Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/c319ba0a-ea65-46fe-845d-c4e2bb1f097e.roa
File:                     c319ba0a-ea65-46fe-845d-c4e2bb1f097e.roa (raw, json)
Hash identifier:          BqHDn0Ad2s9cnGJL4u1N/8RhkjPWbXQAsVVz1tDtW8o=
Subject key identifier:   EF:7A:4A:AF:33:62:90:7E:0D:D5:11:F3:3F:58:3E:57:71:BF:E9:99
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       395CDE0E2B264E31B81888E6283291D910AF1D
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/c319ba0a-ea65-46fe-845d-c4e2bb1f097e.roa
Signing time:             Sat 31 May 2025 00:20:42 +0000
ROA not before:           Sat 31 May 2025 00:20:42 +0000
ROA not after:            Sat 05 Jul 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2605:9cc0:648::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:5c:de:0e:2b:26:4e:31:b8:18:88:e6:28:32:91:d9:10:af:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: May 31 00:20:42 2025 GMT
            Not After : Jul  5 23:59:59 2025 GMT
        Subject: serialNumber=d753dbc3c3d254aa6a2b8b1dae973de0e6b4a3488f6c1ad3115ef2c7dd87f4af, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:17:f6:ed:40:68:77:54:ce:67:7c:2c:7a:51:
                    f2:b0:6f:a8:4f:d9:d3:58:6e:b2:e0:5d:79:14:28:
                    fa:54:37:51:4a:33:1a:c2:13:e0:19:57:d8:3f:a9:
                    58:cd:28:49:de:21:af:0f:60:f1:09:9e:2b:f5:de:
                    84:94:98:f6:66:1e:f5:3e:0e:66:30:68:d7:e6:ce:
                    0c:f2:c7:28:78:9f:35:d6:49:44:e3:cc:04:10:b8:
                    bf:7e:fa:44:88:65:78:31:87:bf:21:26:85:3f:36:
                    a6:87:9f:33:2b:b0:a0:e9:70:01:6f:1d:b0:70:fb:
                    0f:a3:95:0b:07:5b:c0:9f:a9:47:bc:b7:c8:58:bf:
                    27:47:88:93:81:ea:17:27:d9:46:0e:44:8d:42:4b:
                    56:cc:ec:61:12:d2:8d:36:31:85:a3:8e:91:14:59:
                    bd:4f:62:3e:2a:42:f5:fa:ba:e6:e8:d2:cc:d1:c9:
                    5c:d4:e6:a4:74:89:c2:40:92:85:f5:c1:41:3d:a0:
                    ac:b0:df:65:d1:42:3e:60:51:5b:e2:78:6d:d7:1b:
                    a0:58:67:33:e8:33:7a:2d:01:d0:5a:c3:8a:63:dc:
                    8b:d3:30:62:58:4c:ec:bf:42:df:97:b3:6b:17:5c:
                    10:29:93:31:bb:e8:25:60:be:7a:c2:17:2d:1f:e1:
                    38:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:7A:4A:AF:33:62:90:7E:0D:D5:11:F3:3F:58:3E:57:71:BF:E9:99
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/c319ba0a-ea65-46fe-845d-c4e2bb1f097e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:648::/48

    Signature Algorithm: sha256WithRSAEncryption
         2b:6c:53:37:5a:f9:d8:19:47:e3:4c:64:78:a3:ee:64:26:eb:
         4d:f7:22:11:d8:c7:3d:ea:4c:78:a6:0d:53:51:0f:ce:bd:4e:
         e3:49:36:e9:86:80:a0:3a:47:47:3c:1c:9c:56:da:3b:9e:49:
         2d:a0:15:33:cc:cd:f8:46:99:32:40:3f:c6:ce:87:00:2b:78:
         3f:22:68:5d:a3:dd:57:21:ef:de:5c:02:e2:4e:d4:0d:ec:29:
         a7:f4:bc:07:6e:9b:59:95:86:81:75:ed:22:2e:bf:c4:64:83:
         63:3c:1c:12:54:ab:61:e9:8f:66:4a:b0:8a:e6:ab:b0:e1:00:
         42:2c:e8:6c:6e:d4:73:20:27:56:a6:97:dc:14:0c:f3:6f:39:
         2d:8f:a1:4b:16:58:e4:2a:a1:9e:b2:57:ed:f1:a2:9d:c6:96:
         16:d2:9b:98:d5:2b:59:9b:28:bc:92:e5:b6:1d:97:23:33:70:
         ba:1b:52:66:50:d6:72:62:96:6e:47:ff:d7:e8:d5:46:5f:fb:
         2a:c2:fd:d9:3c:7e:38:ad:77:dc:ca:f9:38:01:86:1b:c1:43:
         e0:2b:ac:13:84:13:fc:87:54:53:0a:4a:4a:5f:34:49:84:f6:
         8f:95:c7:db:fb:86:f5:cb:d7:b1:20:32:d0:20:77:29:57:8f:
         60:d9:c3:a6
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 6 03:32:10 2025 by rpki-client