Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/7eff8448-121e-4d53-91a5-ae9c96443ba5.roa
File:                     7eff8448-121e-4d53-91a5-ae9c96443ba5.roa (raw, json)
Hash identifier:          DxcWiyzjLgDKNwrTIuBIf4ttHf/6GoYl23kVUUxbUWM=
Subject key identifier:   ED:56:1D:69:26:60:BF:AB:89:F6:C5:BE:9B:42:4C:95:33:97:5D:33
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       74CA4D9EB2080E9255E3835E55855F6F27C80534
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/7eff8448-121e-4d53-91a5-ae9c96443ba5.roa
Signing time:             Sat 26 Apr 2025 00:51:19 +0000
ROA not before:           Sat 26 Apr 2025 00:51:19 +0000
ROA not after:            Sat 31 May 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        173.82.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:ca:4d:9e:b2:08:0e:92:55:e3:83:5e:55:85:5f:6f:27:c8:05:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Apr 26 00:51:19 2025 GMT
            Not After : May 31 23:59:59 2025 GMT
        Subject: serialNumber=5bef4bc40429dc97af558da500b8fecbb17af3d0d72218974c9944fb717f5678, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:55:17:d1:f2:94:1a:89:98:db:ff:53:6d:7a:
                    bf:0d:e4:31:8e:5e:65:e0:e0:0c:5e:fc:a6:0e:a4:
                    75:6f:f8:7d:4a:27:43:57:28:7d:94:09:2d:19:89:
                    7f:19:30:1d:5e:1d:53:05:7a:3a:8c:7f:28:da:47:
                    6c:38:f8:03:84:a2:0d:fc:bf:f2:0c:5d:1d:28:ba:
                    65:a5:f8:74:dc:11:c3:6d:e9:11:a5:44:8e:90:ce:
                    ff:dd:b4:88:ad:41:cc:45:68:b2:71:ac:14:dc:6c:
                    6c:2d:5c:d3:12:dc:34:89:d2:79:67:72:ff:3f:df:
                    ec:49:a7:47:7b:c2:d4:d7:21:cb:3a:4b:5d:cf:a1:
                    23:7f:83:5f:01:06:26:82:28:07:63:90:a1:d4:5a:
                    82:64:bc:55:70:5e:d1:b9:b1:d2:8e:4f:63:62:d2:
                    f9:82:fb:bf:dc:09:ba:07:d0:d1:0e:26:6b:c3:bd:
                    75:e9:82:fc:9f:ca:7c:24:ec:30:58:37:fc:c9:e6:
                    be:99:1b:d0:eb:80:a6:b6:97:80:36:9c:fb:2d:90:
                    17:f7:e2:a5:f0:d3:7a:c3:9d:50:09:a2:40:02:7c:
                    a0:fa:77:92:90:d3:40:e7:02:63:0a:55:a0:11:0f:
                    1f:47:d9:34:0b:de:9e:90:33:da:21:16:0b:04:55:
                    a2:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:56:1D:69:26:60:BF:AB:89:F6:C5:BE:9B:42:4C:95:33:97:5D:33
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/7eff8448-121e-4d53-91a5-ae9c96443ba5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.82.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:8f:da:63:8e:90:79:f0:51:cf:eb:38:c1:6b:7f:47:47:30:
         eb:c0:33:67:9f:ba:30:3f:03:fb:ce:1d:c0:29:d5:70:34:8e:
         f8:ca:33:33:1e:44:70:56:93:96:f3:6d:11:a8:2d:11:98:09:
         9c:69:f6:de:47:69:e1:80:2f:45:4f:5a:a1:b3:94:50:b2:32:
         9f:dd:d7:f4:c1:65:e1:a0:bd:83:10:c0:a4:f1:12:8c:9a:d5:
         3f:4c:46:19:af:d4:dd:68:d5:e0:0d:06:de:34:11:2a:fa:cc:
         b3:f0:97:c8:de:8e:3c:3f:68:9c:bf:64:12:a0:91:ca:da:dc:
         5f:0f:ea:0c:07:30:a8:04:70:ab:d3:35:3e:80:86:22:48:3a:
         a6:4b:60:93:2e:97:0b:e9:86:7e:6f:b8:dc:b4:cc:ea:27:c0:
         0b:27:cb:bf:da:22:fa:93:62:fb:fb:0a:62:96:7b:cf:76:70:
         7b:48:27:6a:42:d0:a1:e1:21:f4:a7:6c:d3:ea:39:4f:82:52:
         0c:2d:75:1d:51:10:b6:1d:53:2e:19:35:87:9d:56:cf:de:48:
         1b:55:3e:38:b2:82:63:7c:65:02:c2:01:e9:3b:3e:a8:5f:1b:
         0e:f9:fb:5a:9e:97:fa:c2:95:6b:ac:f8:20:64:e9:48:d0:2a:
         8f:2c:6c:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:18:16 2025 by rpki-client