Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/e570facf-19db-4ef7-a2da-388bd82ef3eb.roa
File:                     e570facf-19db-4ef7-a2da-388bd82ef3eb.roa (raw, json)
Hash identifier:          EEQ+9d5wXQe7aBRGAiPryWnQ1QYMGvy+OqN2M3wSwDk=
Subject key identifier:   B4:9E:AD:AA:F2:25:7D:17:08:1D:90:3D:AF:66:7A:9A:41:FF:B9:01
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       57D5AF7E5EA9A879A299E041BE38B3D72B2CF943
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/e570facf-19db-4ef7-a2da-388bd82ef3eb.roa
Signing time:             Thu 18 Sep 2025 20:15:48 +0000
ROA not before:           Thu 18 Sep 2025 20:15:48 +0000
ROA not after:            Thu 23 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2605:9cc0:2800::/41 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Sep 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:d5:af:7e:5e:a9:a8:79:a2:99:e0:41:be:38:b3:d7:2b:2c:f9:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Sep 18 20:15:48 2025 GMT
            Not After : Oct 23 23:59:59 2025 GMT
        Subject: serialNumber=a9f6b2b996a6ca7ca48d051ebc0c8a7ec18b30c354823639c3ff24d40e8082fd, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:72:20:8e:1f:1f:cd:07:81:8d:b4:31:e1:9a:
                    95:33:bc:e9:5f:91:ac:61:b5:82:5b:31:0a:62:dc:
                    aa:d4:7b:35:c1:56:b9:53:87:a9:04:59:65:da:e6:
                    e1:3b:25:e0:ba:b2:cc:01:89:0b:f4:1e:1f:4e:c2:
                    dd:e4:14:c5:e9:af:31:2e:c5:e9:75:3f:49:a7:d7:
                    4d:09:e2:15:95:35:ca:65:9d:f3:b0:58:68:c8:d1:
                    5d:5d:3d:69:0f:5a:bc:0b:53:9a:b9:63:66:08:ba:
                    31:3e:5e:06:1b:4b:4c:ff:73:00:51:3d:d4:4f:ab:
                    b6:27:d6:27:2e:77:51:cc:f5:b5:dd:6e:7f:8f:d2:
                    4b:68:ec:54:ef:35:8a:c4:3d:b7:69:a3:75:ab:f6:
                    9c:0a:4f:56:14:bd:60:90:68:5b:c4:48:89:14:62:
                    3a:36:92:92:c3:9d:83:13:81:6d:7b:90:c6:b1:88:
                    95:f6:81:ff:ca:34:e1:2e:49:87:2d:e4:85:05:d3:
                    e0:fb:6c:04:f2:a1:b4:44:97:cb:02:68:f6:8a:65:
                    3f:a4:44:27:d0:ee:c5:39:ef:10:bc:a0:00:5a:dc:
                    ef:c8:6d:35:26:bf:2c:42:f6:98:46:91:ef:25:49:
                    a5:1d:57:41:f9:e3:84:3c:1a:53:84:5c:f9:77:a4:
                    36:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:9E:AD:AA:F2:25:7D:17:08:1D:90:3D:AF:66:7A:9A:41:FF:B9:01
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/e570facf-19db-4ef7-a2da-388bd82ef3eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:2800::/41

    Signature Algorithm: sha256WithRSAEncryption
         51:0e:d0:ea:42:53:5c:d6:16:45:b3:fc:83:cd:bf:18:5c:2c:
         64:a8:79:a4:d1:f3:de:13:ba:7f:dd:b5:10:72:17:83:e2:55:
         7b:04:4c:a3:32:76:c0:4b:96:1a:57:93:ab:8e:a9:dd:c9:c2:
         a9:57:97:a6:2b:e6:61:c5:dd:56:1d:a4:40:3f:ea:b2:9f:b4:
         cd:2b:35:f6:ed:a7:4d:4a:5e:95:24:6b:1d:ec:4c:55:d3:e7:
         0a:55:5f:83:ba:9e:5d:b7:c8:61:3b:7a:3a:f6:03:c4:96:d7:
         41:91:81:78:19:df:ce:b2:5d:32:de:6e:fb:4e:4f:b2:b3:ad:
         b2:0e:f8:49:98:02:2f:8e:01:25:7c:db:73:0c:c7:34:b6:81:
         07:40:99:0f:8a:35:ac:54:3e:03:01:0e:b4:6d:5c:54:be:70:
         13:71:97:ee:95:03:74:bb:8a:61:b7:71:f5:9a:66:e6:48:f2:
         4a:de:aa:69:ae:0d:da:4e:68:90:31:2f:7e:af:91:c3:8e:d0:
         da:3c:c5:2f:dc:88:73:7d:be:bb:33:75:75:38:09:bc:ed:49:
         92:15:de:8e:4c:a1:36:0c:95:36:8b:4a:91:54:b7:2a:3c:12:
         18:b5:0c:50:aa:e0:1c:89:43:32:6f:5e:99:39:a8:2c:04:7f:
         d6:50:82:96
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Sep 19 00:12:02 2025 by rpki-client