Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/d29b6497-5e29-4d74-9bc9-54ef6082f794.roa
File:                     d29b6497-5e29-4d74-9bc9-54ef6082f794.roa (raw, json)
Hash identifier:          ap7k3kjK8tZwMoZ3M4L6vYz6pOynfI/bzW0RrVt3Qvk=
Subject key identifier:   E0:8F:A5:10:86:70:E4:27:01:B8:AA:DF:19:64:68:16:10:A3:9E:E8
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       5354168D81415BAE13429639BBA3B47E763F3D50
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/d29b6497-5e29-4d74-9bc9-54ef6082f794.roa
Signing time:             Fri 26 Sep 2025 17:51:04 +0000
ROA not before:           Fri 26 Sep 2025 17:51:04 +0000
ROA not after:            Fri 31 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2605:9cc0:308::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:54:16:8d:81:41:5b:ae:13:42:96:39:bb:a3:b4:7e:76:3f:3d:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Sep 26 17:51:04 2025 GMT
            Not After : Oct 31 23:59:59 2025 GMT
        Subject: serialNumber=a6933007f748b356254953326c48c05f9bf23f83ed1e58c8df2052fcc267f37c, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:70:d2:6f:cf:c3:3f:27:1c:ca:3e:1f:0e:09:
                    74:2a:be:67:79:a1:05:ec:fe:76:b0:0a:63:81:e8:
                    99:58:b1:40:fb:c0:5e:8f:a9:b1:62:ab:1b:84:67:
                    14:7f:b4:d9:58:09:95:54:c6:4a:fd:5b:4b:fe:83:
                    6a:1a:07:d9:87:57:c0:de:dd:44:6c:9c:70:77:10:
                    e2:07:dd:78:f1:4c:33:b3:96:72:2a:5f:fb:04:7d:
                    45:6c:87:18:b0:f0:20:07:c8:2c:e6:24:1d:10:bd:
                    45:90:ad:fd:d8:19:01:49:96:2b:c5:d9:7f:93:d9:
                    19:8b:65:5c:38:e3:b8:d5:71:88:9d:81:f8:92:8f:
                    e9:fe:0e:bc:10:66:b8:bc:5c:44:da:4e:65:3c:8d:
                    20:21:45:7d:87:2f:a4:75:c6:ed:c9:1a:c9:02:d4:
                    4c:42:81:eb:e5:c7:c0:ba:15:de:c6:67:4e:b3:bd:
                    fc:90:44:90:72:ad:a9:9b:36:43:23:49:7f:b7:d7:
                    e4:62:91:bf:ee:f5:8a:7b:e9:c9:36:fc:23:14:bf:
                    42:d5:be:f3:35:50:b9:8d:6c:58:96:f8:d1:cb:a6:
                    ac:05:ef:8d:e4:42:0e:96:4f:ad:db:ea:b5:76:7f:
                    43:43:14:b1:fe:fe:c6:6c:f8:7b:45:62:70:56:ff:
                    17:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:8F:A5:10:86:70:E4:27:01:B8:AA:DF:19:64:68:16:10:A3:9E:E8
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/d29b6497-5e29-4d74-9bc9-54ef6082f794.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:308::/48

    Signature Algorithm: sha256WithRSAEncryption
         19:7c:bf:29:be:52:5f:15:5e:45:a8:6a:41:af:47:d1:f0:de:
         d9:92:17:7e:4c:6e:44:a2:46:9e:06:f4:3a:90:a3:86:ca:8f:
         98:57:4d:19:b4:38:96:a9:ce:ec:83:83:c8:2d:1f:fa:a3:b0:
         b5:ee:1a:0c:b2:24:76:7f:9e:9d:e8:23:59:e0:8c:8b:63:3d:
         4e:d1:14:5a:36:1d:c2:39:33:f8:fe:6c:e9:77:0b:b8:f0:78:
         5c:cf:ad:d4:cd:ab:7e:e8:de:9c:e1:e3:74:3d:8f:28:8f:31:
         3c:72:e3:03:3f:ee:fb:83:b2:45:d0:b7:00:fd:72:54:60:b7:
         65:ab:73:73:ea:97:53:63:6a:62:19:0d:92:33:fc:fa:fc:a4:
         07:9f:ec:71:ce:ab:34:75:92:83:f7:c6:70:80:b2:9d:6a:bb:
         7d:a0:68:43:41:c4:89:73:1c:ec:3f:92:3f:64:f8:3c:a1:08:
         d7:d2:4b:3c:d4:36:ab:42:80:66:cb:4c:08:ce:0f:36:6a:32:
         5f:1e:05:ab:f3:ce:ce:f8:22:c8:46:90:ec:64:3c:c7:ef:71:
         5a:81:32:c1:30:96:71:1b:e6:38:bb:96:70:12:71:92:a7:28:
         53:2d:cd:04:a8:9d:dd:62:eb:29:7d:93:9c:b6:8b:dc:5a:f7:
         6e:ac:7b:30
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Oct 20 18:05:04 2025 by rpki-client