Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b3e6a182-09eb-4cdc-a074-d9c1ca01fad9.roa
File:                     b3e6a182-09eb-4cdc-a074-d9c1ca01fad9.roa (raw, json)
Hash identifier:          GFMFukenWzlMYOcDswtH093H9rMVJMMot9euoyCZYrY=
Subject key identifier:   10:F5:C6:53:58:6B:FA:9D:90:92:30:37:19:1C:BD:E1:4F:EA:1F:95
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       6085496FDC40E52451D59C745D57F12E5389B442
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b3e6a182-09eb-4cdc-a074-d9c1ca01fad9.roa
Signing time:             Mon 26 May 2025 15:10:20 +0000
ROA not before:           Mon 26 May 2025 15:10:20 +0000
ROA not after:            Mon 30 Jun 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2605:9cc0:3b4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:85:49:6f:dc:40:e5:24:51:d5:9c:74:5d:57:f1:2e:53:89:b4:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: May 26 15:10:20 2025 GMT
            Not After : Jun 30 23:59:59 2025 GMT
        Subject: serialNumber=95a2476b16cf3bade285a62f0b3ca95243f2b40e290a0e104abc2c5cff07b5e7, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:dd:6e:52:9c:3f:20:a5:ea:d7:1e:1b:c3:71:
                    ac:80:df:16:9a:c3:88:67:64:83:f4:4c:f6:7b:af:
                    3f:96:48:3b:94:bd:b7:a0:64:a2:21:a1:09:49:41:
                    c0:6f:6a:69:42:ce:cc:a1:ed:c4:3d:24:5b:bb:0f:
                    ca:39:85:8a:10:5d:a4:6a:32:61:67:f1:7e:0c:cc:
                    7d:7d:43:89:aa:82:47:3c:01:6a:c9:41:11:eb:44:
                    f4:a9:e5:15:fc:e8:b7:cd:81:d3:d2:cc:5a:e0:86:
                    f4:a9:17:b2:8e:53:82:0d:eb:a2:1a:1a:c7:2f:9a:
                    0a:0e:bd:96:56:9b:48:52:bf:02:99:6b:88:a8:b0:
                    8e:90:d9:55:d6:b0:2f:ae:18:37:76:dc:64:0f:d3:
                    55:95:8b:ef:96:e0:76:32:dd:5d:f9:34:d4:b6:ea:
                    98:88:9f:a5:33:d8:97:c9:20:4c:08:cc:6c:c2:a2:
                    9a:78:79:c8:ae:7c:d0:78:c3:25:45:59:60:a7:1f:
                    f1:39:9d:47:dc:f8:c9:1f:b9:18:a9:a9:24:aa:e9:
                    1e:e8:4f:60:b8:68:86:04:6f:ee:12:f0:f1:bc:9b:
                    87:7c:51:ba:80:38:77:2e:32:9a:6b:01:06:e1:91:
                    f2:eb:f9:85:a8:e0:d8:e1:63:a9:0d:88:84:d7:e0:
                    57:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:F5:C6:53:58:6B:FA:9D:90:92:30:37:19:1C:BD:E1:4F:EA:1F:95
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b3e6a182-09eb-4cdc-a074-d9c1ca01fad9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:3b4::/48

    Signature Algorithm: sha256WithRSAEncryption
         92:c3:46:eb:f5:21:f6:8c:50:46:34:93:e1:5c:f4:15:1b:64:
         0c:5f:40:62:10:bb:a9:45:8e:48:d6:6d:55:83:f9:bc:ce:35:
         67:20:0f:2e:a1:74:3e:0e:e3:a3:f2:ed:68:87:4b:bf:5d:f5:
         fb:aa:23:3b:f6:d4:36:62:e4:06:66:fd:9b:b6:bc:01:7c:48:
         77:78:7a:7f:37:c7:14:d7:b9:2a:76:bc:b9:e6:b2:a0:eb:dd:
         fe:86:9b:84:ff:5a:8c:98:eb:cb:1a:42:8c:c9:05:97:b3:96:
         e8:e1:60:cc:b1:48:ad:f2:d9:c8:45:4d:f7:a0:4c:bc:b2:72:
         b3:c4:72:c8:05:5f:2e:4d:b1:ce:35:b6:8a:f3:c0:89:27:aa:
         a2:6f:8b:8e:f8:fc:50:4d:8c:fb:5b:bb:5c:9e:db:63:e7:b3:
         c9:a0:27:a4:d8:80:61:d5:29:74:4e:3c:45:2c:a4:e7:e9:8f:
         83:57:75:10:9c:a1:54:dc:ca:ca:3c:e0:17:54:83:c8:bb:a0:
         7f:4e:05:71:60:36:86:30:33:91:93:a2:1b:bc:87:6b:48:4f:
         6c:4c:ed:91:26:28:44:37:f8:74:6c:59:6b:a9:9c:1c:b4:b5:
         1f:e1:a0:db:cc:40:38:ad:d5:3e:84:6a:ca:a9:89:74:8d:14:
         51:b1:10:ab
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 14 23:45:53 2025 by rpki-client