Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/0e59813d-926c-4866-9022-8b9ec2fee201.roa
File:                     0e59813d-926c-4866-9022-8b9ec2fee201.roa (raw, json)
Hash identifier:          /zoqrX+yJCLAnkSQ6jo3kcz2q8cOgv/WkQCNlAdDVbA=
Subject key identifier:   F0:D4:F1:96:3B:96:03:5B:D7:9C:B7:CB:3C:E2:24:76:AD:25:4B:5C
Certificate issuer:       /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial:       5549A603983FB97B396F0DC193D23EFFB04FBC54
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/0e59813d-926c-4866-9022-8b9ec2fee201.roa
Signing time:             Thu 04 Sep 2025 19:38:25 +0000
ROA not before:           Thu 04 Sep 2025 19:38:25 +0000
ROA not after:            Thu 09 Oct 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2631:0:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Sep 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:49:a6:03:98:3f:b9:7b:39:6f:0d:c1:93:d2:3e:ff:b0:4f:bc:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
        Validity
            Not Before: Sep  4 19:38:25 2025 GMT
            Not After : Oct  9 23:59:59 2025 GMT
        Subject: serialNumber=944623264bc2e21554afcb3aa9375dc0fabdfc2eee71cf9a9554b24a875791fb, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:15:45:51:3b:cf:c0:07:f7:7b:59:e4:7a:22:
                    35:37:77:3a:fd:65:f9:4e:64:18:70:0c:c5:36:a8:
                    57:34:2a:51:6e:ca:1f:19:22:9f:9e:6a:b0:23:26:
                    fb:38:91:99:d6:d7:70:68:95:66:53:2f:99:d5:1a:
                    59:2f:f5:62:14:b1:07:07:3a:96:d0:4a:fb:51:82:
                    94:f6:4a:61:de:b1:ef:56:6b:4c:9e:b7:0c:eb:bb:
                    58:38:16:81:03:62:8b:32:44:aa:d0:62:49:07:6a:
                    7d:37:0b:51:18:3c:e4:fa:3c:7d:1b:be:20:93:cb:
                    2c:e3:37:75:02:ba:86:d3:92:a2:4c:f4:47:8e:92:
                    68:28:a5:6b:73:c3:a1:a9:32:fd:9f:45:04:5c:3d:
                    b9:20:3c:4c:71:85:06:16:7e:09:4b:c5:99:33:1e:
                    73:84:7a:a5:a4:ba:33:6f:c6:64:f5:c7:5b:e6:00:
                    c7:a0:0c:76:c5:08:5a:8e:3b:9b:39:22:8f:0b:68:
                    e1:a5:61:32:1f:b0:aa:d7:bc:67:e7:ff:8f:a3:b4:
                    f4:d5:49:16:11:1e:a0:3b:68:69:de:c5:5f:0d:ee:
                    b7:f3:1c:ee:49:22:8b:57:29:61:54:d5:62:48:e7:
                    7b:da:9d:ae:70:6c:13:5f:ad:76:54:4d:b9:1f:cf:
                    93:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:D4:F1:96:3B:96:03:5B:D7:9C:B7:CB:3C:E2:24:76:AD:25:4B:5C
            X509v3 Authority Key Identifier:
                keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/0e59813d-926c-4866-9022-8b9ec2fee201.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2631:0:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         32:9a:ea:43:45:67:c7:1a:6c:a4:91:fe:cd:ee:ba:11:0c:70:
         2f:42:6d:14:6d:77:5d:44:5d:9a:bd:a2:e6:db:3d:81:73:4e:
         33:98:3d:4c:1b:ef:51:0f:60:06:15:27:34:db:b1:8f:3a:b1:
         6c:94:36:e6:33:30:5e:03:ca:f4:dd:ee:46:6b:c5:d4:8e:b8:
         15:83:b5:15:95:b7:80:2e:1d:3c:50:fe:ea:d1:9a:ab:d7:b9:
         44:9e:80:81:85:4c:81:ba:26:cc:e2:40:ba:0c:8f:cd:1e:a3:
         12:aa:78:f0:c5:7f:71:f6:b2:08:cf:9c:10:e1:31:4d:08:36:
         56:1e:33:b4:b6:b9:5e:a7:8b:e0:a2:0a:3b:b8:7a:2f:82:ba:
         ed:ed:d7:91:d1:05:ae:f4:4e:59:b7:a0:2f:98:24:d4:cf:aa:
         ec:fa:fa:1e:99:22:78:f9:63:fe:4e:fb:9a:19:87:e9:96:19:
         32:af:47:74:90:4c:a8:9a:df:82:f7:f8:50:b1:3e:ec:40:7b:
         bb:83:d2:a4:fc:8c:5e:3d:c1:7a:10:d7:9b:6c:9b:fb:df:dd:
         21:5c:fc:fb:d6:e8:01:55:8d:70:f6:65:28:3e:b3:24:29:dc:
         95:5a:99:13:85:04:c0:5f:f2:71:84:f5:bb:57:4d:a3:6c:10:
         5c:d0:3e:98
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Sep 19 08:49:41 2025 by rpki-client