Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/1fdd1f5d-ca2a-40b7-8516-8e8b74e0eace.roa
File:                     1fdd1f5d-ca2a-40b7-8516-8e8b74e0eace.roa (raw, json)
Hash identifier:          w1GuDvaDREZUSjJXd5Uj16WYXG6JG859IQps5Q0Jclc=
Subject key identifier:   81:88:FC:BB:89:04:90:6D:9D:6C:F4:9D:92:0B:89:D8:67:2F:08:E5
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       601FC98080EDFDDB11DB797CC1DCF6BF2A8EDF64
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/1fdd1f5d-ca2a-40b7-8516-8e8b74e0eace.roa
Signing time:             Fri 11 Jul 2025 18:20:14 +0000
ROA not before:           Fri 11 Jul 2025 18:20:14 +0000
ROA not after:            Fri 15 Aug 2025 23:59:59 +0000
asID:                     8987
IP address blocks:        2605:9cc0:f03e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:1f:c9:80:80:ed:fd:db:11:db:79:7c:c1:dc:f6:bf:2a:8e:df:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Jul 11 18:20:14 2025 GMT
            Not After : Aug 15 23:59:59 2025 GMT
        Subject: serialNumber=faf93f670f9cb92f9b51c5a94194dab3abc0ab7d88835e7e14bfefb947991d12, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:7e:02:25:21:ec:b6:89:b0:02:71:f0:28:4a:
                    96:b5:88:e0:58:64:a1:54:78:0b:7c:5f:97:8c:69:
                    bf:7f:26:17:64:62:63:9a:0d:f0:b9:34:ff:4f:a5:
                    2f:4a:e7:53:47:24:da:2f:05:ff:4e:17:5b:fe:2d:
                    61:30:f2:76:76:f1:0d:be:98:39:79:01:a2:f3:38:
                    0c:e0:c9:26:ae:30:5a:ed:c9:19:00:3c:b9:56:db:
                    7e:7b:bf:77:21:cf:fc:00:ec:79:cf:c4:bd:61:31:
                    a8:5a:67:e8:b0:3f:62:81:3b:29:5a:8a:1f:45:f2:
                    2c:5a:fd:13:14:f0:5b:51:6c:30:ab:ba:9e:06:65:
                    6f:80:7c:6c:e4:15:92:fa:a6:5e:de:56:1f:9c:b9:
                    99:80:37:d3:f2:20:a5:14:4f:87:54:ee:6d:93:76:
                    96:3b:b4:0f:3e:f4:9c:31:b6:5c:c8:bb:8e:c5:26:
                    5b:eb:8c:73:68:41:80:d5:c9:2a:13:fe:38:eb:ad:
                    5b:a2:6b:e5:52:2b:b6:a5:86:9b:a5:83:af:a3:cb:
                    66:3d:d7:51:7f:ff:7a:f3:9f:ee:b1:66:cb:db:b0:
                    3f:f5:4c:ec:1e:6b:06:6f:b4:e7:fa:04:42:b0:0e:
                    4c:99:12:9a:97:47:ba:53:ec:32:a4:0d:39:ea:5d:
                    7a:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:88:FC:BB:89:04:90:6D:9D:6C:F4:9D:92:0B:89:D8:67:2F:08:E5
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/1fdd1f5d-ca2a-40b7-8516-8e8b74e0eace.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:f03e::/48

    Signature Algorithm: sha256WithRSAEncryption
         8e:39:aa:1c:67:2e:01:a9:f6:79:b2:d7:30:1a:f3:27:91:51:
         e8:08:0a:af:b9:10:4d:91:12:b8:63:fb:46:00:52:d3:c9:ed:
         71:3f:62:d2:fb:dc:f8:31:b6:77:8b:69:8c:4a:76:56:31:c1:
         03:1e:c2:99:45:14:83:d5:ed:39:b4:7c:47:ca:ca:6a:b3:99:
         1b:54:6a:f3:a1:39:12:b5:f4:a7:c5:50:fd:11:68:a0:73:62:
         7a:d3:63:17:5f:f6:48:2f:ca:97:b9:63:96:a0:35:77:5a:5a:
         1d:87:3e:35:f8:af:f1:b5:8d:93:8d:a2:13:6a:15:11:8a:b9:
         94:a4:22:9c:dd:07:46:62:94:d7:20:db:c7:ee:4e:cc:f3:1e:
         65:74:41:be:e9:15:11:4a:85:d1:1b:51:d9:03:fb:0f:4f:6b:
         67:5f:91:9e:47:f9:ef:f5:72:7c:b7:0f:aa:4e:a7:a6:b0:20:
         bd:80:0f:ee:0a:76:aa:be:b8:4a:d1:e3:f0:84:f7:4d:2f:04:
         f1:b3:ba:c0:c5:76:d7:91:90:33:b4:e6:ee:75:fb:7c:c9:5e:
         62:f9:42:3f:9d:8e:e4:25:30:99:f4:ec:75:14:76:02:b4:18:
         b7:09:0b:b5:3d:33:a2:43:e7:b7:84:ea:9a:20:20:6d:71:00:
         e3:46:ef:4b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Aug 4 14:07:03 2025 by rpki-client