Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/793099d2-d8bb-4f78-8e97-4cd87968a269.roa
File:                     793099d2-d8bb-4f78-8e97-4cd87968a269.roa (raw, json)
Hash identifier:          6o51isa4zNeNWfxWLzUfVbFsLcWc62xvxinA8KiUGbk=
Subject key identifier:   5D:6A:05:3C:4E:CC:B4:09:D4:79:27:58:AF:A8:74:14:C2:70:E6:62
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       3D329F59EC418424300F0E0FBAEC2FA743EE3D12
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/793099d2-d8bb-4f78-8e97-4cd87968a269.roa
Signing time:             Fri 15 Aug 2025 15:10:43 +0000
ROA not before:           Fri 15 Aug 2025 15:10:43 +0000
ROA not after:            Fri 19 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2605:9cc0:c06::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 21 Aug 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:32:9f:59:ec:41:84:24:30:0f:0e:0f:ba:ec:2f:a7:43:ee:3d:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Aug 15 15:10:43 2025 GMT
            Not After : Sep 19 23:59:59 2025 GMT
        Subject: serialNumber=7da5cb805fa70227cc0487846bbb9545ccd7df045081cc1b555741e8c6ccf772, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:35:33:ed:a9:3b:49:0c:aa:82:01:65:51:f2:
                    0d:1a:57:04:91:3e:53:11:0e:5e:9c:76:77:fc:3d:
                    57:04:4f:d1:e0:ce:d9:96:65:eb:83:9a:66:d5:e3:
                    d4:f1:c6:ce:2f:7d:e3:29:00:2c:b9:f7:9b:ab:99:
                    4d:c1:9a:34:bf:2f:f4:8c:9b:3b:2d:3c:17:88:b4:
                    3f:47:e4:8b:1c:2e:22:e9:e9:45:b3:b8:97:cd:46:
                    b8:68:dc:2e:77:06:6b:8e:12:10:d8:a3:d8:f3:0e:
                    f9:91:85:eb:b8:d2:c5:5e:0d:31:a9:99:e6:ce:fc:
                    39:32:ad:78:0c:78:75:c1:10:99:8c:ee:03:00:31:
                    e8:73:46:4c:9e:cd:11:89:3c:a7:3d:13:40:db:94:
                    a6:a6:c6:a7:2d:29:d9:19:9f:38:17:af:c8:4c:51:
                    2c:99:13:8e:d4:2f:ea:a8:2a:9e:f6:12:bd:be:a9:
                    b4:f0:f9:68:f2:a7:e1:87:1c:01:49:23:11:42:dd:
                    82:9d:22:47:1d:77:64:b4:ad:d4:75:2b:09:c6:4c:
                    6d:b2:e2:b9:30:28:54:0b:ff:58:32:6b:0f:87:32:
                    46:d4:40:c6:16:0b:2b:c4:88:a7:58:b7:85:41:4d:
                    8f:44:3e:9d:93:59:e6:17:05:9b:98:09:7d:2a:4f:
                    e4:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:6A:05:3C:4E:CC:B4:09:D4:79:27:58:AF:A8:74:14:C2:70:E6:62
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/793099d2-d8bb-4f78-8e97-4cd87968a269.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:c06::/48

    Signature Algorithm: sha256WithRSAEncryption
         0e:09:8f:1c:16:8d:46:e4:e4:0a:67:1a:34:b6:1c:21:6e:cf:
         30:9c:a9:ea:f4:26:01:8b:45:bb:4e:7a:e1:e8:65:4c:13:5b:
         8a:0b:a8:b1:87:ce:71:ae:fe:a7:ce:96:0d:35:2d:e7:85:4c:
         31:96:89:33:ce:57:a0:27:5b:fb:d2:30:15:a7:f6:df:e1:07:
         81:95:57:99:92:d8:7e:3d:ef:2c:3a:32:db:3c:ce:75:d2:87:
         f8:c9:94:49:e6:fc:ac:71:b4:08:7b:a3:db:a5:ff:13:ef:75:
         ed:b8:4a:de:2f:05:27:7b:f4:05:92:9b:29:b6:a2:7f:20:1c:
         e5:57:71:08:b9:c1:fc:8a:9d:6c:a4:cd:57:dc:90:e1:9b:cf:
         14:c9:a2:5b:40:64:fe:5c:3d:e7:6e:cf:8b:78:f3:70:d0:4b:
         11:aa:e8:f9:6f:6e:36:83:94:b6:fe:70:a9:42:94:c4:9c:4a:
         b2:21:65:00:34:92:3b:c0:30:fb:d7:24:2c:d6:12:47:37:51:
         f0:98:d1:eb:79:09:da:fd:35:df:4a:41:f6:c5:ff:d6:d2:ea:
         70:21:32:83:81:43:c4:17:62:be:51:29:d1:59:5b:8e:a0:f4:
         26:01:fc:c0:cf:4b:18:2d:9c:d4:49:30:68:06:6a:0a:50:94:
         f6:aa:47:05
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Aug 20 10:46:53 2025 by rpki-client