Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/280415d1-32a5-49e1-bc3f-9ffe53bd726f.roa
File:                     280415d1-32a5-49e1-bc3f-9ffe53bd726f.roa (raw, json)
Hash identifier:          xutBPi3qJZwuz5J3XSinFldhekI2VW9ZgdNQ2Eg8OEA=
Subject key identifier:   5E:19:8F:7B:86:7F:2F:1B:FA:6B:64:84:7B:C5:35:E1:23:2F:59:E0
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       424E374329190C0EA7F050AF0528CF2F364B4897
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/280415d1-32a5-49e1-bc3f-9ffe53bd726f.roa
Signing time:             Sat 31 May 2025 00:41:05 +0000
ROA not before:           Sat 31 May 2025 00:41:05 +0000
ROA not after:            Sat 05 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2605:9cc0:f001::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:4e:37:43:29:19:0c:0e:a7:f0:50:af:05:28:cf:2f:36:4b:48:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: May 31 00:41:05 2025 GMT
            Not After : Jul  5 23:59:59 2025 GMT
        Subject: serialNumber=66df52a2e5b9b4177fa6db96c5e31a4e1920bc04918fda03f0485028e0744899, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b1:d6:09:94:86:0f:52:f7:24:ac:ca:2f:8f:
                    68:71:64:29:0b:82:d1:cf:71:4c:8b:70:43:3d:ce:
                    fc:ac:24:c8:ee:5e:08:22:ca:9a:eb:b3:0b:2b:85:
                    f8:19:c7:2f:d8:31:31:f9:44:dc:9b:5c:1a:9b:81:
                    cf:70:bf:a0:e7:e4:15:fb:29:f1:ec:dd:e9:9c:ca:
                    38:24:89:f6:4b:7d:37:98:c1:aa:eb:16:16:f2:e2:
                    ef:73:f3:d3:db:f4:e4:4f:14:d2:8a:1e:6b:d5:56:
                    93:c1:6f:13:60:b3:90:9b:d5:d6:cd:af:cb:8e:ed:
                    65:60:af:fc:b4:0a:27:93:29:60:13:e2:20:0e:c0:
                    da:1b:93:45:fc:ee:37:0f:c5:b0:95:10:da:f6:48:
                    67:6e:e4:f1:57:d2:84:eb:fc:da:54:15:fd:e9:61:
                    ed:ce:b1:a0:65:72:87:10:28:7e:17:3d:8b:95:4a:
                    66:02:e2:db:10:68:d2:5b:d2:da:d5:1e:ff:0f:59:
                    4d:a2:9c:78:9e:67:d5:6d:b7:15:4d:0e:3f:9b:6e:
                    40:ff:4e:11:ea:52:4e:50:11:9d:11:0b:17:8e:89:
                    76:1b:08:86:cf:1d:c2:75:4e:ca:c8:b8:7b:77:29:
                    97:a5:f4:cd:b5:e4:b7:45:c4:e1:65:ea:b1:af:f4:
                    20:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:19:8F:7B:86:7F:2F:1B:FA:6B:64:84:7B:C5:35:E1:23:2F:59:E0
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/280415d1-32a5-49e1-bc3f-9ffe53bd726f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:f001::/48

    Signature Algorithm: sha256WithRSAEncryption
         07:27:aa:1c:f1:e5:f2:36:e1:1b:7d:c7:5d:f0:85:87:ea:a8:
         6b:7f:33:73:70:43:aa:ab:75:0f:e4:62:10:d8:4e:5e:7a:43:
         d7:ee:0f:0e:70:93:7d:24:8b:2d:b2:55:f3:11:cc:bb:09:8c:
         e8:0d:eb:be:90:f1:cc:89:36:5d:28:32:a9:55:7f:a1:99:35:
         e3:cc:37:e2:ee:d5:c3:ba:99:5c:2d:21:c8:02:c0:ec:c0:c3:
         af:c6:4a:83:34:8c:5d:c5:62:b2:4a:86:64:43:0d:67:eb:c2:
         13:2d:f2:3e:24:32:79:f4:f2:4a:03:34:fe:31:c2:f9:12:3f:
         d4:86:24:84:52:56:ac:0c:8a:74:5a:98:e6:95:bf:36:72:eb:
         fd:f4:7d:92:7b:51:99:fd:e6:96:8f:87:4a:5a:71:aa:59:ca:
         2d:b7:4b:56:1e:d3:aa:49:53:c6:45:1f:d1:1e:e0:be:35:99:
         88:df:1b:e6:37:97:92:dc:76:3a:39:33:2a:22:87:6e:39:65:
         87:cb:f8:12:10:7c:8f:0f:a1:e8:de:df:5d:68:1d:8f:44:31:
         d2:0d:a3:39:91:88:cf:47:37:cc:7b:ce:80:0e:40:6d:e6:e7:
         52:7f:8f:05:a5:c2:41:8d:d1:09:55:83:bd:64:82:bb:72:3d:
         13:fe:07:1b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 14 05:56:04 2025 by rpki-client