Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/1fb8a26e-46cc-4838-9d34-4a82ec864e85.roa
File:                     1fb8a26e-46cc-4838-9d34-4a82ec864e85.roa (raw, json)
Hash identifier:          ft4Ozg5nzdHGXffqEaEjkzzE71TrSOL00piXMN3SGaY=
Subject key identifier:   23:FE:0C:36:CF:36:25:BC:CA:A8:A7:64:B4:1F:9A:AB:85:D8:4F:99
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       5F7BCC24A6990FB394DA289FE09A3ADCFE9494D3
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/1fb8a26e-46cc-4838-9d34-4a82ec864e85.roa
Signing time:             Tue 16 Sep 2025 15:00:53 +0000
ROA not before:           Tue 16 Sep 2025 15:00:53 +0000
ROA not after:            Tue 21 Oct 2025 23:59:59 +0000
asID:                     21664
IP address blocks:        2605:9cc0:e00::/43 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Sep 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:7b:cc:24:a6:99:0f:b3:94:da:28:9f:e0:9a:3a:dc:fe:94:94:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Sep 16 15:00:53 2025 GMT
            Not After : Oct 21 23:59:59 2025 GMT
        Subject: serialNumber=87c1cd363ba1197ea4081e1c3141313898052f39734a7ab07d338898c5771b7f, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:85:08:7e:92:c9:71:f0:12:a1:07:a9:e7:70:
                    ef:35:25:4c:ed:43:ae:95:c0:9c:d8:5c:77:bc:48:
                    90:89:58:89:c7:db:b0:13:00:9f:44:59:ae:eb:e9:
                    22:37:79:ef:c2:d2:14:37:35:d1:db:2f:b3:99:3f:
                    88:1b:85:9d:ef:9e:a6:b3:f0:9b:f0:24:3c:43:0b:
                    fc:41:b3:ff:d6:ad:65:95:56:d3:f0:fd:c8:97:09:
                    11:ef:54:8d:f9:e2:e4:a9:55:9c:8e:e3:e9:1b:1c:
                    83:b2:3c:bc:af:2d:23:df:47:03:af:b7:41:9c:08:
                    49:73:62:fb:29:ef:17:65:92:65:a4:22:6d:0a:72:
                    4b:19:39:06:49:f3:79:d0:a9:06:b2:7f:f4:25:17:
                    97:6c:56:78:16:f0:1a:ac:60:d7:0f:3a:b7:24:c8:
                    b9:6b:2b:98:77:16:e3:cf:48:a1:ee:82:6d:1e:57:
                    f4:08:68:69:5a:8f:f9:5b:39:9b:b8:4b:6d:f7:f0:
                    51:c6:3c:81:c4:07:45:cc:a2:4b:d3:4d:5d:11:a4:
                    8c:fe:6a:26:59:95:98:66:21:dd:af:7f:50:bb:6b:
                    a6:b3:75:ed:e9:a4:60:ca:14:8b:1f:d7:05:19:db:
                    8e:82:a7:19:47:4b:f1:a4:58:32:c0:e8:91:be:90:
                    5f:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:FE:0C:36:CF:36:25:BC:CA:A8:A7:64:B4:1F:9A:AB:85:D8:4F:99
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/1fb8a26e-46cc-4838-9d34-4a82ec864e85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:e00::/43

    Signature Algorithm: sha256WithRSAEncryption
         44:b4:ff:ff:a9:d5:11:99:f5:f7:3d:05:e3:21:c5:61:0c:d9:
         b1:24:37:ff:f1:ca:e5:19:4c:26:76:6b:96:d8:8c:a1:77:46:
         0b:c3:0a:5c:14:3d:64:2d:8a:4e:70:88:83:ba:80:dd:ba:f2:
         5b:db:35:ec:f6:c6:da:76:33:50:69:17:38:89:85:9e:9e:4d:
         61:c9:34:64:3f:69:b9:94:f7:c9:8c:db:cb:cf:91:5c:00:4c:
         26:92:65:a2:77:53:e6:9c:30:80:cf:69:90:37:1f:c5:8e:35:
         53:94:77:1e:73:e7:ab:12:5b:b7:e6:03:70:6a:8b:7b:2b:19:
         34:43:b5:79:e5:fc:93:aa:fa:61:e8:ae:97:e5:65:c9:11:4d:
         5d:75:b2:3c:ca:56:cc:b9:cd:b9:1e:ca:c5:b8:55:ac:a3:75:
         cd:4c:7d:e5:73:2e:85:d3:69:76:81:44:27:2a:70:b2:8a:ee:
         61:45:47:6a:dc:e8:2f:98:65:43:de:0f:00:fa:14:36:9c:af:
         47:42:4a:f6:40:0e:77:52:34:d9:ad:5b:5d:8c:65:36:b7:83:
         63:4e:5b:4d:fb:e0:ad:8d:03:1e:f1:31:36:65:4a:04:bb:e5:
         1f:54:b3:f9:ea:a4:ed:08:66:b0:c9:bb:20:e5:f6:d4:2a:22:
         83:29:fb:d1
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Sep 19 00:15:08 2025 by rpki-client