Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/1fb8a26e-46cc-4838-9d34-4a82ec864e85.roa
File:                     1fb8a26e-46cc-4838-9d34-4a82ec864e85.roa (raw, json)
Hash identifier:          /qDeTxSTI6aGOxle1IZrjJUhSd+/rcAdjOEQzS2ACVM=
Subject key identifier:   40:5F:4A:C3:7E:FB:68:1D:9A:1F:BC:CA:74:A2:54:53:D6:F3:3D:43
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       6526084786B1DF687010265DF2D6EC6987A290C4
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/1fb8a26e-46cc-4838-9d34-4a82ec864e85.roa
Signing time:             Fri 06 Jun 2025 15:00:11 +0000
ROA not before:           Fri 06 Jun 2025 15:00:11 +0000
ROA not after:            Fri 11 Jul 2025 23:59:59 +0000
asID:                     21664
IP address blocks:        2605:9cc0:e00::/43 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:26:08:47:86:b1:df:68:70:10:26:5d:f2:d6:ec:69:87:a2:90:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Jun  6 15:00:11 2025 GMT
            Not After : Jul 11 23:59:59 2025 GMT
        Subject: serialNumber=61abe8d8d4ae4661287a592619a64d1647f511637a045add06cdd1b145ee7e24, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:9f:fa:32:31:94:c1:41:d2:0f:dc:e4:fd:9b:
                    3f:a1:b8:d8:a0:d8:f0:c6:77:eb:11:0e:05:99:87:
                    74:6a:55:9e:d0:f7:73:77:fc:5c:14:e3:18:79:f6:
                    72:5c:67:a7:5e:21:25:a1:37:91:97:53:d3:04:da:
                    39:fc:c1:4e:c8:1e:bf:58:e8:ea:cf:a9:c0:8d:86:
                    65:94:aa:fa:8b:af:4a:33:69:11:0b:3c:1e:cb:07:
                    fa:2e:ae:67:47:82:92:21:48:0b:cd:cf:25:87:e3:
                    f8:c9:03:d6:cd:e0:50:91:85:76:88:ba:45:3a:10:
                    f9:fb:0b:81:95:40:74:23:2a:52:46:38:76:18:8f:
                    36:c8:31:87:76:60:de:11:4a:b5:da:5a:80:4d:bb:
                    29:98:79:71:87:12:9c:11:cf:77:1b:3f:ad:6c:6c:
                    3c:da:eb:30:a2:03:31:ba:9b:38:4e:87:e3:14:a9:
                    c4:39:4c:eb:78:f3:7f:5a:22:ae:52:9f:60:5e:84:
                    7a:38:5b:4e:4f:92:cc:05:8b:c1:01:14:75:80:55:
                    3b:2a:24:35:df:44:3a:12:7e:b7:b0:3b:e5:3b:bf:
                    0d:49:b6:bd:cd:7a:cf:18:44:7f:c9:15:fb:bc:c0:
                    fe:77:71:92:dc:e6:7c:92:34:42:36:1b:1e:b4:92:
                    e5:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:5F:4A:C3:7E:FB:68:1D:9A:1F:BC:CA:74:A2:54:53:D6:F3:3D:43
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/1fb8a26e-46cc-4838-9d34-4a82ec864e85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:e00::/43

    Signature Algorithm: sha256WithRSAEncryption
         8d:4c:9d:89:af:12:f2:6a:e7:d8:fc:49:af:33:74:f1:81:b4:
         24:12:4f:c0:16:a2:45:19:78:c9:de:f4:c0:83:c9:33:d9:95:
         7e:5d:31:20:33:b3:3b:72:f4:27:86:c9:84:c9:a2:66:48:99:
         04:4a:ad:7d:ec:b3:07:61:75:aa:78:68:e3:1e:43:7a:a3:78:
         a3:36:68:69:c8:1b:33:2b:8e:6b:9b:e1:1e:20:cc:da:33:f7:
         56:7e:8b:21:e8:0e:ae:e1:70:9a:4d:8d:bf:8f:40:ef:97:86:
         4b:e4:fb:0b:d0:7b:73:52:d3:01:6b:d6:e5:bd:3d:aa:3a:01:
         1f:4f:4e:86:56:74:dc:07:15:06:a0:db:75:57:0b:25:ff:d5:
         7d:29:75:48:e3:b6:72:c6:5f:43:b3:d2:58:1d:b4:ff:4d:06:
         5e:ee:00:1d:b2:70:6b:d9:f6:0d:26:45:f9:a8:2b:de:da:f0:
         a1:f8:47:c4:a3:0f:fe:7a:59:25:16:ea:c6:5b:bf:b3:89:da:
         8c:c0:7d:66:6d:c5:02:64:a3:6e:97:19:39:8a:99:de:3f:f8:
         ff:87:fd:6a:7e:48:1d:13:0e:97:74:92:41:95:2d:bd:3a:84:
         92:a1:79:a4:33:60:ed:f2:68:c0:ec:70:43:55:8b:89:96:a6:
         3a:74:10:b5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Jun 8 00:21:10 2025 by rpki-client