Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/4c8e1a8b-ac2f-4ef3-bb84-e54f47be56a7.roa
File:                     4c8e1a8b-ac2f-4ef3-bb84-e54f47be56a7.roa (raw, json)
Hash identifier:          6qJ7m0IZPnMl/Q0PVXcUGtgvzsfxfCqIpQR8pLfRYaE=
Subject key identifier:   6A:0C:F9:3C:11:ED:16:1F:8D:72:0E:6E:12:D2:94:FB:08:7F:BC:05
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       44F3CED31EA254E8E8CD8F2FB46B7B0DC1D0AFB6
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/4c8e1a8b-ac2f-4ef3-bb84-e54f47be56a7.roa
Signing time:             Mon 21 Jul 2025 16:21:26 +0000
ROA not before:           Mon 21 Jul 2025 16:21:26 +0000
ROA not after:            Mon 25 Aug 2025 23:59:59 +0000
asID:                     21664
IP address blocks:        2605:9cc0:c09::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:f3:ce:d3:1e:a2:54:e8:e8:cd:8f:2f:b4:6b:7b:0d:c1:d0:af:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Jul 21 16:21:26 2025 GMT
            Not After : Aug 25 23:59:59 2025 GMT
        Subject: serialNumber=586c54f15bcf7aa0cf242b987668c10799bfb5f4ae64cb08abd87c4618f8ae2a, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:7b:30:79:cb:7f:27:a7:c4:d0:ce:cd:16:e1:
                    d0:cd:ed:a3:0a:5e:74:ed:0d:19:1d:5c:af:78:a7:
                    36:af:b8:b9:bd:9e:65:9f:2b:c8:0b:45:c0:6f:8d:
                    b5:9d:78:f3:b3:df:72:d0:88:db:52:d0:3a:ce:63:
                    d4:d0:98:ca:b1:0c:35:0d:5a:00:bc:f9:8e:f9:7b:
                    61:76:04:b7:02:6c:0d:88:13:d8:71:7f:0e:b4:c6:
                    c1:65:60:32:57:e8:6e:13:16:0d:fa:0a:b1:75:78:
                    2e:f9:86:22:52:ce:57:bf:a5:32:e6:ee:3a:8a:13:
                    43:3f:c8:10:3a:43:84:de:86:a6:7d:08:8a:df:63:
                    20:48:8e:ec:2f:78:a4:ef:02:59:a5:14:f8:df:26:
                    96:52:70:30:e2:6e:d4:2b:31:0a:53:e7:5b:1e:b6:
                    04:92:17:33:35:1e:2f:9b:fd:2b:6e:f7:57:79:c8:
                    f5:89:83:77:ca:d7:6d:22:55:6c:05:1f:53:2a:61:
                    1c:0b:2d:a5:c8:f8:5a:74:9a:6d:61:17:38:5a:83:
                    dc:63:fd:e0:f3:16:cb:cd:c4:67:dc:1f:d6:81:85:
                    45:7c:4a:4e:51:e7:ea:a6:b1:83:50:39:33:d9:d3:
                    1a:5b:17:e0:b1:fa:51:62:73:d0:3d:14:d5:77:b4:
                    c4:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:0C:F9:3C:11:ED:16:1F:8D:72:0E:6E:12:D2:94:FB:08:7F:BC:05
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/4c8e1a8b-ac2f-4ef3-bb84-e54f47be56a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:c09::/48

    Signature Algorithm: sha256WithRSAEncryption
         2c:ba:67:f5:54:89:8c:72:27:db:df:24:4d:de:86:c5:54:de:
         34:6c:c0:dd:62:47:06:b5:1d:27:11:e8:6d:a7:57:e1:b7:23:
         69:bf:be:70:64:3f:d4:b7:13:09:34:b0:66:b7:25:89:75:28:
         17:d8:f7:22:95:97:96:99:59:26:bc:7b:77:53:21:77:dd:12:
         a0:3e:9e:43:db:da:23:6d:fc:ed:b2:3a:c9:67:72:ec:16:fd:
         9a:bc:96:7f:90:22:bb:2e:e5:59:32:f4:c8:aa:bc:1c:ed:8f:
         6a:fb:7b:4c:97:ed:dd:32:2b:4f:42:fd:fa:5e:b8:68:fb:52:
         d0:42:8a:6a:c4:3f:e0:95:08:2e:e3:52:fb:b8:28:55:ca:3a:
         c7:4f:84:c6:ee:03:de:a5:9b:f9:d9:e8:11:07:6b:66:9b:5e:
         8b:bb:47:c0:3a:8e:90:bc:b9:0f:15:b4:81:af:fd:1b:be:99:
         f0:7b:5a:87:52:5a:43:d2:bb:c6:a1:b1:b5:07:d7:b6:e2:4d:
         e3:02:62:fd:1e:f9:dd:8f:51:c5:c4:31:bf:bd:a5:db:e7:f0:
         4e:73:b3:99:16:b3:98:09:44:97:02:1b:5e:72:c3:11:d5:17:
         de:8e:6e:fe:4a:bc:89:43:61:9f:37:59:16:e7:fd:0c:da:bc:
         66:df:e8:cc
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jul 24 04:52:12 2025 by rpki-client