Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/f7068e3e-0b73-43e3-83c2-9df613575814.roa
File:                     f7068e3e-0b73-43e3-83c2-9df613575814.roa (raw, json)
Hash identifier:          of2KoIBzqUJIUrkDYk/ipjOjsXpk+TawJfnV3kMrzXY=
Subject key identifier:   C0:7D:E8:3E:17:7B:E6:4A:D1:ED:B4:5A:BC:07:9F:03:E7:C8:F4:4B
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       74751B6D47F46179A676323290B883DCBDAF7008
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/f7068e3e-0b73-43e3-83c2-9df613575814.roa
Signing time:             Mon 16 Jun 2025 19:01:31 +0000
ROA not before:           Mon 16 Jun 2025 19:01:31 +0000
ROA not after:            Mon 21 Jul 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2605:9cc0:547::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:75:1b:6d:47:f4:61:79:a6:76:32:32:90:b8:83:dc:bd:af:70:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Jun 16 19:01:31 2025 GMT
            Not After : Jul 21 23:59:59 2025 GMT
        Subject: serialNumber=0150993ce9bf8fcabb4975939e4f4925e105e0de715fc17430921afdfadaf5e0, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ed:ce:1a:96:1a:39:2c:8e:5b:b3:6b:26:e5:
                    df:9e:90:2c:11:b0:0a:67:23:01:eb:e9:4b:3e:51:
                    29:d9:ff:d0:99:74:91:2f:a5:94:a8:13:78:72:ca:
                    29:6b:1f:ce:32:da:fd:f6:f0:69:a0:35:9c:98:e9:
                    97:51:61:5b:80:da:68:c9:1e:d9:c5:c4:51:24:0f:
                    a0:d1:33:9c:0a:0a:d2:b8:48:49:03:e2:fc:64:93:
                    10:00:44:81:7d:ac:96:96:de:a1:6e:0e:b4:99:be:
                    14:ea:88:82:8f:a5:98:78:cf:8a:71:49:c3:40:a2:
                    bc:f8:31:57:d6:03:b6:4f:5a:16:17:f2:55:79:07:
                    1d:d1:56:36:80:a3:c0:54:3d:18:2d:21:92:e2:3a:
                    9c:f7:3d:5a:07:d2:d5:59:7f:bd:2a:b4:07:b9:99:
                    cc:bb:3e:0f:07:e7:d1:3f:b8:a5:a3:20:02:d0:db:
                    0d:61:9c:f1:3a:4e:48:3a:1f:a1:58:aa:81:f3:4a:
                    57:7c:d6:44:43:5a:f2:a5:85:14:b0:5c:c4:4e:7a:
                    50:54:35:25:b4:aa:d7:96:09:a4:70:58:36:ce:8d:
                    6f:24:93:4b:62:8d:ef:7b:90:a4:7b:c2:d2:5c:cf:
                    5e:e5:ba:4c:51:b2:4a:6d:9a:e9:12:64:d2:79:b8:
                    ff:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:7D:E8:3E:17:7B:E6:4A:D1:ED:B4:5A:BC:07:9F:03:E7:C8:F4:4B
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/f7068e3e-0b73-43e3-83c2-9df613575814.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:547::/48

    Signature Algorithm: sha256WithRSAEncryption
         29:85:56:a7:25:4d:8f:e5:f2:b5:d0:4a:91:36:2d:08:4b:d9:
         d0:00:f4:bd:eb:f6:d0:ae:f6:9f:88:4c:e7:43:14:5c:51:a7:
         13:13:2d:fb:d3:90:68:35:69:0e:c5:d8:92:7a:d7:66:30:7a:
         e3:e2:bf:37:a3:33:3b:97:ac:91:f6:1b:fd:a1:39:5a:b3:a4:
         62:0b:ce:de:99:04:07:24:b1:9a:e1:66:4f:f9:02:d2:57:f9:
         0f:5a:66:a4:aa:0a:7e:67:95:b2:d5:94:07:ef:06:5e:7e:7f:
         9f:25:51:72:6f:e3:f7:68:3a:f2:f7:a2:87:1b:28:6b:94:60:
         0d:38:71:d4:30:40:dd:a5:74:40:38:34:59:38:4f:13:71:fe:
         54:e6:b6:5f:42:de:fe:43:a2:a7:35:7a:23:60:5f:85:81:9c:
         73:88:5f:a4:80:bb:4b:86:7e:eb:81:ac:7c:dc:b1:ee:1f:da:
         95:35:1c:50:73:37:4c:7a:53:59:4e:58:3f:1c:18:73:73:8f:
         af:de:6f:3d:ac:0f:b6:d4:9d:5a:a8:c3:80:d2:2e:4c:90:b4:
         27:4f:90:1b:5a:c9:a0:75:7a:8b:6d:34:5c:8d:56:6f:b9:4b:
         86:cd:77:f0:9d:49:6d:22:33:df:1a:e3:41:d7:0b:b4:a3:19:
         50:f9:74:9a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Jun 29 01:33:37 2025 by rpki-client