Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/1a27840b-04f0-4281-ae61-d39dd7cf54c3.roa
File:                     1a27840b-04f0-4281-ae61-d39dd7cf54c3.roa (raw, json)
Hash identifier:          oM9Dvaj/eu0YLKOLETPZ7hoypWb+g/HoBFWk1h+hfpk=
Subject key identifier:   D7:34:5E:20:E5:5B:AA:5E:24:D6:F4:B5:3A:F5:2F:58:A9:4E:CD:C6
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       1E36F01F490533D45B5F575E658E0D6888AFC65F
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/1a27840b-04f0-4281-ae61-d39dd7cf54c3.roa
Signing time:             Wed 06 Aug 2025 00:40:46 +0000
ROA not before:           Wed 06 Aug 2025 00:40:46 +0000
ROA not after:            Wed 10 Sep 2025 23:59:59 +0000
asID:                     8987
IP address blocks:        2605:9cc0:549::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:36:f0:1f:49:05:33:d4:5b:5f:57:5e:65:8e:0d:68:88:af:c6:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Aug  6 00:40:46 2025 GMT
            Not After : Sep 10 23:59:59 2025 GMT
        Subject: serialNumber=5b86a0eca937a624767bdae9513a15bbf477b1ebfb294967e771fdccf0482717, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:00:81:a3:ae:d4:51:58:52:2b:e7:9a:cf:b4:
                    9c:b2:4f:f2:87:04:6d:ae:5b:30:3c:eb:80:58:27:
                    35:14:01:54:ff:b9:8d:c9:85:5a:bf:86:09:d2:90:
                    04:9b:07:9c:c1:c1:ca:ee:69:88:cf:8a:68:45:2f:
                    63:d7:ac:1e:aa:13:e7:23:ff:c9:a9:30:a9:21:10:
                    4c:2d:3a:13:ff:3f:f7:17:98:34:97:71:b7:72:75:
                    92:37:35:7d:61:93:26:44:23:6d:19:17:c2:bb:49:
                    29:f9:38:35:79:9c:ee:9d:88:92:7d:d1:d4:9a:03:
                    bc:da:af:3c:a7:8d:bf:92:bb:fc:81:9d:96:ed:a7:
                    a3:e4:80:90:d0:a5:d3:cd:c3:99:21:0c:0e:12:81:
                    e8:ad:85:f7:4e:41:8b:38:66:33:5f:50:53:47:c0:
                    ba:96:fd:c9:45:09:fc:e9:cd:5b:17:7a:dd:52:99:
                    0b:19:0f:01:fa:ad:1c:3f:33:38:25:b4:df:da:52:
                    23:9d:e8:35:2f:3d:0f:9c:e7:e9:e9:cb:4f:db:23:
                    81:17:dc:1f:e9:2c:d3:1f:85:ab:cb:2a:a6:a5:87:
                    27:49:27:26:d5:99:a9:4b:73:32:e0:7e:f8:b6:2e:
                    14:1d:88:4f:09:8e:40:4f:48:cb:8f:6a:4a:14:d3:
                    7b:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:34:5E:20:E5:5B:AA:5E:24:D6:F4:B5:3A:F5:2F:58:A9:4E:CD:C6
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/1a27840b-04f0-4281-ae61-d39dd7cf54c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:549::/48

    Signature Algorithm: sha256WithRSAEncryption
         1f:c2:61:53:9a:26:98:d3:19:70:f3:33:f6:07:37:ce:d2:e5:
         ca:92:2d:65:73:33:ec:6f:dd:6a:aa:c4:63:5f:fd:03:58:ef:
         91:50:d2:8c:42:e7:d6:ba:61:59:2f:d0:a7:e5:2e:cd:b1:48:
         bd:4a:77:d9:61:e7:f9:13:56:f4:5c:5e:be:6f:7c:9b:1c:3b:
         a3:06:cc:59:f8:ec:88:d8:51:cf:b6:64:ff:91:58:e2:12:49:
         4b:8e:8f:67:43:11:8b:a6:4d:dc:37:13:ed:b7:ef:5c:88:a6:
         04:14:e5:42:fe:19:fc:02:0a:79:80:9e:95:b7:9e:a8:af:82:
         8b:78:69:6d:da:96:7e:2d:dd:f9:b7:c0:42:76:e8:22:d2:a7:
         9a:85:cc:84:7f:79:e6:9b:58:7a:34:d4:da:14:92:bf:e8:9f:
         e4:05:d3:b8:3f:1f:f5:94:df:73:b5:ae:e1:9f:c3:cf:59:99:
         12:ca:58:d6:5f:20:e9:56:0d:69:ef:b6:5e:dd:a0:2c:02:79:
         b9:e2:01:3e:ee:dd:75:00:67:42:3b:38:b1:10:ac:6d:5f:bb:
         f2:0b:b1:58:27:5c:f4:7e:ad:1e:fe:9a:15:bc:f6:1c:73:5d:
         60:9d:f6:ef:82:6e:ae:32:e9:ab:20:1c:9d:9f:a7:ce:80:9f:
         ab:c5:e1:60
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:44:11 2025 by rpki-client