Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/172fda76-2a7e-45b7-aaf8-d11d16161720.roa
File:                     172fda76-2a7e-45b7-aaf8-d11d16161720.roa (raw, json)
Hash identifier:          kuxlDOvd8afiNKgzE9l92NZxsnnLOAvTUvC67NpNULQ=
Subject key identifier:   D6:DD:A9:5D:8B:1E:CE:30:8F:F5:B7:09:BD:67:75:4D:1C:5F:D5:59
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       14ACFD2D89802D75AEEB527ECAE31DEEB4E160E7
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/172fda76-2a7e-45b7-aaf8-d11d16161720.roa
Signing time:             Fri 26 Sep 2025 17:51:33 +0000
ROA not before:           Fri 26 Sep 2025 17:51:33 +0000
ROA not after:            Fri 31 Oct 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2605:9cc0:30e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:ac:fd:2d:89:80:2d:75:ae:eb:52:7e:ca:e3:1d:ee:b4:e1:60:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Sep 26 17:51:33 2025 GMT
            Not After : Oct 31 23:59:59 2025 GMT
        Subject: serialNumber=e4b63a4550d3dae29d80322cd68abb9619c0f0dabf9831a481e807f2662155c9, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:66:c6:d1:e4:51:93:1e:ed:f2:40:18:ec:d5:
                    41:2d:29:c4:3c:b8:be:3b:d8:f5:97:8d:fa:aa:cb:
                    78:84:47:c4:c5:a3:22:9a:5b:89:32:5e:af:e2:c9:
                    d1:77:e4:de:4f:de:eb:86:3f:1b:1c:2e:98:49:c8:
                    83:1e:8b:13:44:53:9e:6a:c0:b4:b9:cb:8c:a1:c7:
                    05:58:64:fb:25:10:06:0f:9d:cc:a2:6d:4a:25:38:
                    4f:db:07:25:52:7f:52:56:99:34:54:34:88:23:db:
                    67:c5:43:ad:1c:7f:5a:4c:69:33:fb:31:62:ce:58:
                    c1:ae:5f:c4:dd:44:17:97:d6:ac:0a:fa:1d:3f:d4:
                    fa:8e:3f:f0:16:8a:17:74:e7:51:a4:dc:63:d4:a9:
                    70:ff:76:2f:2b:dd:6c:70:ec:42:96:1b:7f:bc:0f:
                    03:c1:03:7d:3f:e1:0f:55:6e:87:1f:59:f4:7f:02:
                    0b:95:2b:45:2d:51:27:be:37:40:ff:16:13:08:38:
                    03:a9:38:da:29:48:c5:ed:2b:99:d1:9c:06:ef:43:
                    7c:d1:8f:59:e2:df:dd:27:b1:ac:02:e4:e5:53:c4:
                    41:fc:9f:55:4d:6a:48:ab:36:11:7e:82:22:55:93:
                    da:1f:bf:36:f2:cd:20:8b:46:50:5c:57:b4:c4:1d:
                    1d:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:DD:A9:5D:8B:1E:CE:30:8F:F5:B7:09:BD:67:75:4D:1C:5F:D5:59
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/172fda76-2a7e-45b7-aaf8-d11d16161720.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:30e::/48

    Signature Algorithm: sha256WithRSAEncryption
         2e:0b:44:dc:33:a3:47:8a:8f:a6:89:d3:4d:72:bc:eb:8c:10:
         c8:86:7d:fb:69:14:c8:f2:06:8f:d0:7d:5a:55:98:0d:e7:1c:
         fe:43:91:3c:31:1a:0f:7f:90:ad:6f:21:4f:30:07:b3:93:ec:
         fb:3c:9f:8f:3a:f6:b9:d9:16:cb:5f:f8:dd:f9:53:0c:14:de:
         e8:f1:0a:70:c6:35:ff:03:97:49:36:3e:c3:5f:75:2b:d0:e0:
         4d:4b:af:5c:07:c1:47:c5:a8:1c:cc:65:90:a9:36:b1:d3:45:
         73:da:02:ce:8c:da:64:92:68:d0:ae:b9:db:2d:47:55:d8:8e:
         fe:4e:27:0d:e2:b5:a7:20:8d:b0:44:2e:da:aa:87:c7:0b:55:
         c1:f1:90:1d:23:a1:d5:7c:64:88:7b:64:19:ac:a3:1e:3b:fe:
         80:07:4c:e5:42:94:80:ca:34:84:4f:4f:86:a0:8d:0d:4b:6d:
         a1:e7:85:54:32:56:94:7c:89:ca:4a:c5:3d:d1:cf:da:8a:23:
         2a:52:9a:d2:ae:e8:5c:09:87:ed:d7:0a:23:5d:95:a4:96:c8:
         24:36:2b:df:50:31:93:a7:fc:1c:1f:03:5f:30:33:d9:3f:56:
         7f:84:26:d7:54:0a:10:d7:cb:60:42:b1:4d:76:3a:eb:24:9f:
         89:d4:36:81
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Oct 8 23:10:28 2025 by rpki-client