Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/5c3979d3-e1c0-4d6d-94a7-34bc1e7b3b0e.roa
File:                     5c3979d3-e1c0-4d6d-94a7-34bc1e7b3b0e.roa (raw, json)
Hash identifier:          QWeNJj9NqOdDQGRm42x0SSi0h6QXJ9b4ovyIOuqeHAE=
Subject key identifier:   F9:85:9A:2C:F9:09:D9:63:3B:A2:4B:72:83:CD:66:D4:EE:66:2C:BA
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       50F726964B8FF21E3B251BB944F75BB1EE6E87B7
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/5c3979d3-e1c0-4d6d-94a7-34bc1e7b3b0e.roa
Signing time:             Fri 31 Oct 2025 01:30:27 +0000
ROA not before:           Fri 31 Oct 2025 01:30:27 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2605:9cc0:c16::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:f7:26:96:4b:8f:f2:1e:3b:25:1b:b9:44:f7:5b:b1:ee:6e:87:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Oct 31 01:30:27 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=cb55536ebe90b1bef2b24e11f6cc13f59a61ee61baf1315af50cefbf06e1351d, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d1:7c:80:44:e1:d8:7d:2a:b7:d0:3c:bc:ed:
                    03:ff:a0:ef:d1:a7:03:d5:e0:9d:b5:bc:28:21:ad:
                    41:52:01:b9:77:ff:cd:0d:f1:f5:33:b1:d7:0f:cd:
                    fb:02:d7:b5:c1:3e:50:ab:81:40:df:e4:54:bd:53:
                    ff:6a:d0:fd:de:81:42:93:00:18:f8:63:89:6c:2a:
                    72:26:db:04:92:ab:40:87:f5:1a:7a:21:91:6b:f3:
                    8d:e2:d0:79:05:e1:4f:29:8f:5c:58:7b:c1:da:36:
                    28:af:df:7b:bd:d5:ce:da:be:27:e6:98:05:a5:15:
                    da:13:8c:dd:46:48:04:f7:b3:7d:0e:b4:86:e5:83:
                    d7:e3:5e:fc:f7:67:d0:12:35:90:c0:a2:d5:50:89:
                    cb:49:77:9e:71:6c:a4:7f:99:8a:ab:20:3e:87:7f:
                    8d:b0:d9:f9:7a:88:3e:6a:e8:62:76:20:10:0e:5e:
                    41:50:86:f5:76:bb:33:58:6e:34:ee:7d:71:32:13:
                    a1:e7:d7:e9:52:6e:ab:e1:56:10:c5:c1:f0:0c:ca:
                    6d:38:5f:10:63:bb:db:b7:df:a0:de:23:d0:b4:25:
                    fa:bf:5c:96:f8:c6:75:f9:73:fa:c9:1e:ad:4e:87:
                    06:38:84:30:fc:f6:56:f2:0c:6c:cf:52:e3:26:02:
                    42:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:85:9A:2C:F9:09:D9:63:3B:A2:4B:72:83:CD:66:D4:EE:66:2C:BA
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/5c3979d3-e1c0-4d6d-94a7-34bc1e7b3b0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:c16::/48

    Signature Algorithm: sha256WithRSAEncryption
         5e:1d:48:49:34:c4:d2:7e:a6:d2:3d:3e:57:18:5d:11:64:44:
         db:86:e9:18:03:01:91:8b:cb:b4:28:1f:05:3a:7f:fa:bd:7f:
         c5:df:ee:bb:92:ca:e4:75:25:92:04:45:66:34:ed:f2:7a:be:
         f4:03:a5:a5:ca:c7:a7:91:19:d7:69:32:71:af:b8:09:86:ed:
         d3:02:a7:1d:58:cf:a4:84:19:3d:4a:59:bf:03:8b:1e:33:97:
         61:c1:79:bb:e1:d3:9d:bd:09:a0:d2:c9:e2:75:38:67:6e:b8:
         b7:dc:5b:b1:b3:c4:a8:43:d5:13:4f:7d:7c:13:9e:78:ca:a2:
         2c:64:86:d5:37:40:ea:e9:04:d0:9c:44:27:01:8a:48:ba:f6:
         7a:0d:28:d8:2d:a5:f6:e8:71:de:fe:92:8c:70:ce:d1:81:5b:
         02:90:a9:2a:7e:6c:49:b1:47:38:3f:aa:23:9e:00:9f:b1:95:
         75:ed:e3:ef:63:9b:8f:29:80:95:1c:2d:48:38:df:ad:a1:da:
         ee:47:85:2a:1e:06:e3:43:73:0d:ac:57:5c:58:f5:bb:8b:2f:
         d8:c1:4e:ff:ab:8f:27:36:f8:ae:d4:87:dc:87:35:bf:b5:ca:
         98:c0:51:9a:12:59:44:da:5c:e4:25:44:56:82:5b:b6:56:bc:
         6d:47:d1:ed
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Nov 3 11:18:42 2025 by rpki-client