Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/1471cd7d-f4dc-4f9e-9097-188dfdebcc7e.roa
File:                     1471cd7d-f4dc-4f9e-9097-188dfdebcc7e.roa (raw, json)
Hash identifier:          gFOL5fkwY9LRQ09L6GmvTywMPmeccH6tQYD0azeT6Zw=
Subject key identifier:   51:27:38:07:6F:BA:2E:0A:3A:1E:EB:4B:CC:81:99:06:48:D8:C9:3C
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       0BC7BFD2642602B8C523793A3AEE5E0545CE673C
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/1471cd7d-f4dc-4f9e-9097-188dfdebcc7e.roa
Signing time:             Wed 25 Jun 2025 00:20:20 +0000
ROA not before:           Wed 25 Jun 2025 00:20:20 +0000
ROA not after:            Wed 30 Jul 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2605:9cc0:402::/47 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:c7:bf:d2:64:26:02:b8:c5:23:79:3a:3a:ee:5e:05:45:ce:67:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Jun 25 00:20:20 2025 GMT
            Not After : Jul 30 23:59:59 2025 GMT
        Subject: serialNumber=5bde422df31f29f1aeeba266323fb59c504308da65ae2e18468256d307fe5277, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:aa:10:35:1c:af:e4:8f:22:02:c4:ff:7a:fb:
                    d5:b0:f7:e5:38:4f:b6:44:0f:cd:d0:8d:9e:70:d4:
                    08:fe:50:e2:cc:8e:ea:00:c8:62:88:b5:ff:10:1e:
                    68:1d:27:ae:96:36:36:ca:75:6c:cc:d5:77:9d:28:
                    86:9d:3d:38:0b:f6:76:dc:f6:48:ca:37:5f:92:7a:
                    de:15:96:d9:35:50:f5:1c:44:9f:78:6d:99:40:3f:
                    2b:6b:43:4b:77:de:9a:f6:cc:db:73:1a:26:e1:22:
                    d2:3f:6d:75:e6:7f:70:a4:9b:84:47:53:96:a7:bb:
                    8f:eb:4e:5a:55:11:10:40:7f:e5:dd:b8:d1:48:ed:
                    76:9f:01:04:42:b8:d1:1a:40:db:2e:32:3f:6c:23:
                    fa:93:45:c7:bf:45:7e:73:cc:e7:04:70:ef:7b:7d:
                    7b:4e:14:a8:0a:2c:bf:7b:bb:fe:e7:91:a7:99:11:
                    cb:9e:5f:1f:8c:78:30:6c:f7:b7:98:81:f0:9e:f0:
                    48:36:d4:f8:dd:7c:b5:47:81:61:c0:cd:43:6f:af:
                    11:0f:86:bd:67:d8:c8:d8:92:f5:c9:8a:ae:b6:3b:
                    ed:98:f8:b4:84:41:f4:b8:4f:0c:46:a4:89:14:9f:
                    d6:d3:eb:5a:20:5c:ef:f3:04:15:5a:5b:07:7e:8f:
                    7f:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:27:38:07:6F:BA:2E:0A:3A:1E:EB:4B:CC:81:99:06:48:D8:C9:3C
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/1471cd7d-f4dc-4f9e-9097-188dfdebcc7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:402::/47

    Signature Algorithm: sha256WithRSAEncryption
         4d:9c:e2:7b:05:64:23:1c:b0:fe:df:4c:46:ab:52:79:38:10:
         13:7e:e0:bc:c2:f6:f1:d5:52:0a:bd:a0:82:ff:09:7d:f6:d0:
         ab:5f:35:88:e3:01:de:ee:e0:db:93:bf:8f:7c:e6:db:1c:fb:
         e7:e7:36:66:b7:f5:25:88:8d:d0:0c:db:10:9e:5d:a6:1a:13:
         d1:db:5e:4f:5e:2d:69:5c:55:9c:ee:cb:e2:77:11:35:63:f2:
         9d:28:1a:ea:1d:d3:39:da:f9:a6:f4:bc:ba:a4:e7:c5:71:e7:
         ef:9d:4e:93:ac:05:f4:14:88:bd:e0:66:2e:d2:94:52:f4:87:
         1c:5a:2d:3e:26:5e:48:ae:07:a7:1a:4e:f1:e1:0a:9f:43:c2:
         04:41:d1:51:f5:f8:fc:c2:85:ba:d8:62:3f:9e:42:74:e1:df:
         d4:73:a0:15:7a:6d:2d:a5:27:eb:15:81:a6:5f:38:6c:0e:45:
         e0:03:58:3e:ef:08:f7:46:1f:44:a4:f3:23:d5:3c:e3:3e:4c:
         a9:4c:31:61:06:37:85:7d:e9:13:d9:50:4d:4c:8e:24:23:db:
         52:bc:7c:d3:6b:a7:83:c2:28:f4:14:16:5a:b8:ca:e9:79:02:
         e2:2d:a0:c2:7d:82:61:17:02:05:73:f6:f2:46:f6:f0:b9:94:
         8e:94:84:d9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Jun 29 10:21:35 2025 by rpki-client