Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/59d06962-7aa4-4507-aeb0-a842d588bc31.roa
File:                     59d06962-7aa4-4507-aeb0-a842d588bc31.roa (raw, json)
Hash identifier:          OppDewqdDKaVB7MmqzouCv6Mi19XjgjJtP3SBo6E5e4=
Subject key identifier:   7C:D8:77:D4:C6:EB:69:39:75:4D:DF:61:09:85:61:7A:D2:45:A7:5C
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       4415577753C3FECE37F29AC66DD2672FBE83BCF5
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/59d06962-7aa4-4507-aeb0-a842d588bc31.roa
Signing time:             Fri 26 Sep 2025 17:52:15 +0000
ROA not before:           Fri 26 Sep 2025 17:52:15 +0000
ROA not after:            Fri 31 Oct 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2605:9cc0:549::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:15:57:77:53:c3:fe:ce:37:f2:9a:c6:6d:d2:67:2f:be:83:bc:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Sep 26 17:52:15 2025 GMT
            Not After : Oct 31 23:59:59 2025 GMT
        Subject: serialNumber=4f4d487937e76e6e1f7ec08e840d287a90ea6e2f0e0d4af7d2a7200377a49dd6, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:9c:23:35:ed:fd:e4:75:67:22:2a:56:f9:36:
                    1e:c8:62:d6:7c:8c:53:cf:2c:6e:20:4e:c9:9d:d0:
                    0e:66:af:28:07:6e:60:e5:d7:2e:e0:b6:2c:9e:15:
                    42:6e:21:be:d6:1f:b8:3d:24:ad:45:e7:1f:40:27:
                    62:85:b0:cb:c4:95:5e:b0:fa:73:e1:e0:39:8b:c5:
                    75:45:c2:c8:35:91:64:b8:f6:77:7f:84:63:ef:5c:
                    2c:a5:d3:10:c6:9b:ca:06:3b:3d:ae:b8:b9:6b:8e:
                    67:43:a4:3b:03:61:15:a4:2f:7b:5c:e1:78:2d:64:
                    6c:80:06:a6:69:c6:49:41:c6:74:b2:41:31:c3:cd:
                    b6:3f:c0:ee:19:35:d7:a4:c7:b2:c8:ff:75:d0:fe:
                    e7:1d:8c:59:ea:0e:c7:6a:08:1b:6a:2a:74:2c:d9:
                    b9:74:81:a2:75:9c:67:4a:59:7d:5a:e7:f8:af:58:
                    f9:ef:5f:a6:ed:35:76:5d:bb:db:74:8e:6b:e1:44:
                    49:e5:1d:8a:12:24:c1:b1:31:f1:b3:2b:e7:9a:11:
                    1a:a7:93:9f:b1:74:4b:86:9b:9c:63:d4:ca:b0:d0:
                    57:bb:b5:70:36:53:b8:44:b6:5d:f2:63:3f:0c:4c:
                    45:cc:4b:a1:af:16:56:10:ed:39:0d:a7:d0:e7:ec:
                    8e:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:D8:77:D4:C6:EB:69:39:75:4D:DF:61:09:85:61:7A:D2:45:A7:5C
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/59d06962-7aa4-4507-aeb0-a842d588bc31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:549::/48

    Signature Algorithm: sha256WithRSAEncryption
         76:29:90:18:c2:e1:f9:14:60:c3:e0:24:9f:55:1e:a8:48:5f:
         af:02:49:8f:61:6d:c4:52:a6:24:44:d3:e4:96:a0:d5:58:67:
         88:a0:8b:88:9f:42:b5:c0:56:ad:93:46:c7:84:62:bb:ee:ad:
         bd:f5:a2:8f:fb:b9:db:c7:41:3e:68:e5:18:e7:55:09:2a:2b:
         9a:84:85:3a:cc:1e:59:57:bc:85:ab:e5:4f:4e:5e:a6:16:6e:
         f1:72:c2:b4:44:9f:68:87:bb:6f:3d:b2:f2:a3:a1:07:8c:be:
         cc:b3:ae:3d:f8:28:6b:cf:9a:cd:95:bf:9b:02:36:7b:5b:be:
         7f:49:10:f9:f8:30:aa:8e:96:2a:73:79:07:a2:2b:c8:5d:8a:
         90:bb:ec:3b:fe:73:10:91:e0:91:8b:fa:a4:40:53:42:09:3f:
         1a:0a:04:11:19:7d:34:61:b5:1f:64:fa:a4:a8:d6:99:87:b2:
         98:f0:d7:7e:67:db:51:c2:1f:71:1f:89:e6:fb:71:be:91:52:
         74:fb:57:88:dc:9b:9d:a0:d3:cc:81:91:9d:f8:65:37:c1:4a:
         24:4c:f7:1d:67:33:37:cb:f4:68:91:06:ba:16:9c:4e:34:9e:
         db:e1:b8:d4:fb:c2:5d:7f:80:18:f1:25:25:8c:29:ed:21:08:
         10:59:ac:27
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Oct 8 21:30:55 2025 by rpki-client