Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/d50b4be5-b548-4743-92e1-1e17267f722d.roa
File:                     d50b4be5-b548-4743-92e1-1e17267f722d.roa (raw, json)
Hash identifier:          n/UaRy4Q1d9A4oBAltBAua8/Bgn+xeD5/TACdmtokoo=
Subject key identifier:   34:7B:7A:8A:DE:8D:5F:42:A2:83:5B:9A:38:4F:55:59:02:89:B6:AE
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       2C3B2288C9F814A8DBCE8C1B510D3CCCE2C13C9D
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/d50b4be5-b548-4743-92e1-1e17267f722d.roa
Signing time:             Wed 21 May 2025 00:51:05 +0000
ROA not before:           Wed 21 May 2025 00:51:05 +0000
ROA not after:            Wed 25 Jun 2025 23:59:59 +0000
asID:                     8987
IP address blocks:        2605:9cc0:548::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:3b:22:88:c9:f8:14:a8:db:ce:8c:1b:51:0d:3c:cc:e2:c1:3c:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: May 21 00:51:05 2025 GMT
            Not After : Jun 25 23:59:59 2025 GMT
        Subject: serialNumber=ed841c07810fc9025f4e7d182245a6996cf64cf4f78de5fc4de3fe99d7b3617c, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:48:df:cc:62:48:bd:80:e1:96:1f:4c:c0:8c:
                    21:75:9e:c4:be:20:ae:46:c3:d7:b9:00:b0:a1:71:
                    c7:66:2f:20:0e:dc:f8:b8:77:5e:e9:dd:f2:bc:d0:
                    bf:36:88:ad:9a:3d:19:79:b7:1c:0d:a8:64:64:85:
                    fd:1a:ee:b7:19:8a:a3:f5:24:8f:2a:7d:00:de:6c:
                    01:cc:3b:5e:87:8d:53:40:26:11:d0:e5:9b:f2:3c:
                    64:c8:71:e8:ca:5e:5c:07:05:d5:88:c0:01:d3:a8:
                    68:f6:50:48:90:3e:8e:d5:44:09:0f:b4:33:4c:73:
                    7f:fd:42:d4:4b:75:a6:9c:55:0b:89:71:29:86:56:
                    66:e7:78:df:c4:ba:9a:da:4e:c3:a1:e7:31:34:91:
                    69:c0:90:aa:de:0f:1b:5a:15:e0:2e:8f:6b:ca:90:
                    4f:ad:c6:ce:a2:19:3a:32:59:bd:fd:e2:fd:76:06:
                    a7:82:7f:4a:8e:c7:34:61:a6:bb:9f:f0:1c:92:28:
                    94:93:46:08:63:1d:1a:99:e0:9f:99:63:93:b5:70:
                    7e:58:de:e3:30:e2:8a:40:b3:25:01:fb:db:73:70:
                    8e:9c:18:3c:9c:4e:d5:d9:3c:94:b3:98:05:90:da:
                    bc:ef:ca:bf:a0:29:98:1d:b2:80:8c:b8:31:af:bc:
                    89:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:7B:7A:8A:DE:8D:5F:42:A2:83:5B:9A:38:4F:55:59:02:89:B6:AE
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/d50b4be5-b548-4743-92e1-1e17267f722d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:548::/48

    Signature Algorithm: sha256WithRSAEncryption
         98:f9:3e:26:55:49:fb:1e:25:44:75:fe:32:e2:10:6a:99:6e:
         05:f9:f5:c3:1d:d6:25:5c:8a:d8:4c:7c:cd:b8:ab:4b:6f:81:
         f6:cf:1d:fd:a8:67:f8:1b:1c:f0:08:db:b9:48:a5:3b:7c:94:
         53:76:ca:98:57:2a:3a:45:8b:94:68:c4:01:79:11:4f:d3:d0:
         db:41:da:b1:68:2f:09:f7:50:54:ea:55:c9:0c:42:bf:45:74:
         4b:5b:2d:a9:de:43:9a:59:b6:06:71:b2:db:81:21:c4:14:06:
         c0:d0:24:99:38:4d:08:c4:dd:b4:66:80:47:85:eb:f4:f7:4d:
         cb:ec:6e:96:a4:ca:eb:cb:ab:02:cc:c5:50:42:60:3d:e1:a7:
         b2:75:27:0f:53:4e:50:a6:88:2b:0f:fb:c4:c9:dd:4c:6e:e3:
         f8:73:2c:de:26:16:60:1d:b8:5b:f2:ad:c4:a4:4b:9a:c8:0a:
         81:dc:5b:88:5e:ab:d9:ad:c1:b6:9e:b2:41:4e:df:a6:d6:de:
         13:be:32:c0:4c:ab:58:56:a0:db:38:fa:99:94:9d:04:17:75:
         90:b8:6a:00:3d:c9:a5:7b:0b:7f:b7:16:f9:be:d9:fa:73:bd:
         39:b3:97:cd:e2:39:39:3e:2f:be:e8:d0:c4:ef:b8:e1:d6:5d:
         db:34:3e:66
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Jun 16 01:31:30 2025 by rpki-client