Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/caefe159-b60c-4d72-9342-6b935e1ff106.roa
File:                     caefe159-b60c-4d72-9342-6b935e1ff106.roa (raw, json)
Hash identifier:          zkBzS6Fm5IBsHLYSM5ZtUkLpq8XPr2uTean7dR0PXWw=
Subject key identifier:   AC:34:85:4C:F3:7A:0E:E0:98:7A:2E:46:BC:21:CA:20:93:C9:6F:A3
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       138BE08F2B61EBDFC37A4CCA22A5779B52063915
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/caefe159-b60c-4d72-9342-6b935e1ff106.roa
Signing time:             Tue 23 Sep 2025 17:34:29 +0000
ROA not before:           Tue 23 Sep 2025 17:34:29 +0000
ROA not after:            Tue 28 Oct 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2605:9cc0:f03f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:8b:e0:8f:2b:61:eb:df:c3:7a:4c:ca:22:a5:77:9b:52:06:39:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Sep 23 17:34:29 2025 GMT
            Not After : Oct 28 23:59:59 2025 GMT
        Subject: serialNumber=7a65b0700e0a770db43dd63cabdaf7be1d0df4d074fa240259680e9c1d030142, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:b7:6a:c5:9d:8f:7e:c4:3c:6c:d8:d1:67:4a:
                    77:17:ae:f0:3e:b2:05:fd:d0:52:cc:79:07:98:c6:
                    5b:48:c5:1a:a1:44:e0:8f:85:9e:e9:86:5f:56:7b:
                    cb:00:4a:14:6a:01:94:dc:d0:c3:bf:e9:e0:2a:75:
                    22:31:e9:a9:9f:3f:26:34:be:e7:9c:5f:c3:bc:d4:
                    6c:6d:6f:53:02:34:86:18:1d:33:53:51:0b:1f:96:
                    76:99:f4:d7:df:22:fc:7b:5f:27:3e:d3:db:6c:4b:
                    65:0c:a9:a5:9c:ac:eb:c2:40:7c:f6:7d:71:ff:49:
                    a5:03:53:b1:24:f1:55:d3:84:36:d7:4f:c6:86:80:
                    14:77:5e:d0:81:b4:2d:2c:b6:b3:b2:29:1d:be:44:
                    0b:d4:f6:a5:9f:8b:7b:07:ae:45:2f:66:56:09:71:
                    fe:88:15:41:37:6c:f3:2e:60:0d:3d:50:4a:64:02:
                    fd:59:2a:1f:32:92:10:7d:13:82:51:16:d6:c2:aa:
                    7c:a0:52:57:0e:57:ec:62:84:32:1a:94:ae:ce:ff:
                    e2:5b:ea:38:45:8f:58:67:a4:2d:7d:2e:e8:7f:54:
                    4e:e8:93:2d:b1:2d:20:84:a3:07:00:49:0d:b0:7d:
                    14:64:7e:55:97:6f:b7:70:42:d0:42:f7:32:4d:14:
                    34:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:34:85:4C:F3:7A:0E:E0:98:7A:2E:46:BC:21:CA:20:93:C9:6F:A3
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/caefe159-b60c-4d72-9342-6b935e1ff106.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:f03f::/48

    Signature Algorithm: sha256WithRSAEncryption
         28:6b:72:c2:88:6c:dc:20:39:1f:47:e1:35:5d:ce:4e:75:d5:
         4b:20:24:76:d1:ce:ed:cd:2c:eb:c8:3c:56:5d:16:3e:77:97:
         17:91:97:b5:0f:4e:1d:a5:9e:8e:aa:bb:e7:1e:c2:a9:2e:24:
         31:89:41:08:c4:61:fd:f7:76:ab:7a:a4:b0:1b:e8:97:ba:99:
         2c:56:20:7b:df:86:24:72:de:23:8e:5c:b6:43:a2:79:f1:f0:
         9c:0a:60:d8:23:58:c8:c3:47:f7:33:2c:78:5b:37:b3:55:f8:
         55:7b:3b:be:b6:5b:89:f8:90:58:f4:01:64:d3:3e:0c:2c:23:
         83:d2:12:2a:8d:86:ca:47:70:7a:b8:af:c1:91:9e:2e:22:8b:
         c5:2f:1b:91:7b:47:ed:40:ae:71:44:89:0d:55:a6:0d:2e:fe:
         00:f2:ac:4d:d5:2e:a2:bf:2d:89:ef:df:31:bb:8f:11:de:6d:
         ff:ff:62:a7:78:cd:53:fc:fe:0a:ed:c5:a5:b9:3e:95:ea:77:
         d7:ad:c0:4f:df:07:8a:8c:83:03:c2:3e:46:a5:23:89:70:a1:
         e6:32:a0:df:16:2a:6a:08:b8:2c:2e:d3:e4:e8:2d:bf:ba:4b:
         1e:6f:2e:6b:67:96:2f:8c:60:e2:65:a1:7b:73:53:21:76:d1:
         2c:30:3f:6e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Oct 8 21:31:02 2025 by rpki-client