Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/6f81a06d-c815-4f26-a7e4-79ad12b19938.roa
File:                     6f81a06d-c815-4f26-a7e4-79ad12b19938.roa (raw, json)
Hash identifier:          QxScxhFW1eJpbudWMkdA1j9nlLoAVhNUNIyMHQTxhLo=
Subject key identifier:   1E:7A:AC:20:DC:0B:59:15:54:1D:78:F4:1C:55:9D:9B:3D:9F:2E:26
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       4078DBADA3196674DD4D91D2CC543B85185A630F
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/6f81a06d-c815-4f26-a7e4-79ad12b19938.roa
Signing time:             Tue 15 Apr 2025 00:50:15 +0000
ROA not before:           Tue 15 Apr 2025 00:50:15 +0000
ROA not after:            Tue 20 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        173.82.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:78:db:ad:a3:19:66:74:dd:4d:91:d2:cc:54:3b:85:18:5a:63:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Apr 15 00:50:15 2025 GMT
            Not After : May 20 23:59:59 2025 GMT
        Subject: serialNumber=6317d4153c5c117e188af6f42afc92e34a02919a12ad2c25c955215780fa414f, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:83:f2:5e:31:92:55:f0:78:f2:06:1e:c0:4d:
                    42:0e:75:98:f0:5c:45:9e:ee:18:59:6e:d7:67:37:
                    e8:44:2b:5f:80:11:3f:2b:ed:7a:b4:b7:a3:4d:b4:
                    61:0c:a1:5d:0e:ef:ea:ab:94:d3:be:c8:aa:68:0f:
                    2e:ee:0d:3b:8e:73:33:f9:ca:48:d6:c5:4a:d7:6d:
                    02:d3:87:9c:68:d5:b6:c8:c3:a0:da:fe:b8:9b:e6:
                    56:70:49:59:7f:bb:f6:28:59:8b:11:e7:51:3a:f1:
                    19:d2:27:46:a7:92:83:59:81:49:ab:e6:62:bc:b4:
                    eb:94:67:51:d6:60:cb:7f:78:dc:c7:d4:69:2f:93:
                    82:1f:32:ad:b4:2f:80:80:08:aa:a8:de:95:dc:06:
                    d0:d2:d7:83:94:f9:08:af:2f:26:46:b3:24:d6:3b:
                    68:da:47:5a:99:22:42:9e:81:2a:e0:0f:7f:d9:d9:
                    9f:44:15:b4:6b:64:91:53:53:6a:54:3e:0c:ac:29:
                    61:77:5d:72:a6:44:6f:86:e3:c1:7f:f0:88:d5:91:
                    bc:c0:96:f6:ad:38:bc:de:87:8a:7a:45:89:29:1a:
                    55:a7:07:d6:7c:65:1e:ff:7a:11:b3:7f:fe:34:06:
                    5e:e3:09:f1:5a:39:54:20:6c:54:ee:3c:42:21:b8:
                    dd:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:7A:AC:20:DC:0B:59:15:54:1D:78:F4:1C:55:9D:9B:3D:9F:2E:26
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/6f81a06d-c815-4f26-a7e4-79ad12b19938.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.82.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:42:12:2f:68:c3:52:7f:1a:43:d7:ef:84:87:47:14:35:ca:
         7b:62:87:a9:61:31:30:f3:97:ec:3b:6c:2a:f4:92:5e:b9:e8:
         1c:26:5a:6d:0e:e1:70:ac:3e:fe:ca:a4:14:58:7c:77:8e:bf:
         f4:a6:3c:ba:60:9a:8c:78:eb:1f:bc:1d:db:fc:61:6c:98:4e:
         ba:e5:ea:aa:9e:3e:fa:8e:77:a4:79:33:bf:ca:f3:f5:09:d2:
         d7:0b:d6:14:0d:b5:08:2c:38:7c:19:ce:0b:87:cc:31:de:2e:
         06:50:b4:08:ba:6b:dc:76:6d:c4:7c:04:ce:37:04:90:79:4b:
         9f:36:26:ea:25:86:e5:08:4d:b1:27:25:bc:9f:0a:cd:23:b8:
         3e:f9:e1:31:e1:19:dc:e2:d4:32:a2:a9:64:6c:d6:06:01:6d:
         d3:08:f0:a0:0c:98:f1:36:72:9c:d4:a6:e5:01:52:a2:48:2e:
         a7:f7:53:19:6b:53:a6:81:11:e8:92:db:3d:1a:61:26:09:71:
         a5:aa:9f:88:62:d5:80:31:54:a7:3b:60:09:6f:f8:f0:10:d0:
         70:45:07:ad:ae:b7:a9:e2:c6:69:f6:52:53:bc:91:4a:e7:a1:
         19:6d:d1:e9:9f:23:b3:54:93:ed:61:a4:10:fc:c4:2c:1a:f4:
         d5:56:ca:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:39:21 2025 by rpki-client