Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/93ba1195-bd4c-4d9a-a38b-03113f124f47.roa
File:                     93ba1195-bd4c-4d9a-a38b-03113f124f47.roa (raw, json)
Hash identifier:          1sVf5kD5kBo6iSp46we5qjp1GxEBhLSqFSfsYnhwgJg=
Subject key identifier:   A5:00:6B:A8:81:43:8C:14:93:52:8C:C0:C2:33:9B:29:5A:A4:C4:42
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       6C4AC126132C42C923B0848AF4872B5624752970
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/93ba1195-bd4c-4d9a-a38b-03113f124f47.roa
Signing time:             Tue 07 Oct 2025 14:11:50 +0000
ROA not before:           Tue 07 Oct 2025 14:11:50 +0000
ROA not after:            Tue 11 Nov 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2605:9cc0:d00::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:4a:c1:26:13:2c:42:c9:23:b0:84:8a:f4:87:2b:56:24:75:29:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Oct  7 14:11:50 2025 GMT
            Not After : Nov 11 23:59:59 2025 GMT
        Subject: serialNumber=6a33c28582e9421a08544b7beffbf2785e319ff3a0092b722483d57612f7a2ad, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:27:e9:78:b9:d5:92:26:ea:e4:0e:47:83:f4:
                    4e:79:0a:b6:e5:72:98:4f:91:09:17:77:17:2f:93:
                    d2:89:24:f2:9a:ef:1c:40:b3:c5:82:69:73:9c:f4:
                    36:48:b4:7d:ec:62:b6:aa:a0:e3:0c:2c:33:ec:af:
                    de:3f:e4:c5:1f:b9:be:66:7d:21:b1:8b:17:4e:31:
                    89:72:fe:29:da:65:8c:db:7f:93:f7:76:06:c8:e6:
                    3e:ac:dc:88:2f:16:92:a6:89:e4:ca:27:7e:7a:3e:
                    b0:3a:54:9b:7a:16:f1:79:54:c9:9b:ca:82:ef:5b:
                    2b:36:7d:e4:f3:05:7f:88:03:f5:db:19:6d:28:e8:
                    56:59:ab:83:c2:2f:7e:39:29:45:32:66:1a:b6:2b:
                    c6:70:a8:2d:94:bd:e3:66:60:c1:8c:06:16:e7:a5:
                    f2:aa:d5:7b:8b:5b:a6:48:2e:c0:c7:97:b0:9e:5c:
                    b8:03:aa:70:8d:60:c7:2f:fc:35:90:ca:2a:fe:37:
                    88:8c:8f:1a:ac:1b:1b:f7:39:d7:68:7e:e8:84:74:
                    14:7f:d0:7c:22:13:19:c9:67:a2:f0:9f:8e:a7:af:
                    fa:6d:43:a5:a4:7f:9d:71:bf:d2:0e:f8:a3:04:a7:
                    fa:16:e6:06:b1:e4:a3:47:0e:df:11:e3:0d:0e:db:
                    82:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:00:6B:A8:81:43:8C:14:93:52:8C:C0:C2:33:9B:29:5A:A4:C4:42
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/93ba1195-bd4c-4d9a-a38b-03113f124f47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:d00::/40

    Signature Algorithm: sha256WithRSAEncryption
         95:65:b8:d8:e1:fa:01:35:5a:99:78:41:7a:f5:eb:87:6c:8e:
         77:42:04:53:d3:da:c6:85:7e:6c:06:96:f6:0b:a1:02:a8:cb:
         a0:60:0e:d5:50:69:0b:ed:e0:ab:4f:d8:45:d5:38:68:2d:70:
         81:3b:eb:13:81:a8:67:b0:b1:00:76:36:66:83:92:7a:69:9f:
         fd:2c:6e:e8:ff:63:c5:db:bc:2e:d7:34:57:c1:7d:13:cc:13:
         d5:a6:fa:c1:54:1f:34:a0:5f:90:37:1a:4d:47:df:da:02:f8:
         2d:b7:ce:94:49:27:d2:1f:ed:f2:86:2e:89:ce:07:c2:b4:50:
         c6:ff:a6:c9:19:f5:66:42:e9:08:e4:bc:52:00:a0:3b:3e:fb:
         7d:cf:43:dc:f1:5c:8e:ad:6f:a1:3e:58:37:f8:87:ce:2b:e3:
         b6:b7:b3:dc:3d:3f:31:5e:6f:9a:80:b8:4a:ab:55:b5:0a:25:
         9d:17:fa:67:86:61:b3:b2:85:dc:e2:83:71:6b:c1:26:69:77:
         91:85:d4:44:e6:b3:dc:f3:da:d5:0e:f2:28:c9:2a:71:5b:44:
         00:7c:22:9c:e5:9a:9d:38:74:84:1c:aa:d9:7e:3c:84:c8:d1:
         f7:88:3f:19:27:c8:6c:15:6c:51:a7:72:f0:92:6c:c2:ed:25:
         3b:a0:08:a8
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Oct 8 21:10:42 2025 by rpki-client