Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/9318efc3-4d3a-413f-86c6-169a71d2eccb.roa
File:                     9318efc3-4d3a-413f-86c6-169a71d2eccb.roa (raw, json)
Hash identifier:          iCdCHITOP+FLqCj4XWlljLmKDF5shjdmmZzpnTgayxw=
Subject key identifier:   F7:54:B5:F2:96:F8:DB:5E:5C:FE:37:E8:1F:6E:7F:3D:69:FE:94:8D
Certificate issuer:       /CN=0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d
Certificate serial:       77B70A3AD0E44A1C2BB499AA8D790728D0285C6B
Authority key identifier: 7D:84:47:C4:97:8A:0B:4C:73:9B:EB:F6:92:E2:4C:75:DD:3F:BC:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/9318efc3-4d3a-413f-86c6-169a71d2eccb.roa
Signing time:             Wed 20 Aug 2025 00:20:18 +0000
ROA not before:           Wed 20 Aug 2025 00:20:18 +0000
ROA not after:            Wed 24 Sep 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2605:b140::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/b4e4fec5-3510-4017-90ef-8391412ecd6c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/b4e4fec5-3510-4017-90ef-8391412ecd6c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:b7:0a:3a:d0:e4:4a:1c:2b:b4:99:aa:8d:79:07:28:d0:28:5c:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d
        Validity
            Not Before: Aug 20 00:20:18 2025 GMT
            Not After : Sep 24 23:59:59 2025 GMT
        Subject: serialNumber=01a6e398f6cc0574beac15ffe059466b14db6c1bdcb4937078b681d1e79c39fb, CN=b0dbbb6a-5472-4b68-ae4d-401518603039
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:16:f2:03:78:77:0a:0d:5d:40:c2:78:f8:7e:
                    56:4b:93:ac:cd:b4:5b:86:c8:d3:03:80:bc:8c:c7:
                    09:45:99:b3:44:6f:48:15:59:c0:b3:a4:17:75:c8:
                    e2:a1:7a:00:4e:97:b1:b2:0b:7e:28:9b:10:d4:a6:
                    3a:1f:f3:d2:36:13:c8:b3:51:9e:ae:03:52:08:e2:
                    d1:9d:70:81:8d:58:52:4f:02:21:3b:ba:7d:6c:3d:
                    15:62:26:08:fa:7d:94:2c:e8:63:e7:25:3e:4f:1a:
                    7b:39:93:75:97:bc:54:7c:ed:40:ca:72:07:dd:47:
                    6a:f3:84:27:a6:20:99:2e:a6:2f:d9:bd:53:a0:dd:
                    a3:71:7b:81:e3:c5:1e:6b:64:28:c4:24:e3:68:e2:
                    94:b7:db:c1:90:f8:b1:18:a2:91:06:73:a0:dd:d9:
                    88:e1:8e:3e:a0:74:42:11:55:d6:c6:8a:39:d7:0f:
                    11:61:09:0d:4c:d2:53:05:9d:88:b9:3d:78:f2:b5:
                    a8:a2:23:0f:13:6c:ce:d7:68:b0:be:c8:e3:d1:6e:
                    37:61:3e:9d:70:a7:96:8f:7d:19:78:e9:42:dc:59:
                    b9:62:40:0f:f3:9c:81:d3:34:7f:bf:c2:c6:b3:ba:
                    d2:6d:d2:c0:bf:35:f0:60:67:8f:da:e5:68:d1:cb:
                    da:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:54:B5:F2:96:F8:DB:5E:5C:FE:37:E8:1F:6E:7F:3D:69:FE:94:8D
            X509v3 Authority Key Identifier:
                keyid:7D:84:47:C4:97:8A:0B:4C:73:9B:EB:F6:92:E2:4C:75:DD:3F:BC:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/9318efc3-4d3a-413f-86c6-169a71d2eccb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:b140::/32

    Signature Algorithm: sha256WithRSAEncryption
         29:ed:44:f3:df:46:68:98:b2:14:7a:de:36:57:44:2c:8f:84:
         f3:6f:9a:a6:ed:e8:23:c1:0b:17:68:c9:db:47:7d:f4:cf:3a:
         36:0a:b8:28:d1:fa:b8:19:40:77:98:24:8b:2f:cd:b4:f6:47:
         69:f3:dd:a8:5d:60:ef:26:ff:d7:f7:bd:44:d1:c0:55:e5:36:
         b5:c5:5a:91:5f:8e:50:48:22:00:53:e3:7c:92:b1:73:56:ca:
         d1:15:f2:38:f8:41:85:d9:1b:7b:f8:a0:47:99:4c:bf:a6:01:
         b0:20:8a:96:a0:ea:a5:df:a6:62:84:b3:72:44:39:ea:08:ce:
         61:bc:f7:4c:a4:76:00:07:5e:c4:4f:3c:a4:23:7c:85:53:a6:
         cb:a8:d2:3c:ef:b2:8c:4b:91:05:19:82:66:f4:b4:10:08:9d:
         bc:36:71:66:08:0f:ae:49:33:39:96:c4:59:71:cd:67:ad:b9:
         66:7d:78:8b:98:19:ec:60:a7:5b:63:42:e2:6b:f7:e7:b4:1d:
         dc:f4:dd:4e:ae:2c:a9:69:3f:e4:84:17:5d:10:95:dc:0c:54:
         18:26:34:4e:bb:7b:97:b7:ff:1a:f5:d8:8c:8c:3f:74:39:73:
         42:4a:45:55:6f:95:cc:68:2b:e7:91:22:16:96:9a:14:c2:8b:
         ba:5a:05:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 06:51:10 2025 by rpki-client