Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/11769307-cee0-402c-8f8d-6ce037f2f56e.roa
File:                     11769307-cee0-402c-8f8d-6ce037f2f56e.roa (raw, json)
Hash identifier:          upfFBpfX2rYzXrsxLK9bI0VQHPriSZE/2iPvsGhq2NM=
Subject key identifier:   8C:8B:2C:59:52:39:32:05:55:EE:42:2D:8A:7D:F4:87:37:95:C8:24
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       5F3753415665A66F4DC4EF5086325D8142B610FE
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/11769307-cee0-402c-8f8d-6ce037f2f56e.roa
Signing time:             Mon 16 Jun 2025 19:00:51 +0000
ROA not before:           Mon 16 Jun 2025 19:00:51 +0000
ROA not after:            Mon 21 Jul 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2605:9cc0:30f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:37:53:41:56:65:a6:6f:4d:c4:ef:50:86:32:5d:81:42:b6:10:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Jun 16 19:00:51 2025 GMT
            Not After : Jul 21 23:59:59 2025 GMT
        Subject: serialNumber=92f0864e07847b8273f74701f95ad6377149814bbe8708626f007e7bbd14a603, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a2:c7:6c:ae:af:3b:15:76:6e:d6:3a:56:ed:
                    f8:54:33:9c:11:3f:4a:fa:96:f7:9b:07:9c:ae:46:
                    ce:f5:c2:c9:2c:4a:a8:3d:d9:53:e3:c6:d8:bc:34:
                    6b:aa:8e:1f:f7:dd:5f:8b:20:f4:72:1c:cb:4e:88:
                    11:e0:ae:0f:a6:e4:7b:fd:0d:06:f8:43:aa:1b:4d:
                    bb:51:65:c4:39:4b:54:a9:5d:e7:b5:68:0f:93:ab:
                    74:3e:36:c8:74:52:34:8b:6c:61:66:cd:50:81:e4:
                    40:7e:e0:86:05:3c:2b:10:57:49:a2:2b:6d:3d:99:
                    0f:d7:bf:31:a0:ca:1a:e8:bc:30:b6:83:9a:bc:48:
                    00:20:70:5b:0f:46:4d:1c:82:20:8a:57:2b:ac:a5:
                    1d:34:e4:ef:fe:c9:f1:02:f1:d2:0e:cf:93:ec:11:
                    08:46:67:ab:29:aa:34:3d:55:ac:9b:d6:aa:8b:c2:
                    8e:6f:fe:f4:fc:48:54:17:5c:69:28:3c:0e:0f:ec:
                    12:41:18:ad:22:c4:b3:da:cd:03:fd:f1:10:79:e0:
                    0b:f8:4b:0b:5b:0f:d3:b4:0d:fb:d3:04:11:4b:8f:
                    a3:b5:93:d5:57:cb:9e:90:22:65:ac:e7:e3:5d:91:
                    83:e8:53:2c:4c:ab:fd:82:26:42:10:75:bd:06:e7:
                    cb:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:8B:2C:59:52:39:32:05:55:EE:42:2D:8A:7D:F4:87:37:95:C8:24
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/11769307-cee0-402c-8f8d-6ce037f2f56e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:30f::/48

    Signature Algorithm: sha256WithRSAEncryption
         97:c8:70:7d:8a:6e:d0:0f:74:76:ae:fa:2f:fc:56:cf:2a:36:
         66:dc:ed:76:cd:9f:0a:c3:19:35:d9:f4:02:ad:b6:78:34:ff:
         e3:1e:86:62:4c:86:71:83:ce:e0:d8:4c:2c:ae:c1:22:9a:d6:
         c9:5f:8f:eb:62:49:f1:62:78:ad:24:c7:a9:74:0e:d8:03:4c:
         4b:e3:4a:a6:83:49:d9:17:9e:74:3c:1c:d8:52:37:e6:8f:96:
         96:22:7b:09:50:04:14:95:88:9f:31:f7:f4:17:0b:a4:3d:11:
         36:0a:5d:ca:74:b3:16:41:a5:83:b0:ff:3b:43:79:a4:a3:4c:
         31:47:bb:0e:77:a1:cc:25:ee:f0:ff:b5:ee:79:f5:63:d3:f5:
         b1:79:82:0d:5e:8e:a7:65:9d:b1:c2:2b:3f:49:3d:0d:f8:45:
         ca:b6:26:49:d8:d0:a9:40:2e:8c:ed:e5:bf:de:ab:91:2b:d9:
         95:9d:be:b4:d1:60:c4:3c:27:cb:e5:bf:9f:d8:01:47:75:c9:
         36:be:2a:1f:15:29:57:f7:9d:5e:e6:10:3c:c3:d1:d1:5b:f9:
         f9:2c:50:cc:50:a6:69:4a:db:e2:9c:30:16:ea:94:59:1f:f3:
         0a:1f:9e:75:f1:e1:14:b5:c0:1a:e6:bb:d4:bb:14:6c:64:0b:
         a9:b7:af:4f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Jun 29 01:36:53 2025 by rpki-client