Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/f70dcbfa-0a21-4dcb-b79e-bfd7efa166b7.roa
File:                     f70dcbfa-0a21-4dcb-b79e-bfd7efa166b7.roa (raw, json)
Hash identifier:          qLsxMd64R3Yx+wotHQ64hD07HLTaS0bIvzWZxIDiNUY=
Subject key identifier:   DB:81:8D:79:A6:C5:BC:52:2F:90:F4:3B:E7:B4:15:3F:63:1A:B0:12
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       61F4FFF489C1C5680232D3CB8AC1B3471ECF29CE
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/f70dcbfa-0a21-4dcb-b79e-bfd7efa166b7.roa
Signing time:             Sat 26 Apr 2025 00:51:00 +0000
ROA not before:           Sat 26 Apr 2025 00:51:00 +0000
ROA not after:            Sat 31 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2605:9cc0:328::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:f4:ff:f4:89:c1:c5:68:02:32:d3:cb:8a:c1:b3:47:1e:cf:29:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Apr 26 00:51:00 2025 GMT
            Not After : May 31 23:59:59 2025 GMT
        Subject: serialNumber=153a270835586baeba84fad63dea560b94c997a8b52c2eae1d84b7dc0b7e5a41, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:1d:f0:48:c0:80:dd:fe:56:ab:05:2b:0f:08:
                    3b:ea:4a:7f:db:70:5e:61:86:af:42:f9:28:53:6e:
                    31:96:99:ef:ac:e1:33:9b:1b:36:3c:40:a0:33:3c:
                    cd:78:6a:57:82:da:21:92:e1:27:c0:18:d4:60:2d:
                    c5:72:be:c5:a7:82:4d:10:e4:81:83:12:69:85:4e:
                    30:bb:c3:2b:6d:d2:e7:59:79:8e:b7:7d:69:54:ac:
                    4c:14:4d:47:32:ba:53:37:73:c4:b2:61:bc:b4:67:
                    50:ca:81:e1:cf:96:ce:da:12:75:d7:07:26:90:22:
                    e1:e5:2d:b8:c3:83:63:7e:a8:3e:7d:6b:f3:0f:ec:
                    fc:6a:3b:20:02:aa:43:cc:e7:c3:14:a7:27:69:fd:
                    15:47:61:6d:e9:be:16:d4:45:a2:13:34:59:2a:17:
                    68:06:58:15:7a:76:f7:1b:7d:bb:15:ea:b3:37:c0:
                    1d:73:10:9c:5e:8f:72:4d:0f:b6:e9:6a:e7:f8:f3:
                    21:aa:9e:d2:4c:01:73:b3:23:71:ad:56:79:28:02:
                    8d:62:95:98:e4:84:dc:af:83:61:41:5d:39:44:f7:
                    c9:14:f1:ca:c4:c1:05:c7:04:5b:79:35:e5:68:67:
                    2e:f8:fd:71:59:28:5a:3b:0c:97:fd:19:05:ab:00:
                    aa:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:81:8D:79:A6:C5:BC:52:2F:90:F4:3B:E7:B4:15:3F:63:1A:B0:12
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/f70dcbfa-0a21-4dcb-b79e-bfd7efa166b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:328::/48

    Signature Algorithm: sha256WithRSAEncryption
         26:b8:11:ef:3b:45:20:78:82:87:5e:c3:f6:61:6e:3d:de:1a:
         dc:b0:fa:a7:f1:8a:c6:40:9e:08:9d:eb:8e:cf:2b:29:24:3e:
         cf:d0:8d:0b:42:2c:72:5a:cf:63:03:26:32:7a:02:8c:2f:b3:
         4f:1e:1a:92:0b:aa:04:90:78:c7:cd:aa:57:13:30:3d:0e:0d:
         4f:93:a9:de:b3:cd:c5:c0:6c:e3:1e:4a:39:03:f4:62:73:1f:
         24:c1:bb:5c:48:b1:e5:44:21:ce:8d:75:b2:01:ef:b8:a9:ac:
         98:65:cd:7e:bb:95:f7:69:ed:7a:d6:47:15:b7:02:b0:01:56:
         f8:8b:15:b5:4b:ac:7f:50:87:07:77:63:ab:6a:38:a8:17:74:
         cd:11:ad:7d:0d:30:60:08:cb:c4:c4:d8:db:37:85:b0:50:e5:
         82:e8:0e:d2:5f:2d:c9:f4:e6:0b:12:4b:95:ad:73:a0:1c:92:
         59:49:7d:f6:b2:23:40:3b:90:bc:ce:53:04:d9:1c:f2:f8:8c:
         f1:1f:20:dc:02:ef:65:a9:02:97:5f:eb:d6:f1:78:0e:41:d6:
         b2:a0:b6:40:38:98:d8:83:af:b8:fa:f3:b3:54:19:bb:a1:13:
         68:f2:b7:2b:0f:5e:83:5a:b7:3c:23:81:50:16:96:38:ce:0b:
         3a:99:7b:5a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 26 18:29:00 2025 by rpki-client