cf1-fdbe-4766-ad6f-3102791e6256.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:c05::/48

    Signature Algorithm: sha256WithRSAEncryption
         8b:2d:40:7e:d6:ea:9c:25:3b:32:65:2c:d1:26:51:c0:48:b3:
         21:cb:60:b8:1a:eb:01:4b:e7:d4:31:9e:3b:3a:37:c3:f9:73:
         97:f3:f7:c6:2d:a9:e6:e4:81:23:70:f8:5b:a0:14:c7:b3:69:
         a6:5b:d6:76:b5:94:7e:d7:7f:8c:67:ba:78:f0:8d:49:48:c4:
         f5:26:5d:4f:ab:95:5c:08:7a:f4:0a:08:05:70:0c:da:6b:68:
         12:ad:22:3c:98:26:8b:a5:01:d1:87:cb:81:3a:a2:e9:38:d1:
         4d:95:94:25:88:a5:f4:cf:34:14:04:29:48:3a:53:27:28:d0:
         cc:e8:de:d8:f4:5e:b3:aa:d9:71:0a:54:bc:9f:ab:54:97:2d:
         7d:98:c9:1e:76:3e:93:80:66:1b:51:38:55:25:41:a8:93:80:
         8e:51:d3:09:08:cf:f4:f4:15:bc:ab:6b:43:d0:4c:0d:a9:8c:
         18:34:a4:aa:ce:61:22:f7:09:4e:fa:51:e8:4f:84:f1:17:7d:
         67:17:93:1d:ef:c1:aa:b5:e8:74:ff:ea:ac:cb:de:d1:21:6d:
         07:1e:d9:de:a5:47:6b:6b:5d:b5:1b:8c:ff:5d:74:d9:47:19:
         4d:cf:ff:c0:56:cc:e8:57:56:c9:3a:a3:49:69:a6:1b:94:cf:
         d2:25:84:97
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:04:04 2025 by rpki-client