Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/bd7d2b15-718f-43fb-b91d-c0bc7f75e8dc.roa
File:                     bd7d2b15-718f-43fb-b91d-c0bc7f75e8dc.roa (raw, json)
Hash identifier:          S6sZH44VbXbr69dBHJJZdQCkWAJKBupunVTPx1ZCmi8=
Subject key identifier:   F7:55:7F:A7:8D:3B:19:77:65:73:85:70:E0:86:05:8B:30:04:BE:91
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       6495316452F1164B89EE975564E56486525EC1A1
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/bd7d2b15-718f-43fb-b91d-c0bc7f75e8dc.roa
Signing time:             Tue 02 Sep 2025 00:40:19 +0000
ROA not before:           Tue 02 Sep 2025 00:40:19 +0000
ROA not after:            Tue 07 Oct 2025 23:59:59 +0000
asID:                     8987
IP address blocks:        2600:f0f2:7000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Sep 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:95:31:64:52:f1:16:4b:89:ee:97:55:64:e5:64:86:52:5e:c1:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Sep  2 00:40:19 2025 GMT
            Not After : Oct  7 23:59:59 2025 GMT
        Subject: serialNumber=e6bbb5aad7438489d78e8a1fd408ebc415c000d8bace5a0daeddaf5115109262, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:fd:9d:b0:3f:53:b7:66:fd:cb:69:aa:ef:26:
                    aa:05:56:96:d2:5c:b0:45:e8:a1:0b:48:1c:bf:48:
                    d5:27:32:19:8e:09:de:3d:94:c8:4a:ae:25:f8:41:
                    59:fa:61:27:bc:19:ba:17:81:f5:6a:d3:a7:87:a0:
                    8b:2a:18:b8:8a:e0:57:87:55:66:54:5e:06:b5:a0:
                    8d:5a:fd:23:7b:00:36:0d:43:8f:74:76:77:fd:be:
                    8b:d1:84:cb:2a:da:cf:a9:7c:5b:29:5a:f0:47:05:
                    ba:7b:42:63:4c:20:5d:60:f0:a1:fb:0f:18:45:d8:
                    50:81:90:6c:31:c4:92:e6:2d:87:6d:4b:54:b5:b5:
                    cd:37:2e:54:11:3d:49:a4:eb:4a:68:14:96:d5:54:
                    4f:6b:7b:56:07:4e:6a:f5:0c:c3:34:be:9d:4c:1d:
                    e4:f8:30:df:f3:04:6c:53:a7:ba:f8:86:70:ef:ac:
                    67:a8:d2:1d:68:aa:45:d0:bd:dc:06:a3:e9:71:1e:
                    4d:ab:49:de:fd:b5:87:8d:13:62:e3:83:0e:0b:15:
                    80:07:3d:fd:8b:ad:cd:4b:e0:31:f4:ef:e9:30:fb:
                    37:9f:d5:f6:a3:6e:bd:dd:af:6d:bf:50:ae:99:b8:
                    f2:b5:ff:66:2a:93:7f:d6:be:1b:70:01:c5:d5:c4:
                    e1:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:55:7F:A7:8D:3B:19:77:65:73:85:70:E0:86:05:8B:30:04:BE:91
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/bd7d2b15-718f-43fb-b91d-c0bc7f75e8dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f2:7000::/44

    Signature Algorithm: sha256WithRSAEncryption
         37:bd:69:4e:3e:d7:fe:ac:c2:ff:95:98:87:4c:99:0c:c5:7d:
         1e:32:4f:44:ee:41:e0:e4:db:ca:4f:67:74:95:25:d4:ab:b3:
         03:30:a9:56:09:46:e9:19:cd:50:32:c4:c7:6a:31:7a:6c:43:
         4a:dd:a3:d2:56:7a:b7:96:8d:d4:ae:96:09:0a:a8:dc:fb:4a:
         72:8c:13:4e:9c:77:6d:62:04:61:17:f3:66:f1:92:41:ad:d8:
         60:7f:08:93:5c:e3:73:45:65:d3:19:85:ca:18:f5:3f:c6:f3:
         0c:ed:f9:01:02:e9:94:ed:d2:70:91:7c:b4:bb:9a:ac:06:13:
         21:c1:5b:ee:41:1a:4f:52:19:16:0f:41:ff:6d:57:44:53:0b:
         d4:e3:fa:e7:68:a5:e6:09:50:b1:9a:de:99:af:6d:53:f6:10:
         1f:7e:54:1a:76:1a:4b:b4:5e:30:20:b3:ae:32:de:c1:45:2f:
         bf:08:12:90:df:ee:8d:93:7c:51:24:9f:9d:99:9c:36:2f:97:
         a2:91:14:4a:8b:be:af:ad:48:d3:39:6a:3b:73:85:fc:7c:c5:
         41:f7:39:7b:25:9b:e5:6b:f7:58:f7:5d:1a:e9:49:66:ff:2b:
         20:05:28:7b:19:f8:d9:cb:8e:32:85:ab:25:22:19:a4:ab:c8:
         9f:51:d4:ff
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:15:12 2025 by rpki-client