Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/165da5d6-02ac-456a-b4d2-dc89fb03422b.roa
File:                     165da5d6-02ac-456a-b4d2-dc89fb03422b.roa (raw, json)
Hash identifier:          XJGo8GZ7nXXtT/FHWY/fdliIpkyaO/uwqxzRfZ2rsNQ=
Subject key identifier:   98:40:91:2D:EE:90:46:E5:9D:E8:5F:D6:D0:E0:A8:20:AD:AB:A7:6C
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       7106DFEF7B22B2083BFC0396E946294993AA4960
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/165da5d6-02ac-456a-b4d2-dc89fb03422b.roa
Signing time:             Mon 27 Jul 2026 03:00:03 +0000
ROA not before:           Mon 27 Jul 2026 03:00:03 +0000
ROA not after:            Sun 25 Oct 2026 23:59:59 +0000
asID:                     40045
IP address blocks:        2605:9cc0:c12::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:06:df:ef:7b:22:b2:08:3b:fc:03:96:e9:46:29:49:93:aa:49:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Jul 27 03:00:03 2026 GMT
            Not After : Oct 25 23:59:59 2026 GMT
        Subject: serialNumber=6eb7a3e5cc159af92e58469585707f4bc545770a3295b6688c6dfd403e8f6142, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:12:e3:70:42:32:0c:cf:fa:ff:ab:5b:d0:a7:
                    1a:82:8d:3d:6d:8f:1f:e0:fd:67:5a:d7:6e:11:b9:
                    ca:b3:96:f4:ae:1b:98:2d:7c:8b:a4:f9:3f:7d:f1:
                    2f:27:94:b3:42:31:6c:c0:04:95:af:a2:84:76:20:
                    99:f1:c6:ad:b4:ff:b2:6b:6f:c2:60:bf:b5:93:a5:
                    39:33:c4:ae:73:ab:13:e5:2d:81:80:38:7d:0d:78:
                    7a:a0:3d:c2:fb:22:05:ba:06:11:42:6e:24:cd:19:
                    d9:00:7a:8e:3b:a0:75:c3:e7:92:4c:6c:63:84:57:
                    37:bb:e4:1e:f1:51:9d:73:b1:80:72:86:05:66:49:
                    c7:e3:38:4d:95:c8:b8:d4:6e:02:c4:a1:a5:ea:c0:
                    45:30:7b:53:1b:2d:0d:ab:02:ba:12:d1:ac:9e:e1:
                    fc:a7:e8:ee:b9:48:17:17:98:62:0b:ca:68:bb:5d:
                    ee:69:6a:1d:80:0e:00:76:52:9a:f5:75:83:4a:00:
                    8f:e8:c2:00:a3:88:7f:99:37:5b:f2:9f:17:9c:91:
                    54:ee:ce:a0:5d:7e:3f:a4:bb:df:8b:4b:bc:07:13:
                    2f:c9:a1:aa:77:0e:ca:36:f9:1a:02:11:75:c2:99:
                    c8:02:ef:86:63:d6:87:85:8a:e9:41:25:75:ec:a2:
                    53:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:40:91:2D:EE:90:46:E5:9D:E8:5F:D6:D0:E0:A8:20:AD:AB:A7:6C
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/165da5d6-02ac-456a-b4d2-dc89fb03422b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:c12::/48

    Signature Algorithm: sha256WithRSAEncryption
         10:65:15:03:a1:9d:c4:7a:89:cd:cc:de:59:67:ae:57:2f:37:
         4a:d4:cd:c6:18:40:06:a8:3c:3b:56:5a:19:6e:4c:6d:cd:4c:
         d4:b1:a4:41:41:ac:e8:21:be:a0:1e:49:04:85:2c:52:a6:6b:
         e5:da:15:24:e7:9c:84:e9:8e:66:b8:a8:93:70:06:37:77:0b:
         74:de:51:cb:d4:0a:e6:45:80:04:fd:db:44:4d:69:89:ef:79:
         81:1e:33:6d:74:e3:64:42:a7:85:58:d2:4f:98:30:6e:b4:ae:
         9d:8b:54:4d:74:ef:6c:15:d9:9d:38:5b:7d:a4:6a:12:87:21:
         b2:2e:1a:52:d1:b0:34:94:e6:3e:41:24:5c:b8:ca:b2:3e:aa:
         7c:36:48:7d:77:e9:4a:c6:e6:ce:fd:7a:f2:46:3c:85:19:5e:
         97:92:f2:14:40:33:50:48:16:57:c5:4f:6b:b2:6e:4d:01:e1:
         8b:e3:b9:9d:83:82:ff:70:0d:3c:a8:ae:5c:9b:3e:f0:29:18:
         3d:17:57:b3:90:91:1c:ac:fc:d7:d3:3e:94:f1:75:89:40:fc:
         bc:71:e4:75:86:88:e4:77:e1:e0:6c:fd:ff:bd:a7:ab:3c:10:
         bd:bd:26:6a:6b:e3:46:23:d6:38:dd:d8:e2:f4:5a:62:56:cb:
         8c:8a:4f:f2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jul 28 20:28:03 2026 by rpki-client