Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/0e9f7988-1c81-40c0-a913-c2efdf50ce89.roa
File:                     0e9f7988-1c81-40c0-a913-c2efdf50ce89.roa (raw, json)
Hash identifier:          F/sMsIBSCSk3426wBQiHLbLu01/PDkBmFvaI+8juzKE=
Subject key identifier:   A0:CB:88:35:4C:5E:B3:B0:52:87:CE:FE:D2:DF:CF:53:11:D0:DA:05
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       15D5298FB69F0170BC4FD0B330B40162A285AE80
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/0e9f7988-1c81-40c0-a913-c2efdf50ce89.roa
Signing time:             Fri 17 Oct 2025 20:00:36 +0000
ROA not before:           Fri 17 Oct 2025 20:00:36 +0000
ROA not after:            Fri 21 Nov 2025 23:59:59 +0000
asID:                     8987
IP address blocks:        2605:9cc0:d70::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:d5:29:8f:b6:9f:01:70:bc:4f:d0:b3:30:b4:01:62:a2:85:ae:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Oct 17 20:00:36 2025 GMT
            Not After : Nov 21 23:59:59 2025 GMT
        Subject: serialNumber=6a9b741056a042e1904a142cf63988b089f6aeb88976491857b4e2f2a6e97d41, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:fd:59:aa:32:6b:37:03:f3:66:27:fd:d1:e5:
                    2a:34:6b:c5:e6:7f:4d:eb:29:1d:46:af:4d:ec:36:
                    0b:c5:45:4b:28:e8:98:1c:be:2e:65:ff:84:2c:ca:
                    06:5e:09:6c:29:e0:ce:21:0e:c6:f9:44:bd:9e:b9:
                    61:ab:dc:5c:14:06:9d:e6:2f:7e:6d:06:ef:d2:4c:
                    72:db:0d:a6:0f:76:38:41:a7:68:62:c1:89:bc:12:
                    7c:f3:d3:d3:c8:b4:cd:93:d0:d3:8d:c4:cb:82:80:
                    4b:f0:73:58:ec:c8:a5:59:88:be:53:61:da:63:ee:
                    16:63:4b:cb:4b:27:46:68:f7:dc:49:51:20:e7:ec:
                    af:e2:90:ba:ee:f4:0d:d5:71:e8:0d:39:18:fb:cc:
                    4e:6b:5f:9d:0b:89:89:b9:f6:c9:d5:f3:d9:b3:84:
                    d2:80:a3:f7:0a:c3:5f:0a:b5:77:25:68:58:1f:8d:
                    a2:13:52:2e:47:f5:ce:d2:6d:90:52:88:1b:d0:c8:
                    54:3b:c8:da:1f:99:08:41:91:f6:81:56:7e:aa:58:
                    2b:ea:10:51:7c:90:ab:13:60:86:68:ac:ca:c6:fb:
                    6f:e6:69:72:8e:d5:a0:52:2c:2a:ef:38:e4:75:12:
                    4b:1d:f4:fb:7d:59:ce:0d:38:59:04:de:f5:df:bd:
                    ab:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:CB:88:35:4C:5E:B3:B0:52:87:CE:FE:D2:DF:CF:53:11:D0:DA:05
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/0e9f7988-1c81-40c0-a913-c2efdf50ce89.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:d70::/44

    Signature Algorithm: sha256WithRSAEncryption
         78:e9:75:7b:43:b2:2b:4f:fd:86:a2:b0:97:3f:3d:88:23:e1:
         6d:75:85:81:ea:8d:36:32:ee:9b:83:6e:ec:b4:9f:1f:f1:7d:
         b3:d9:57:79:fe:7e:bf:b1:60:60:a2:3e:5f:27:89:ea:54:50:
         08:4b:27:78:30:d6:6d:a9:a5:fc:7b:45:35:63:09:f4:b7:4f:
         d7:66:d0:a1:38:63:ef:5f:3d:8f:13:78:c7:9b:76:ea:c7:3d:
         ad:fd:3b:63:b3:7e:b6:7c:9b:40:c4:cc:17:43:4c:14:f8:87:
         45:ef:ae:13:f1:f7:c6:8e:fe:06:b1:85:e4:69:d7:3e:68:42:
         72:2e:18:93:f7:fb:e2:8c:71:e7:fd:d3:c8:f0:e3:5f:c4:b1:
         e2:a8:07:8b:84:91:56:2d:79:4a:22:c7:5f:df:0e:48:71:d2:
         38:81:a3:0c:3c:4a:1a:e9:28:68:1b:71:9b:ad:d0:31:3a:b5:
         79:75:e8:a2:12:1c:9c:6c:8f:37:24:4a:38:1c:7b:79:95:71:
         b3:5c:c4:75:14:7b:f3:6c:db:7f:8d:72:93:08:eb:54:74:20:
         bf:2f:61:ce:98:c0:2e:1c:04:9f:50:5e:06:61:50:3e:7b:fe:
         3f:03:f2:d4:5f:73:92:52:03:47:57:96:ee:80:80:20:8a:77:
         6c:c5:3d:1f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Oct 20 04:54:12 2025 by rpki-client