Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/3191e88d-746d-41d2-84db-9fc65334e5a8.roa
File:                     3191e88d-746d-41d2-84db-9fc65334e5a8.roa (raw, json)
Hash identifier:          nDJydhUTIAGFj1uAgOW64buM2rYnAIPxVVQVPXwums4=
Subject key identifier:   8A:ED:5A:E1:D3:2A:B7:2D:18:64:17:6D:A3:20:5F:2D:DD:11:93:78
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       3505BB86EDE5018D7D96E1FA635DC1C032E3604D
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/3191e88d-746d-41d2-84db-9fc65334e5a8.roa
Signing time:             Wed 21 May 2025 00:50:12 +0000
ROA not before:           Wed 21 May 2025 00:50:12 +0000
ROA not after:            Wed 25 Jun 2025 23:59:59 +0000
asID:                     8987
IP address blocks:        2605:9cc0:100::/42 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:05:bb:86:ed:e5:01:8d:7d:96:e1:fa:63:5d:c1:c0:32:e3:60:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: May 21 00:50:12 2025 GMT
            Not After : Jun 25 23:59:59 2025 GMT
        Subject: serialNumber=c573d45f257ba2bc3e82be5746d038830a9aab0da766f9e1c428053631f9188b, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:e4:f8:95:80:4e:ac:1a:e0:d4:67:b1:ef:3c:
                    39:8f:3b:46:a7:dc:d2:36:bf:94:39:5c:c0:b8:b3:
                    1b:24:9b:ed:6b:8b:46:a3:fc:97:97:55:bb:20:61:
                    28:4b:59:67:eb:b7:bc:21:41:1f:05:6f:ba:a7:44:
                    3f:e4:a8:c8:34:1f:7b:bf:ad:c4:8f:48:ed:fb:ad:
                    11:3d:d7:e9:95:d6:0d:02:f6:84:e3:09:66:94:4b:
                    2c:4d:36:ad:74:93:50:5b:a3:dd:fe:80:78:81:79:
                    05:2f:3e:35:c5:26:03:1f:bf:d9:b8:a2:7e:3f:aa:
                    06:f0:bc:85:c0:e2:4b:7c:0d:be:10:b0:7d:b8:86:
                    27:c1:ec:8d:ff:15:8c:dc:61:be:5d:2c:33:78:3c:
                    be:52:eb:90:0b:84:9c:da:27:e6:be:e4:40:58:8e:
                    e0:d0:8a:29:5b:83:03:60:de:58:46:aa:53:cb:b2:
                    46:75:f8:ed:ce:35:96:b7:7e:34:13:b5:5d:5b:97:
                    91:aa:05:e1:bb:58:42:d5:11:06:18:91:96:59:1e:
                    25:53:b3:19:0a:4a:64:0e:59:99:9c:19:08:d3:cc:
                    b3:2f:ae:74:b3:a1:74:29:68:99:93:b2:bd:0c:15:
                    4b:31:06:ff:41:90:74:2a:ee:81:94:a2:cc:78:ba:
                    c9:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:ED:5A:E1:D3:2A:B7:2D:18:64:17:6D:A3:20:5F:2D:DD:11:93:78
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/3191e88d-746d-41d2-84db-9fc65334e5a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:100::/42

    Signature Algorithm: sha256WithRSAEncryption
         3b:0b:1b:7a:f2:e5:60:ca:da:09:1e:e4:da:61:e8:bd:aa:90:
         db:01:fe:d3:01:75:d0:e1:a9:6b:17:98:c7:65:62:fc:9a:43:
         d1:4c:bb:a8:88:1a:4b:19:35:f4:11:5a:21:cb:ad:93:c9:24:
         7f:a3:89:90:77:c3:bd:40:19:17:65:58:f3:69:4d:10:26:bb:
         0d:ad:bb:01:c7:bd:ce:5b:a8:e1:c3:f5:2b:6d:2d:3e:a4:c7:
         d9:93:5a:62:fa:31:e0:9d:e1:ea:eb:87:99:4a:9d:bf:ef:16:
         8f:28:c6:b5:51:7e:a0:6f:0f:10:58:7a:6f:b4:2f:cf:f6:4f:
         0d:a9:0b:f1:ea:46:45:24:62:a6:44:ca:50:e5:4a:ea:07:22:
         e4:b0:08:fe:0e:cb:d9:21:62:ec:b6:07:27:b5:77:b4:26:c0:
         42:0f:ca:e5:45:64:8b:3f:6e:7f:5f:4d:5e:1d:b7:1b:1b:7d:
         4e:c0:91:9e:1b:8b:97:a7:40:d3:60:b1:cd:e1:27:6f:6c:19:
         43:2e:2e:3a:8d:10:a6:6f:f7:b8:8e:10:3b:1d:24:ef:48:21:
         44:20:61:85:50:2c:5e:c5:61:16:59:ce:a5:2c:9b:ba:08:2b:
         6c:89:95:d7:12:1c:62:9c:d4:c2:bf:69:28:b6:8f:1e:a6:31:
         26:84:31:36
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Jun 16 15:22:52 2025 by rpki-client