Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/834cec14-31c8-42fb-ab06-5c07ee79d6d1.roa
File:                     834cec14-31c8-42fb-ab06-5c07ee79d6d1.roa (raw, json)
Hash identifier:          s0piqulYw06UmLuOUB6v36hq7aOCaKfZ9qL7Kbw7Mis=
Subject key identifier:   39:31:0D:3A:90:AC:C8:19:E1:3A:EF:56:12:71:41:F3:8F:6F:F0:DF
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       5063E000A7BEED9514E0D1E8894096E69F726A92
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/834cec14-31c8-42fb-ab06-5c07ee79d6d1.roa
Signing time:             Sat 31 May 2025 00:20:41 +0000
ROA not before:           Sat 31 May 2025 00:20:41 +0000
ROA not after:            Sat 05 Jul 2025 23:59:59 +0000
asID:                     21664
IP address blocks:        2605:9cc0:647::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:63:e0:00:a7:be:ed:95:14:e0:d1:e8:89:40:96:e6:9f:72:6a:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: May 31 00:20:41 2025 GMT
            Not After : Jul  5 23:59:59 2025 GMT
        Subject: serialNumber=a4f01bbdf610362d0b5aa6e1ff126d64d26e8e660239574393861f0bf0a3690d, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d6:52:12:0c:4a:6b:29:04:1a:dd:1f:e0:b5:
                    67:f8:64:f9:0d:c4:53:54:2e:a1:51:a3:98:f8:4c:
                    a1:89:13:fa:36:01:fd:76:73:db:26:da:8c:97:e3:
                    96:e2:32:8a:db:c0:67:e8:88:04:56:be:c8:83:6d:
                    98:3a:50:18:14:79:1d:9e:57:e4:bb:89:2d:d0:d3:
                    1e:5e:81:d0:8f:93:ee:b0:4f:42:48:a8:8d:89:15:
                    7c:89:76:4f:62:4e:6c:b8:87:3d:45:3e:82:25:64:
                    36:ab:bf:f5:7f:f8:27:88:0a:88:16:31:83:48:38:
                    fe:d0:4c:c0:98:46:13:52:6f:c7:e3:2d:1b:41:b5:
                    7a:42:d1:79:31:8f:e0:dd:07:6c:b4:5c:15:4e:8b:
                    09:e4:17:4a:98:41:7e:fa:99:c5:34:84:32:a6:1f:
                    d1:ad:e2:96:2e:25:55:14:31:28:08:da:9f:a7:19:
                    c6:a9:5e:9a:e0:b9:d6:4c:44:3b:64:50:cd:ae:8e:
                    10:77:07:cc:89:c0:30:95:5a:29:e8:64:93:01:93:
                    b5:8e:25:4f:25:ac:97:f2:3f:39:bf:a7:12:a3:af:
                    8e:e4:f6:b2:4a:99:cb:a9:58:af:3a:64:b7:97:bd:
                    f5:c9:54:f0:6c:f5:dc:a5:0c:40:87:61:90:6a:b4:
                    59:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:31:0D:3A:90:AC:C8:19:E1:3A:EF:56:12:71:41:F3:8F:6F:F0:DF
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/834cec14-31c8-42fb-ab06-5c07ee79d6d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:647::/48

    Signature Algorithm: sha256WithRSAEncryption
         55:df:97:cd:be:17:02:b7:f7:99:96:bf:96:4a:e7:2c:2d:89:
         69:74:d2:00:b7:6a:65:78:a5:7b:ca:c3:4a:21:a5:e7:95:52:
         77:5d:7a:1e:4b:f2:f2:dd:60:e2:33:f7:90:be:63:67:83:a8:
         9f:65:9b:a9:39:cf:b5:99:ee:4d:d8:ed:6b:6d:d1:6d:9b:c4:
         b2:68:ba:b0:a8:da:62:87:20:42:78:32:91:ad:bd:e2:af:83:
         ee:e9:f4:61:3f:ec:8e:a5:1a:bd:41:ad:42:ac:bd:8a:ca:48:
         1b:5d:fe:17:9c:95:34:90:be:26:cd:df:76:6b:09:ce:b9:31:
         4f:0d:78:2f:02:22:34:37:4f:74:c5:a2:92:1e:a0:1b:11:95:
         bb:3e:5c:82:74:ff:0d:3a:a7:29:86:fe:9b:22:74:72:4a:b8:
         7d:76:09:89:f9:d3:a9:85:72:d3:e6:7f:44:97:fc:9e:ca:c2:
         15:84:c2:82:b9:16:f0:dd:2c:a2:b6:96:d8:40:ef:73:c1:92:
         db:31:64:0a:c5:a5:a0:3b:70:3a:0e:76:7f:dc:e8:6d:bc:de:
         43:7f:e8:37:bc:b1:d8:dc:9e:43:3c:65:2f:00:af:6a:5b:a5:
         2f:07:6e:8b:5d:44:68:ad:2a:e1:52:a1:2f:53:00:52:e8:07:
         42:ca:f9:7e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:14:06 2025 by rpki-client