Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/90d62abd-55d6-4d53-9bfb-b5e20bc6d802.roa
File:                     90d62abd-55d6-4d53-9bfb-b5e20bc6d802.roa (raw, json)
Hash identifier:          jeISTW/4D3iA1uhgnT5tptJ8NUIeF5bXQipZlInfRrY=
Subject key identifier:   B6:C9:FC:53:5E:99:08:D8:4B:68:78:BB:F7:07:23:DF:4B:20:EC:6C
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       06948482EA195AF0DE85224C73571C189087FC7C
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/90d62abd-55d6-4d53-9bfb-b5e20bc6d802.roa
Signing time:             Sat 31 May 2025 00:20:38 +0000
ROA not before:           Sat 31 May 2025 00:20:38 +0000
ROA not after:            Sat 05 Jul 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2605:9cc0:612::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:94:84:82:ea:19:5a:f0:de:85:22:4c:73:57:1c:18:90:87:fc:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: May 31 00:20:38 2025 GMT
            Not After : Jul  5 23:59:59 2025 GMT
        Subject: serialNumber=10a7a3766cf345606a10672c4e1679d9f0edd61f5eab11e3b0d9e87b5ab6f4cf, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:74:21:63:f7:e9:6a:59:9e:d5:3d:7c:4f:e7:
                    44:e4:cc:17:93:be:f2:d9:38:b5:d1:8a:11:61:27:
                    a8:83:27:4d:88:84:e5:26:1a:fc:31:b8:f3:2f:94:
                    7d:5e:20:ed:93:4a:54:76:32:58:25:29:5b:ad:6f:
                    65:0b:a5:28:64:dc:d2:b5:04:13:ef:d9:91:0c:7a:
                    68:65:34:ba:66:4c:9f:65:7c:fb:39:73:af:aa:b4:
                    b1:ee:61:09:bb:fc:81:79:79:52:7d:9e:7a:81:3c:
                    e0:78:83:e3:9d:c3:71:23:c0:0c:cd:af:10:4b:a6:
                    42:6d:08:a3:f6:33:3b:54:7c:4f:d6:af:eb:1f:b9:
                    12:2f:0e:9c:69:cb:56:94:74:ff:b8:14:14:55:f7:
                    fa:4d:19:b1:23:46:23:bb:3f:39:5e:20:92:34:81:
                    5c:d1:e7:13:9d:88:24:cf:33:bd:e5:37:5d:76:8e:
                    3c:06:46:61:cc:98:d5:a6:df:27:d2:2f:18:86:b5:
                    cf:e6:8e:86:4a:8e:30:f9:23:e5:1d:27:9c:70:5e:
                    24:54:9c:f9:e5:6f:3e:51:17:ff:9b:61:b6:36:52:
                    79:4a:b4:08:ec:d5:23:14:0c:2b:cd:2a:0a:a8:dd:
                    bb:19:40:6b:d1:2d:8b:cc:17:ab:6a:56:b5:17:d0:
                    f4:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:C9:FC:53:5E:99:08:D8:4B:68:78:BB:F7:07:23:DF:4B:20:EC:6C
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/90d62abd-55d6-4d53-9bfb-b5e20bc6d802.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:612::/48

    Signature Algorithm: sha256WithRSAEncryption
         0e:13:e8:35:f2:c8:fd:91:55:83:c7:72:5a:41:2d:30:9f:0e:
         3d:94:f7:89:5d:90:b5:1a:90:f3:6f:6c:74:58:3d:92:f5:11:
         68:92:a6:89:f7:a9:df:7e:00:6c:bd:83:94:d7:46:6e:d3:d6:
         b4:20:ee:b9:aa:c3:f5:13:c8:80:73:19:fa:79:96:60:e8:f0:
         87:a0:35:c8:31:61:18:66:34:34:b8:98:6b:01:dc:c2:67:15:
         60:07:36:45:7b:86:e2:40:6b:d6:ef:71:31:b6:6a:7d:d1:91:
         5f:c3:0a:13:4b:d1:bf:2c:aa:c4:d5:6d:f3:e8:14:2f:4d:33:
         90:4d:dd:0d:a6:a6:31:35:ca:28:2f:a9:35:d7:a8:c8:8f:bd:
         68:3b:06:bd:c1:53:ec:9f:1d:cb:4e:3d:61:81:29:46:0d:58:
         52:fa:1d:42:e1:e5:d9:6f:9e:09:e4:a4:1b:ed:39:3b:fa:45:
         a9:75:e6:2b:c3:f6:a6:ed:4e:a7:7f:22:37:1a:f5:1f:21:e6:
         bb:a7:1a:38:ff:33:ec:44:a3:b5:65:5b:f9:e7:15:46:d7:af:
         ed:09:f4:3e:88:ee:4c:05:83:98:05:75:fd:83:2c:a1:97:77:
         8d:5a:1d:55:9c:6b:23:12:8b:db:64:07:dd:62:43:69:75:0c:
         54:2e:16:61
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jun 6 04:44:43 2025 by rpki-client