Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/1fb8a26e-46cc-4838-9d34-4a82ec864e85.roa
File:                     1fb8a26e-46cc-4838-9d34-4a82ec864e85.roa (raw, json)
Hash identifier:          Oo2hhzmXixECOginsIL0ClPwBogvfGL9c1BE64Lyiw0=
Subject key identifier:   9D:5F:B5:94:53:79:E9:8F:CA:B3:6B:A8:F8:B8:56:B1:26:2E:54:54
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       6EF6126FE2E03956CA1C293D647FDFD587A8350A
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/1fb8a26e-46cc-4838-9d34-4a82ec864e85.roa
Signing time:             Fri 22 Aug 2025 15:00:16 +0000
ROA not before:           Fri 22 Aug 2025 15:00:16 +0000
ROA not after:            Fri 26 Sep 2025 23:59:59 +0000
asID:                     21664
IP address blocks:        2605:9cc0:e00::/43 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:f6:12:6f:e2:e0:39:56:ca:1c:29:3d:64:7f:df:d5:87:a8:35:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Aug 22 15:00:16 2025 GMT
            Not After : Sep 26 23:59:59 2025 GMT
        Subject: serialNumber=1241bf337e1aae2a9db39d4c6a9a9a72e6e642ca6ae7dab61427b10a10c831ec, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e2:3b:59:4a:46:76:54:58:54:15:fe:36:92:
                    3f:30:22:53:75:b6:12:09:3e:1c:96:36:c2:2c:c3:
                    aa:c8:56:70:ed:5d:8c:a8:4e:9b:db:29:48:52:d3:
                    94:30:03:4c:3b:fe:65:79:1e:26:2e:55:6c:e7:78:
                    85:06:94:d6:d1:1b:33:7f:43:b8:e6:02:18:0b:df:
                    11:ee:2c:10:dc:46:66:e1:7e:0b:81:17:33:51:19:
                    8a:26:ff:a1:5c:f3:42:a7:78:e3:4a:e5:51:04:60:
                    51:68:20:f4:b2:ae:66:48:2b:49:cc:2a:53:24:d5:
                    28:1f:64:06:4e:a3:0b:0d:c1:e5:f6:89:17:56:0b:
                    13:b4:7a:e7:38:fd:41:2e:58:31:b7:54:c2:b7:f9:
                    bf:6a:55:f8:46:7c:b6:b6:72:43:96:84:ca:ae:63:
                    0f:e2:b6:86:57:ac:a5:61:34:0b:90:19:50:6d:e3:
                    ce:8b:66:eb:75:f3:db:9a:f3:0f:6f:fc:31:94:d5:
                    6b:7c:31:d0:bd:ad:29:a4:a5:65:61:3b:37:2b:a1:
                    8d:64:ab:f3:c8:72:f6:a6:b8:90:80:5b:48:1c:dc:
                    9a:cc:bb:3f:4d:8b:f4:9f:98:5c:d9:5b:00:0c:de:
                    ea:29:4e:78:2c:15:3a:35:05:1d:18:5c:f7:d2:0e:
                    7a:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:5F:B5:94:53:79:E9:8F:CA:B3:6B:A8:F8:B8:56:B1:26:2E:54:54
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/1fb8a26e-46cc-4838-9d34-4a82ec864e85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:e00::/43

    Signature Algorithm: sha256WithRSAEncryption
         92:c8:4e:22:3d:61:05:8a:29:9d:3a:dd:59:15:5a:65:81:92:
         f7:5a:08:56:73:37:19:a7:31:99:08:1a:3b:e9:92:b1:2c:cf:
         1d:66:b1:19:c9:3b:c9:1a:4e:b7:66:f1:2e:2e:52:e9:70:a0:
         9b:71:0f:ad:7f:ae:97:40:df:8c:8d:1f:2a:92:28:34:f4:af:
         f4:cb:a1:5f:56:c4:0d:94:c7:63:62:6d:48:f1:11:1c:2b:e5:
         db:6c:3f:c2:84:3e:f0:73:6b:e4:cb:1e:3e:16:b8:ff:55:be:
         4a:a4:b8:97:37:30:c9:54:f5:23:7f:40:88:28:8f:56:5f:2e:
         f1:14:72:04:98:fd:88:c2:72:82:3d:7f:cc:88:06:f1:24:fe:
         3b:74:5f:81:52:93:5f:9f:c7:14:5d:db:f6:bb:8f:ce:5c:f1:
         51:36:63:5e:f7:3b:69:58:ce:5d:f1:54:d7:fd:12:ef:92:e4:
         5d:26:8e:7c:3e:c7:03:a7:27:c7:59:e5:39:35:5f:78:b5:03:
         5b:9c:67:6a:eb:9f:b7:3d:30:55:f2:d0:4a:96:76:af:85:84:
         ac:eb:7b:a0:2b:ae:45:f2:85:af:41:f2:4f:3b:58:50:fe:3a:
         5f:3b:eb:16:41:03:5a:20:2f:e3:e9:87:94:30:3c:b5:4e:83:
         3c:a3:dc:94
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Aug 23 16:52:43 2025 by rpki-client