Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/18cdfa47-85de-4602-bfd8-f6afe891d51b.roa
File:                     18cdfa47-85de-4602-bfd8-f6afe891d51b.roa (raw, json)
Hash identifier:          TVgRH/yqIh63uFLz/QHjDJBCHL/YnngTDCWDsBY+Zs0=
Subject key identifier:   41:D6:F7:A0:DC:85:CA:07:E2:1A:5D:DA:1E:4F:83:92:07:79:12:E6
Certificate issuer:       /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial:       81EFB1288170280774BFC8B443AB33FBA2C30E
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/18cdfa47-85de-4602-bfd8-f6afe891d51b.roa
Signing time:             Fri 29 Aug 2025 18:52:54 +0000
ROA not before:           Fri 29 Aug 2025 18:52:54 +0000
ROA not after:            Fri 03 Oct 2025 23:59:59 +0000
asID:                     801
IP address blocks:        2631::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Sep 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            81:ef:b1:28:81:70:28:07:74:bf:c8:b4:43:ab:33:fb:a2:c3:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
        Validity
            Not Before: Aug 29 18:52:54 2025 GMT
            Not After : Oct  3 23:59:59 2025 GMT
        Subject: serialNumber=28815137348216433ed155931e14540876bbceb6888c5005ee885bc3a9572fc5, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:43:62:63:9e:38:3a:28:82:a0:5a:5e:5c:a3:
                    bb:82:6d:6d:89:10:e9:bd:6b:03:51:1e:a4:51:e9:
                    43:7d:02:39:22:d3:60:86:00:2b:fe:56:85:14:eb:
                    63:87:71:eb:b4:64:89:1a:d7:7b:0b:79:03:93:57:
                    26:a0:59:48:b1:01:6f:d2:0c:66:3d:e0:fe:9d:56:
                    d3:3e:99:46:bf:36:ce:b6:e6:56:13:cb:71:33:79:
                    11:e5:37:45:cf:3a:b6:2c:2d:00:7b:3f:93:00:26:
                    18:34:ee:f3:98:23:3c:95:a9:8a:48:ac:bc:30:16:
                    f4:89:46:46:0f:dd:5a:4a:75:a5:80:53:c5:54:92:
                    77:fb:9e:69:f8:e5:92:b9:94:dc:ec:78:18:2b:9c:
                    30:bc:b4:de:1c:de:71:46:0c:9d:d9:dd:c2:17:5c:
                    2b:d7:be:bf:60:9e:79:d2:e4:35:12:24:d3:92:df:
                    c0:be:b1:0c:ab:44:f9:a7:47:21:1b:ff:35:0c:7d:
                    5a:87:de:fa:8d:89:e2:34:d0:ba:b3:05:ef:21:4b:
                    86:38:c5:81:21:b5:18:7a:eb:1a:fa:e4:7e:21:db:
                    20:07:67:86:2f:49:1e:eb:dc:dd:f5:70:95:80:a3:
                    84:d6:b8:27:56:e9:f3:60:eb:50:bc:da:50:8f:80:
                    3b:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:D6:F7:A0:DC:85:CA:07:E2:1A:5D:DA:1E:4F:83:92:07:79:12:E6
            X509v3 Authority Key Identifier:
                keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/18cdfa47-85de-4602-bfd8-f6afe891d51b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2631::/48

    Signature Algorithm: sha256WithRSAEncryption
         56:be:d1:3b:f9:ab:8b:ff:9c:37:05:dc:d4:46:b0:5a:eb:dc:
         1f:e8:f9:6a:63:09:cd:2b:dd:5c:da:f0:3e:d1:80:18:18:52:
         a6:72:60:eb:af:2c:c6:d0:a0:d3:d8:2d:00:20:45:51:4d:4d:
         7f:a6:96:b8:b6:5a:7b:b8:89:77:bd:eb:3c:39:93:51:8a:4b:
         df:cc:6d:93:36:26:dc:d6:34:73:8d:14:03:79:48:1f:8c:0c:
         a7:a5:00:73:37:4f:59:a2:60:32:f5:ea:ba:f2:eb:9f:f3:8d:
         10:47:20:26:ce:14:e5:ca:1f:2e:19:66:48:83:a5:a0:b3:6e:
         43:46:86:34:43:ba:66:32:74:3e:bb:55:10:4c:3e:fe:b9:39:
         1c:56:f5:d6:02:a2:3d:ce:37:82:16:96:ef:60:3f:43:aa:36:
         30:74:f4:a2:5b:f2:49:4f:cd:ef:67:ab:85:df:11:b6:a2:58:
         27:ab:41:9d:e4:fd:2f:db:c5:a9:68:7d:3b:1f:e2:f5:ac:cc:
         05:e1:99:19:69:0f:e2:ea:56:9b:bd:3d:0a:d6:70:12:b1:be:
         9c:c8:11:f7:3a:ba:53:a5:2a:5f:ba:b7:cb:7b:75:52:9c:de:
         80:50:9e:62:64:60:53:4c:2e:ea:fc:06:86:2c:15:5a:df:3f:
         34:19:6e:e4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Sep 19 10:39:35 2025 by rpki-client