Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/fc2e9df4-0643-4bfc-b528-6948594de8d8.roa
File:                     fc2e9df4-0643-4bfc-b528-6948594de8d8.roa (raw, json)
Hash identifier:          8GtX3R62bRRYsngnqgr8jUZK8w+3ssqhZBZEUBf0VS4=
Subject key identifier:   26:E4:DA:D0:79:45:BC:F8:E4:FB:ED:46:55:76:29:99:04:FF:9A:29
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       455E57593779CA70AB92CBBD23DB2FCE924AC65A
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/fc2e9df4-0643-4bfc-b528-6948594de8d8.roa
Signing time:             Tue 05 Aug 2025 18:01:09 +0000
ROA not before:           Tue 05 Aug 2025 18:01:09 +0000
ROA not after:            Tue 09 Sep 2025 23:59:59 +0000
asID:                     21664
IP address blocks:        173.82.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:5e:57:59:37:79:ca:70:ab:92:cb:bd:23:db:2f:ce:92:4a:c6:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Aug  5 18:01:09 2025 GMT
            Not After : Sep  9 23:59:59 2025 GMT
        Subject: serialNumber=7abcac7566cc2417a4849e8ec3e340cc16a282c66fa00d33eba6e22217db8aeb, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:07:e3:77:b4:9e:03:d3:a0:67:05:51:20:44:
                    e3:3e:48:0c:52:a1:58:be:18:d9:e8:94:93:57:5b:
                    ab:1d:bc:86:63:ef:3d:4c:e2:a5:e3:72:18:d6:f9:
                    69:e5:b9:a9:ea:bc:00:74:cd:0d:55:8e:b0:50:22:
                    86:a6:89:02:a8:0a:a3:ea:8b:40:ed:cb:d3:85:fe:
                    5c:25:a5:8c:81:03:9d:57:4b:97:93:9d:fb:9a:68:
                    d9:79:5a:28:19:4d:3d:d8:a4:15:66:c5:33:93:9e:
                    87:9d:08:91:24:67:76:05:e1:15:a9:6d:8b:d1:e7:
                    a3:47:6f:f3:a6:af:c7:84:e8:0d:9d:73:5b:58:29:
                    6d:bd:df:64:d7:da:0c:4b:8f:a5:10:0e:28:b0:31:
                    a0:c3:f2:b1:b6:d8:7a:06:7d:15:ac:65:01:9d:20:
                    5e:7e:79:63:51:b2:78:6b:cc:85:f1:24:56:a4:27:
                    77:dc:21:bb:bd:26:e8:a7:ac:8e:2a:e8:99:4a:14:
                    47:6d:d9:0d:73:3a:da:3c:16:ba:d8:12:25:60:b4:
                    65:da:d2:38:be:8b:12:21:94:93:5a:78:01:b8:9e:
                    6d:7c:bb:97:42:28:4b:68:08:6f:04:63:00:c0:6c:
                    a7:85:ad:0e:4c:0a:85:cd:24:c0:c7:3e:59:a5:e1:
                    46:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:E4:DA:D0:79:45:BC:F8:E4:FB:ED:46:55:76:29:99:04:FF:9A:29
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/fc2e9df4-0643-4bfc-b528-6948594de8d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.82.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a6:d1:58:16:2c:dc:ac:8c:00:aa:2b:cb:99:b6:59:7d:76:90:
         bf:7d:e7:36:c2:3e:a4:fb:40:5f:87:24:ed:26:89:7e:e0:7f:
         78:3c:c5:37:36:37:1f:92:a2:8b:52:d7:e7:d7:22:f8:6c:b6:
         3e:04:a9:b7:0f:3f:8d:37:40:05:7b:c6:67:e7:cb:22:85:8f:
         41:af:0e:99:09:56:76:03:99:39:4d:10:76:82:21:b9:17:8b:
         1e:11:fa:69:b6:29:2a:3e:1a:95:d7:1b:3f:dd:d4:56:87:41:
         84:35:eb:19:01:15:17:7e:11:68:a5:ca:e0:25:57:12:86:18:
         00:c9:5b:83:e2:8e:ac:25:68:ad:b8:c7:ce:3a:b3:f0:1d:e1:
         28:91:29:20:23:8e:86:4e:60:5e:a0:1d:7e:bb:00:ab:9f:79:
         55:08:c9:10:31:2c:89:b8:79:d8:96:19:37:62:e5:ae:9a:81:
         ab:37:5f:53:81:12:58:b4:91:c7:86:15:42:68:e8:b8:0d:f0:
         01:bd:64:20:69:26:24:d5:b5:4b:25:53:69:7d:39:97:9a:72:
         5f:42:76:ea:39:09:90:b1:62:22:69:43:fb:07:1d:dc:b8:eb:
         b7:f2:1c:b5:9e:29:63:40:74:cc:37:4d:a4:d5:ff:f4:f5:34:
         b3:a3:55:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:42:53 2025 by rpki-client