Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b15c61b5-30c1-450b-842d-8b951168014c.roa
File:                     b15c61b5-30c1-450b-842d-8b951168014c.roa (raw, json)
Hash identifier:          /9AlL9OBkfIICthBWa8K8VkL9zDXjQLNCYw8V4bpZXk=
Subject key identifier:   E4:09:56:F2:D4:77:F4:8B:89:57:CE:46:7F:AC:D6:FE:F2:02:DC:43
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       58104D72C52D45FEB3779F7AD505804131CD545F
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b15c61b5-30c1-450b-842d-8b951168014c.roa
Signing time:             Fri 15 Aug 2025 15:10:48 +0000
ROA not before:           Fri 15 Aug 2025 15:10:48 +0000
ROA not after:            Fri 19 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2605:9cc0:c07::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 21 Aug 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:10:4d:72:c5:2d:45:fe:b3:77:9f:7a:d5:05:80:41:31:cd:54:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Aug 15 15:10:48 2025 GMT
            Not After : Sep 19 23:59:59 2025 GMT
        Subject: serialNumber=78175268426bf1a7cc096470bd039c4eb0beb8c3602bce34b5c625d9820352d2, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:68:31:3c:dd:24:e8:f2:57:5c:ac:d1:07:0b:
                    b1:dc:9e:b6:a8:49:03:8d:52:b7:a3:cc:7c:e1:8b:
                    79:59:ad:09:66:7e:2d:01:ed:85:83:c3:85:c9:19:
                    f3:56:30:2e:0d:04:36:cc:62:30:57:82:76:1f:ba:
                    2a:7e:84:62:a0:ee:67:64:ed:0d:51:ed:29:f6:7c:
                    20:32:0f:8e:dd:29:52:97:66:d1:ff:80:a4:89:6c:
                    61:0f:a5:e9:d4:cb:68:37:25:73:3a:4d:22:b1:03:
                    f3:c3:65:e6:50:37:90:0a:5f:e8:04:6b:ae:38:da:
                    23:0b:12:76:25:74:8c:a2:b1:24:5e:56:a3:81:ad:
                    db:0a:fe:71:12:c4:1c:9d:87:2a:76:09:83:7c:39:
                    2f:33:df:a3:11:2c:01:92:b6:73:94:2d:60:67:dd:
                    ac:d2:ea:d2:a1:b4:ce:e6:e2:1b:88:39:ff:ed:34:
                    62:5f:e7:06:f9:49:75:05:f4:c2:e6:8a:bf:2d:fb:
                    59:61:d4:1e:ff:45:72:2b:37:8c:d2:66:07:61:7e:
                    c5:23:c5:a9:e6:23:e0:3a:c9:60:fb:d6:ee:ec:77:
                    ff:28:54:a9:50:36:c1:32:bc:10:e5:76:db:23:ce:
                    11:93:5c:83:96:7b:fa:a1:2b:7d:1c:66:ee:8f:79:
                    7a:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:09:56:F2:D4:77:F4:8B:89:57:CE:46:7F:AC:D6:FE:F2:02:DC:43
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b15c61b5-30c1-450b-842d-8b951168014c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:c07::/48

    Signature Algorithm: sha256WithRSAEncryption
         95:ea:bf:ee:35:52:e3:cc:61:ed:90:4c:2b:e3:96:d5:2f:79:
         40:d7:1c:6d:d3:b8:f9:cb:9c:10:05:0e:08:ac:41:d3:ca:e8:
         b4:e4:3c:93:f2:8f:2f:4a:8b:5b:b8:79:06:52:2c:d6:10:17:
         55:cd:de:f9:12:c2:b7:9a:32:fc:bc:c0:c7:be:c6:4f:bd:b5:
         d5:06:0e:14:02:17:55:6b:2f:dd:b4:d4:bb:6c:27:85:b6:b5:
         0e:2b:98:21:5f:85:d7:3b:5c:85:53:53:0a:de:cb:78:6b:db:
         c6:5c:4b:c6:41:64:ad:c2:1a:88:94:25:58:84:e8:75:98:3d:
         e6:95:0b:87:bf:c2:a0:50:5f:ae:fc:d1:ba:0c:96:2b:43:02:
         19:f5:a2:90:a9:5a:22:ec:d7:22:6d:f2:f0:68:5a:25:af:10:
         75:05:de:e3:81:50:76:eb:bf:2b:ae:cf:a7:1e:80:f2:f2:cc:
         6d:08:1b:f6:54:8d:ea:5d:6b:3b:39:b5:56:11:e9:45:b1:cd:
         3d:56:23:30:09:03:6c:1e:c7:3c:52:30:a8:5b:9c:d0:04:de:
         4f:02:96:5a:52:e2:f6:74:f3:0b:6b:79:cc:4d:92:cb:b3:de:
         1a:92:5e:1d:ed:59:1f:3e:50:5f:db:25:93:7f:67:c4:ca:c5:
         c9:dc:28:5a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Aug 20 10:40:32 2025 by rpki-client