Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/bc9bb346-4bd0-43e3-9369-a842e8d67346.roa
File:                     bc9bb346-4bd0-43e3-9369-a842e8d67346.roa (raw, json)
Hash identifier:          IYXEk1EuNigEbxzV2hp48nDzWHsG/w0vm4QxQhdf+98=
Subject key identifier:   DA:44:D5:9F:F7:A0:7A:AF:83:F7:84:6D:BE:AF:BB:75:F9:7A:E0:F1
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       15EAB2AF4A459CCDE595FCF653A81BF3FF1471C8
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/bc9bb346-4bd0-43e3-9369-a842e8d67346.roa
Signing time:             Fri 26 Sep 2025 17:53:15 +0000
ROA not before:           Fri 26 Sep 2025 17:53:15 +0000
ROA not after:            Fri 31 Oct 2025 23:59:59 +0000
asID:                     8987
IP address blocks:        2605:9cc0:610::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:ea:b2:af:4a:45:9c:cd:e5:95:fc:f6:53:a8:1b:f3:ff:14:71:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Sep 26 17:53:15 2025 GMT
            Not After : Oct 31 23:59:59 2025 GMT
        Subject: serialNumber=3e187634fea7d0a2a86916afcada0958fbbdae913ee818bae337cc6d7dbe84ad, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:7b:09:31:b3:5b:d7:3a:ad:79:71:4d:8e:99:
                    d0:e2:de:b1:40:18:8e:d9:58:b9:ed:45:ee:9f:9e:
                    3a:3c:9a:00:2f:7c:0a:4d:08:7e:6f:c2:36:9d:28:
                    85:72:60:3e:f5:f5:75:c6:65:a1:01:b8:f4:2a:ba:
                    dd:14:29:b8:48:01:90:bd:5f:2c:51:d8:0f:3e:b4:
                    ba:0e:2e:00:22:54:8f:d9:3b:89:0c:2c:25:38:e1:
                    02:4e:70:f5:0b:3c:37:fa:4d:0d:8a:83:85:12:cc:
                    83:87:6f:d9:79:ea:59:e0:62:bd:06:52:cb:be:fc:
                    bc:cc:85:22:48:a4:b8:88:dd:26:18:99:4c:00:86:
                    99:fa:d0:84:19:b7:0c:bd:52:b7:83:87:38:c1:19:
                    77:99:e8:7a:21:10:f7:b4:94:0a:52:25:17:3e:1c:
                    54:26:bf:08:f5:0c:d5:25:f8:88:69:4a:60:67:82:
                    3a:87:46:ff:fa:bb:31:c3:ea:ff:a2:f4:c0:f4:87:
                    75:0c:70:98:bf:c3:79:99:f8:e1:c5:82:cd:95:61:
                    3e:5c:f5:6b:2c:09:8d:7f:e6:a9:a8:2f:66:7b:1e:
                    70:fe:6e:4f:99:60:e2:b7:d6:ae:f7:55:9e:70:cc:
                    4b:15:30:80:b3:46:6c:51:4f:a8:c1:9f:a3:0a:3f:
                    33:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:44:D5:9F:F7:A0:7A:AF:83:F7:84:6D:BE:AF:BB:75:F9:7A:E0:F1
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/bc9bb346-4bd0-43e3-9369-a842e8d67346.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:610::/48

    Signature Algorithm: sha256WithRSAEncryption
         63:64:1a:ef:8a:2b:68:13:bb:c1:80:d0:23:7c:23:52:8f:cc:
         8e:65:23:69:00:d5:88:c8:51:98:40:d0:5f:49:78:12:62:88:
         21:e9:9b:f3:ed:63:14:55:7e:85:8a:2b:25:3d:d9:56:07:cf:
         f0:3e:b1:47:11:2e:4c:bc:eb:3b:0c:88:fc:20:8c:14:8e:77:
         bf:ba:03:2f:fd:c0:08:7a:89:4e:14:9d:94:d3:d4:2c:af:84:
         5c:aa:df:dd:e8:70:b2:81:a7:b8:1b:1c:8f:2d:c7:b5:95:d7:
         10:9e:54:75:34:7f:b9:6a:f9:b1:61:3b:0f:d0:2f:2e:e2:a1:
         53:57:19:bf:6f:86:45:fb:de:84:31:f3:a3:06:db:04:18:44:
         92:d9:c6:1c:2d:91:6d:6f:45:e0:2a:25:56:b1:7a:8c:9c:99:
         0d:5d:0e:b4:4f:5e:6e:a0:ad:b5:35:c6:ee:28:02:0a:9c:d1:
         ad:8c:89:f8:e2:a8:92:f9:73:6e:67:f9:ff:c6:15:43:ef:ab:
         6c:0a:0a:28:6f:53:a1:cf:9e:a7:b3:a5:d1:50:16:27:a3:13:
         9f:e0:e1:67:ce:55:8e:6e:e4:4b:f8:7c:e6:66:e4:8c:ee:b0:
         9b:70:f6:da:94:0f:99:82:19:d5:e2:35:77:e4:9c:d2:c2:cc:
         75:29:d0:a6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Oct 20 04:55:30 2025 by rpki-client