Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/f67723c2-64ad-4374-9b2b-3c1633b90448.roa
File:                     f67723c2-64ad-4374-9b2b-3c1633b90448.roa (raw, json)
Hash identifier:          U5/6nDYFfUeMr2HizgEKPuBq0AjnRcmMW2P2WvlS/xA=
Subject key identifier:   8A:13:53:F5:A8:C5:D6:A2:94:29:57:D5:7E:31:51:A0:20:07:B2:42
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       03FC6409EEB16BC72D6DEFDB9CAEE9C61AFC96CA
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/f67723c2-64ad-4374-9b2b-3c1633b90448.roa
Signing time:             Tue 21 Oct 2025 12:40:12 +0000
ROA not before:           Tue 21 Oct 2025 12:40:12 +0000
ROA not after:            Tue 25 Nov 2025 23:59:59 +0000
asID:                     8987
IP address blocks:        2605:9cc0:39c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:fc:64:09:ee:b1:6b:c7:2d:6d:ef:db:9c:ae:e9:c6:1a:fc:96:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Oct 21 12:40:12 2025 GMT
            Not After : Nov 25 23:59:59 2025 GMT
        Subject: serialNumber=ee4bc08794692f90871c5e78bf092112c3de8a997a3d004c720ed19fe75a4b82, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:3a:d2:b7:6d:55:7f:9f:2a:07:ff:54:75:0b:
                    63:fb:db:79:3d:db:00:89:bf:53:11:bf:11:06:0b:
                    58:b6:12:5e:b2:fa:4e:96:93:2c:1f:ca:fe:cd:20:
                    1b:41:89:4f:b4:b1:b7:ed:27:24:95:47:f3:ca:82:
                    ad:38:18:38:a4:e2:5f:5c:f4:16:99:32:b2:be:01:
                    d1:0a:88:8c:d4:85:f1:98:ea:3b:8b:2e:5f:b6:6a:
                    7f:f8:d8:22:74:96:cb:94:ce:7f:26:20:1d:2f:49:
                    83:2c:08:d6:9f:e9:01:d0:8f:8d:a9:f5:be:62:d8:
                    8e:7c:5a:56:19:ac:a1:c6:cb:33:b9:e3:0f:ca:fa:
                    0d:5d:53:03:6d:b4:1d:86:cf:a6:95:6e:c7:61:d8:
                    29:98:ed:6a:e8:04:67:f8:6c:fe:ea:ec:cd:db:09:
                    e2:4c:3f:fc:1d:dc:25:6a:15:8a:8d:e7:c6:e9:73:
                    f1:81:ed:2a:af:95:14:e0:a7:86:10:2c:6e:96:c7:
                    25:a1:0f:ac:5e:29:ea:d4:99:da:15:2e:8f:ef:1e:
                    90:31:c2:4c:51:97:79:e6:c5:b6:16:03:7c:da:f9:
                    43:43:90:7f:26:62:a1:30:1c:bf:4b:df:bd:20:bd:
                    e6:d6:bd:10:09:0c:4c:9c:b3:88:1c:55:e2:00:a3:
                    75:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:13:53:F5:A8:C5:D6:A2:94:29:57:D5:7E:31:51:A0:20:07:B2:42
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/f67723c2-64ad-4374-9b2b-3c1633b90448.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:39c::/48

    Signature Algorithm: sha256WithRSAEncryption
         51:30:25:77:de:c5:36:31:6d:ae:4f:d6:e1:b5:54:b8:d3:be:
         54:d9:a9:ee:b1:ed:87:8f:22:36:62:62:70:e2:eb:7d:1e:94:
         c6:6a:35:5f:4a:52:c3:16:a2:94:c4:f7:c1:29:ae:de:95:9e:
         8e:a2:56:59:ef:e8:9d:b1:90:26:4b:91:ca:a8:7b:f5:d0:41:
         e1:4c:4c:04:b3:33:7b:9b:45:cb:3a:94:73:4d:47:b0:32:bf:
         bd:d5:13:c9:63:80:4d:18:6b:79:c2:f2:5c:d9:72:2b:86:23:
         6c:c9:2d:b5:c6:fa:4a:f7:e8:29:49:6f:27:1a:a0:c2:37:b5:
         f7:33:54:9a:6c:17:c7:16:e5:80:94:e1:bf:34:f4:b5:03:05:
         0e:48:37:35:0a:a6:26:79:b2:4f:8b:93:ad:1d:0a:dc:d5:61:
         31:c0:1d:88:c4:28:49:b7:30:ac:0e:ce:37:48:43:82:4e:25:
         b3:55:52:a9:56:df:a6:3d:32:1d:36:9f:af:24:b9:ff:4d:fd:
         9e:4f:3e:9e:32:10:76:4b:c4:21:6c:ea:3c:a7:ca:c2:21:a2:
         e2:56:36:a5:4d:e6:af:45:0a:02:8d:90:29:9b:e9:e4:6a:91:
         27:c6:d8:6b:1a:a9:4a:ce:02:c8:e2:c2:74:c9:1d:8b:27:56:
         4a:23:71:70
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Nov 3 11:13:56 2025 by rpki-client