Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/af800973-d2a0-4250-88e7-9c8ae26b16ec.roa
File:                     af800973-d2a0-4250-88e7-9c8ae26b16ec.roa (raw, json)
Hash identifier:          tGL24+pnLSmYiaMgubTykSsNM784LjzOwqcMqdCryKA=
Subject key identifier:   C3:00:54:13:57:72:A4:A6:71:1C:6E:0A:2B:28:B2:5A:F6:00:E1:81
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       562325F1BF58F4105F6404AA597EFC58C3C3302C
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/af800973-d2a0-4250-88e7-9c8ae26b16ec.roa
Signing time:             Mon 04 Aug 2025 17:28:08 +0000
ROA not before:           Mon 04 Aug 2025 17:28:08 +0000
ROA not after:            Mon 08 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2605:9cc0:d80::/43 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:23:25:f1:bf:58:f4:10:5f:64:04:aa:59:7e:fc:58:c3:c3:30:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Aug  4 17:28:08 2025 GMT
            Not After : Sep  8 23:59:59 2025 GMT
        Subject: serialNumber=8897d3b7bcc2be75d4dfe90ad76d99d2dfa45ed6ce2d214410992aad74a419db, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:5d:77:6b:f0:9d:bf:b9:94:cf:4a:9c:33:6f:
                    e2:a2:6f:27:9f:70:ae:03:e5:d7:5a:c2:b9:a9:d2:
                    8f:73:dc:04:cc:8d:e8:d3:24:35:41:fd:77:fa:cf:
                    a9:d5:4e:c1:7d:6b:4c:c9:1e:f6:d6:d0:93:be:b3:
                    28:5c:f3:c5:05:50:31:de:52:46:6a:88:0a:b5:4f:
                    67:59:8a:09:bf:b0:9d:c0:b0:c0:1c:e8:f1:1f:51:
                    90:b2:59:13:f6:eb:94:c3:a4:db:e4:f2:0e:36:e5:
                    9d:b0:ce:01:a4:c6:2f:95:26:21:8b:7d:be:b0:97:
                    2c:8b:90:57:fb:ff:97:a5:d6:2f:b2:0a:c1:7d:d2:
                    23:8a:ea:a6:71:48:1f:36:d4:5a:f0:5e:d6:6e:9b:
                    17:b0:26:c2:71:5f:dd:bd:15:63:39:ee:1e:34:44:
                    3f:4d:6c:62:56:ad:e0:3f:18:8e:d4:be:b7:1e:9f:
                    24:b0:b3:3c:59:a9:cb:bd:ee:fd:f6:ad:a9:f6:b2:
                    d1:ed:47:ae:4b:ba:3d:69:17:f4:2c:40:bc:e2:36:
                    de:eb:c4:a3:e9:e5:51:f3:5a:70:75:7a:d3:f4:81:
                    f2:68:4f:17:0a:2a:2c:d9:0a:76:87:70:2c:32:5e:
                    26:8b:2b:b2:88:71:29:8f:87:4e:08:64:33:84:d2:
                    2b:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:00:54:13:57:72:A4:A6:71:1C:6E:0A:2B:28:B2:5A:F6:00:E1:81
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/af800973-d2a0-4250-88e7-9c8ae26b16ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:d80::/43

    Signature Algorithm: sha256WithRSAEncryption
         37:4a:ae:8b:30:51:2f:9d:66:5b:87:34:e7:d2:8e:31:8a:5d:
         1e:98:0b:33:df:f0:8f:38:a5:56:c0:26:cf:06:96:f9:6d:df:
         26:0e:0f:e1:7a:71:ba:b1:8b:b0:2f:91:84:ad:05:e3:7b:0f:
         05:9a:1d:78:81:36:5f:cb:ed:ec:c7:d2:c3:17:12:a2:7d:15:
         44:80:74:77:1d:56:0f:bd:04:5b:9d:e1:c9:3d:8b:44:30:34:
         f7:cd:aa:d0:f0:ea:36:c0:0b:e9:bc:ab:3a:04:29:95:f6:84:
         a0:99:90:7a:fe:6e:03:8c:81:21:6a:e7:a3:9f:a5:13:a5:8b:
         27:03:be:0b:38:6c:68:38:0d:bd:e1:ff:12:f8:94:73:cf:c9:
         8b:45:76:95:1e:5b:b0:93:fe:dc:c7:85:de:f4:de:a5:87:f9:
         bd:f4:41:a3:38:79:2c:c0:d3:d3:a8:2f:ed:06:2d:39:e4:b4:
         df:31:d4:f3:b3:df:ad:f4:de:8f:ec:67:f4:66:6c:10:af:b7:
         2d:e6:28:ff:f6:72:f6:be:99:b7:3e:90:12:c4:5e:2f:04:95:
         88:f9:a9:04:4c:c8:82:f5:bd:be:a1:80:74:03:cb:51:f6:82:
         3c:a7:13:dd:b5:9c:76:81:7f:06:7e:df:b2:ac:55:ac:04:41:
         0e:7c:6c:62
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Aug 6 12:25:07 2025 by rpki-client