Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/db3bbfe8-2718-45e1-a3a5-afbf572d00cf.roa
File:                     db3bbfe8-2718-45e1-a3a5-afbf572d00cf.roa (raw, json)
Hash identifier:          d2fcP5/0pX1wtivwP6dErzlwLYhmpIRS9XOQ0Qjn/Tc=
Subject key identifier:   EF:40:76:06:1F:57:A9:3B:A3:60:2C:01:D7:48:15:F4:F2:6E:3D:BA
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       05A69EA97649104AA3F70F82A3496CEA3A30C7F3
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/db3bbfe8-2718-45e1-a3a5-afbf572d00cf.roa
Signing time:             Mon 21 Jul 2025 16:30:05 +0000
ROA not before:           Mon 21 Jul 2025 16:30:05 +0000
ROA not after:            Mon 25 Aug 2025 23:59:59 +0000
asID:                     21664
IP address blocks:        2605:9cc0:c14::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:a6:9e:a9:76:49:10:4a:a3:f7:0f:82:a3:49:6c:ea:3a:30:c7:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Jul 21 16:30:05 2025 GMT
            Not After : Aug 25 23:59:59 2025 GMT
        Subject: serialNumber=6c0d357e28dcf295f11895985d1a7d4d39dbb578e2c57a2be0fc66b71ad3bfe2, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f6:8a:81:3a:92:7f:9e:6a:0d:83:3a:1a:58:
                    f2:67:18:be:c3:15:04:74:7f:84:71:4b:0f:4e:52:
                    94:6a:ed:65:7f:c4:94:99:1f:dd:69:29:00:17:91:
                    70:08:7b:04:31:56:cc:ab:ce:1c:f0:73:e3:1f:18:
                    20:6a:34:3b:f9:20:58:10:ed:3e:1c:b8:51:c9:c2:
                    b9:70:3b:5b:bc:26:92:6d:0e:72:ba:cd:a9:5f:a0:
                    c4:7f:f4:1a:fd:a7:bc:ba:36:f0:aa:e2:8d:d0:be:
                    bf:be:da:92:5e:c1:ce:8c:3f:6e:83:8a:88:a1:98:
                    cb:0b:b8:e7:54:d8:4c:b6:17:26:83:f2:7c:80:ee:
                    68:8b:ce:63:93:f6:61:4a:f0:b7:2b:c1:db:17:82:
                    bc:92:d2:45:3e:f0:e9:cb:71:9c:57:16:0b:7a:cb:
                    72:75:dc:c1:df:46:f3:e5:a4:27:a8:63:51:4d:5f:
                    13:95:3c:87:84:c8:1d:95:56:e9:68:d6:a7:f1:c1:
                    a6:1f:b4:93:84:33:b6:12:71:af:49:77:56:86:9b:
                    17:9f:97:2d:73:9f:06:2e:4a:46:74:f9:a6:2e:db:
                    1c:16:9c:d3:f7:f0:e0:7a:31:fa:94:a6:ef:ec:5e:
                    91:10:c1:f8:b2:f0:d9:2f:af:6f:fd:68:41:a8:98:
                    78:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:40:76:06:1F:57:A9:3B:A3:60:2C:01:D7:48:15:F4:F2:6E:3D:BA
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/db3bbfe8-2718-45e1-a3a5-afbf572d00cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:c14::/48

    Signature Algorithm: sha256WithRSAEncryption
         72:9f:54:c5:53:ec:3b:93:9f:5e:6f:e0:30:f9:8e:7f:47:a8:
         c9:83:2d:b3:f5:54:a3:7a:4b:19:24:34:db:9a:65:e2:6e:9a:
         ca:67:18:6d:f5:c4:fb:0e:48:12:6e:fa:75:6b:83:31:3e:bb:
         7d:c9:fc:fe:2a:35:9e:dc:14:bb:07:d9:0c:b2:8d:8f:6a:31:
         4f:07:86:ec:7f:2c:a6:fa:36:51:3d:70:38:3d:ab:65:7e:d6:
         18:62:13:ee:86:7f:2e:22:af:e0:79:7d:db:f6:59:6a:dd:6f:
         4e:b3:18:de:51:1a:92:dc:92:7a:0f:56:d5:a0:98:df:a7:b4:
         23:b8:2b:2d:28:35:5b:d7:f9:6a:9f:28:ea:d5:01:6e:67:4f:
         16:bd:51:1f:45:d2:55:0a:80:3e:c5:ee:88:2c:94:e8:a6:87:
         77:eb:b3:14:5f:0f:38:2f:7e:36:07:7f:4f:5b:95:03:2b:5b:
         df:e6:3c:7e:33:ef:a8:f4:5d:f3:37:5f:05:26:2a:ba:18:98:
         58:f4:86:d2:cc:9f:a2:87:3f:45:7b:35:97:30:9c:e6:d6:a3:
         3c:6e:c9:4c:d9:1d:fb:73:0d:c5:d8:4d:82:cb:36:6a:7d:6d:
         c7:60:95:82:d6:f2:0b:28:a5:95:b5:96:ee:d9:53:6e:db:f0:
         0d:ad:fe:58
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jul 24 04:52:03 2025 by rpki-client