Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/07f4a85e-de83-42f6-84ff-18bd059accc5.roa
File:                     07f4a85e-de83-42f6-84ff-18bd059accc5.roa (raw, json)
Hash identifier:          5Px1QYRnzXdIeBr3IZAZuitsj2wrlQr4uEHEj7akfvY=
Subject key identifier:   8A:AD:98:01:87:31:04:E5:0A:E3:5F:9C:1E:13:60:51:EA:D9:E3:5E
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       58ACE8400F70B863BD26CA2E07BD248B2446CFFC
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/07f4a85e-de83-42f6-84ff-18bd059accc5.roa
Signing time:             Fri 26 Sep 2025 17:50:53 +0000
ROA not before:           Fri 26 Sep 2025 17:50:53 +0000
ROA not after:            Fri 31 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2605:9cc0:100::/42 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:ac:e8:40:0f:70:b8:63:bd:26:ca:2e:07:bd:24:8b:24:46:cf:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Sep 26 17:50:53 2025 GMT
            Not After : Oct 31 23:59:59 2025 GMT
        Subject: serialNumber=f6008c58554ab7920728cdd1887655df1f94f822de9da819f505d5e7d4df31d2, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a6:79:e7:fd:33:82:67:66:50:3a:c8:25:28:
                    50:9d:9c:f2:f8:32:d2:53:e2:8c:03:cd:06:5d:c2:
                    6f:ec:3a:e1:f1:fb:92:b7:a1:9a:f4:da:a7:7d:a0:
                    12:f7:61:37:c0:98:12:c3:e9:6f:7f:43:01:7c:d0:
                    ee:88:49:1b:24:a7:7b:75:c5:46:17:1d:ae:f6:2e:
                    48:f6:af:6b:cf:f6:37:3a:5b:9c:9c:28:c6:ff:f0:
                    a2:9d:64:1f:d0:a6:be:d8:a8:21:76:90:b2:de:0f:
                    13:10:b1:7d:52:70:a2:b3:a4:10:c0:6d:6e:79:b1:
                    26:43:f7:fc:10:d5:f4:8d:34:ad:37:a1:97:a0:75:
                    c7:4e:04:ee:96:76:00:0f:19:72:d2:9c:3b:0c:ab:
                    a4:f5:ac:51:8b:d8:39:40:f1:bd:bc:53:76:51:b9:
                    24:7a:ad:d1:f2:01:f9:b2:0e:1b:41:bf:6d:dc:55:
                    80:8c:fc:bb:c9:55:1f:3b:93:06:95:d9:30:b8:01:
                    34:e9:12:34:e3:55:62:88:cf:db:4c:68:c1:8f:96:
                    d0:1f:13:3a:cf:c8:80:5c:cc:d0:3d:41:97:30:cd:
                    aa:11:cf:3e:73:f9:68:d0:68:9e:23:d6:ab:a7:cb:
                    d9:cb:6d:e5:f5:e7:31:81:3b:2b:72:09:24:89:de:
                    ca:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:AD:98:01:87:31:04:E5:0A:E3:5F:9C:1E:13:60:51:EA:D9:E3:5E
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/07f4a85e-de83-42f6-84ff-18bd059accc5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:100::/42

    Signature Algorithm: sha256WithRSAEncryption
         54:1e:0f:d2:5b:13:38:20:48:9c:64:91:09:79:b8:b1:98:2b:
         2d:aa:8b:5c:8b:1a:a9:99:28:e7:41:d8:a5:f6:ea:3f:cd:d3:
         3a:6c:04:97:10:6d:71:35:6f:cc:2d:2e:80:fb:51:53:36:26:
         6c:9c:9a:73:95:7b:9d:6e:37:6e:de:8c:fd:16:54:f6:0f:2f:
         4a:33:7f:55:54:dc:57:47:21:87:ac:54:7f:9e:64:89:e4:b4:
         91:33:dc:f9:22:d2:cb:1c:8c:98:1b:b2:3b:a0:68:e2:49:dc:
         31:d3:9f:45:32:49:ce:d7:b6:25:e8:3d:b4:4b:4e:b6:b7:b7:
         d7:5e:b3:6c:2c:77:db:42:ea:46:27:10:14:0c:2c:da:8e:58:
         f5:23:cc:e3:03:cb:e7:16:ce:64:46:e2:8f:0d:9f:ef:f8:16:
         6e:bd:81:8d:2e:96:99:75:b1:04:ad:27:71:8d:b6:0e:8d:f4:
         c4:48:98:c6:83:6c:ae:64:42:ef:aa:5a:f8:ea:3f:9e:03:ee:
         23:8a:2d:2b:20:df:15:7c:c0:df:a0:07:5c:87:7c:b3:5e:ef:
         7b:15:cf:4d:08:ac:67:a2:50:68:05:da:59:07:05:e8:6f:4c:
         b5:88:20:1e:47:ff:04:87:f8:b3:30:00:5c:d3:42:0e:c6:fa:
         6c:57:a6:e9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Oct 20 21:18:58 2025 by rpki-client