Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/094c2acc-93b4-4a01-ac79-bee984bf842b.roa
File:                     094c2acc-93b4-4a01-ac79-bee984bf842b.roa (raw, json)
Hash identifier:          C25BPbnLRqwHeAJEmvb6jWUnTzcFiPF1aJL+E9UcbZo=
Subject key identifier:   9D:32:2E:68:57:37:79:44:16:F6:B9:0D:4C:47:B7:E6:DD:B4:F4:D1
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       370C96127D95156E9824F41FCDADAF8A18469B55
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/094c2acc-93b4-4a01-ac79-bee984bf842b.roa
Signing time:             Mon 21 Jul 2025 16:31:11 +0000
ROA not before:           Mon 21 Jul 2025 16:31:11 +0000
ROA not after:            Mon 25 Aug 2025 23:59:59 +0000
asID:                     21664
IP address blocks:        2605:9cc0:c1b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:0c:96:12:7d:95:15:6e:98:24:f4:1f:cd:ad:af:8a:18:46:9b:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Jul 21 16:31:11 2025 GMT
            Not After : Aug 25 23:59:59 2025 GMT
        Subject: serialNumber=e1e23bf2a8343d777f00a5b18a22d806c94b67d2f6e5b9969d108df7bdf99b6b, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:0e:fb:69:82:a9:df:f1:3f:c0:a0:37:75:12:
                    60:97:dd:6e:0c:7c:b3:3a:48:53:41:cb:df:76:87:
                    da:7b:3b:23:76:31:b7:9b:c1:bd:26:11:25:09:9e:
                    45:c9:54:47:da:3f:13:a1:32:15:cb:1e:d8:0c:d5:
                    20:c5:89:9c:ec:ce:60:c2:b4:8d:c0:23:e9:1a:ca:
                    a4:36:a1:a4:78:9d:45:72:a3:66:1d:12:bf:77:d1:
                    d2:03:4d:fd:ca:09:d4:81:5c:8c:d5:66:37:a7:ae:
                    9f:48:a0:0e:d5:36:ff:5c:b6:b0:c9:10:4f:57:4a:
                    ad:15:e1:a8:08:6d:8a:cf:d0:b4:13:5a:d4:e0:6a:
                    f3:c7:3e:9a:31:e3:be:38:f7:6b:e0:ac:13:de:26:
                    79:3d:d2:a0:e9:f2:26:71:40:17:6a:77:32:e8:44:
                    b6:c6:2a:90:6d:46:d8:f5:60:47:96:08:e1:d1:5d:
                    f2:6f:e6:2f:77:49:f0:a5:f1:1f:ea:ca:92:92:09:
                    65:71:46:3e:cd:f7:e3:fc:03:6c:47:ae:51:c1:f3:
                    96:1f:67:cc:ba:55:47:d6:83:8e:61:f9:e3:6f:84:
                    94:f3:42:06:fe:ec:05:b1:27:b6:48:0e:0b:a9:dd:
                    2e:d7:00:59:63:84:4b:bc:a0:b3:c3:96:32:63:04:
                    61:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:32:2E:68:57:37:79:44:16:F6:B9:0D:4C:47:B7:E6:DD:B4:F4:D1
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/094c2acc-93b4-4a01-ac79-bee984bf842b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:c1b::/48

    Signature Algorithm: sha256WithRSAEncryption
         44:33:95:0a:ce:a4:6a:97:f6:9a:76:33:55:cb:5d:7b:30:8f:
         bb:21:32:c5:cc:6b:4c:ec:6a:30:6f:c0:04:62:96:c4:34:ac:
         b5:9b:42:30:67:20:9f:b5:e6:35:f2:d3:14:c2:75:32:27:14:
         c2:39:b2:66:a7:29:75:98:63:d0:b6:28:b2:e5:0c:aa:a4:ae:
         86:80:e3:ee:49:72:c7:19:0f:01:ed:c9:f4:23:68:ba:2d:6c:
         e9:0b:2a:e2:e6:d5:ba:ec:79:5d:0f:e0:1b:8e:73:ba:60:a1:
         18:eb:63:54:f3:ea:1a:d7:f6:97:e4:08:e3:dc:ad:82:f7:35:
         93:54:ec:3a:0d:a0:95:81:0c:25:28:ee:13:61:9a:c6:fe:64:
         d2:3f:b1:b9:2f:87:3b:7a:ad:8b:47:fb:1a:52:3f:7f:2e:b4:
         49:3a:e7:bf:d7:ad:64:0f:6f:c8:e0:ac:2f:1d:8a:53:57:10:
         61:b3:97:42:51:fa:c8:3c:ee:f5:1c:cf:7a:1c:ab:fd:42:4e:
         e6:d4:fc:3f:cf:29:0a:a1:30:b6:3f:23:66:fd:17:48:6b:b7:
         0a:f6:ef:2c:94:b4:c4:ae:d5:19:9f:94:04:bc:b2:fb:81:f8:
         36:62:be:c2:5c:8f:01:43:92:c7:10:f3:15:f7:c7:3a:d1:f8:
         96:26:f8:63
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jul 24 04:53:38 2025 by rpki-client