Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/69d3ff66-a8d4-4624-b122-66d52c0c5489.roa
File:                     69d3ff66-a8d4-4624-b122-66d52c0c5489.roa (raw, json)
Hash identifier:          kgckCOYPxv2ubYc86aLNEf6kB8UKK2PtmyF0fKEGKfs=
Subject key identifier:   55:86:93:46:6A:78:06:18:8D:B0:1D:93:9D:71:99:2D:DD:E2:C2:09
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       0C30E20777E44ED8EC2032753DD20FA91F8C41B5
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/69d3ff66-a8d4-4624-b122-66d52c0c5489.roa
Signing time:             Wed 25 Jun 2025 00:30:06 +0000
ROA not before:           Wed 25 Jun 2025 00:30:06 +0000
ROA not after:            Wed 30 Jul 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2605:9cc0:c00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:30:e2:07:77:e4:4e:d8:ec:20:32:75:3d:d2:0f:a9:1f:8c:41:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Jun 25 00:30:06 2025 GMT
            Not After : Jul 30 23:59:59 2025 GMT
        Subject: serialNumber=b5e045cbb43d3c982a76a1decee681bd8b1f3ca15ef739ad2fae7548fd229d37, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:5f:9a:5a:6c:0d:2c:79:32:d1:ac:0c:5f:e5:
                    7b:ec:91:2d:8b:52:f2:45:ab:aa:4d:2d:0f:f9:a8:
                    f0:6d:68:ea:03:82:91:72:00:b9:01:73:2d:36:47:
                    41:0d:81:42:a7:2f:2a:78:7b:4e:eb:4b:1b:1a:63:
                    35:0c:7b:a0:4c:af:ad:a0:7a:1a:58:c3:22:db:b5:
                    7b:35:27:f0:f0:88:27:54:ff:02:72:bc:53:2f:16:
                    a4:4c:9c:0f:54:89:79:71:e3:17:18:fb:f7:dd:51:
                    4c:17:42:23:12:c2:4f:32:99:2d:63:d8:ae:c8:05:
                    fc:fa:97:b2:b2:cb:64:d4:4d:f5:a5:d7:94:99:76:
                    01:0b:5c:22:69:75:39:af:1e:81:eb:a5:93:c3:f4:
                    83:da:84:65:f4:94:3a:37:60:67:87:36:a4:d7:cb:
                    c7:34:0b:81:ea:41:10:4d:a9:ca:89:90:cd:0b:a8:
                    1a:9b:38:66:8d:40:e4:1a:e9:73:98:a3:d5:2b:12:
                    c9:ca:3f:7d:d6:52:43:52:7e:8c:0a:73:5f:37:e0:
                    65:ed:58:dc:95:2b:59:2f:33:6a:4a:79:4d:6c:44:
                    95:2a:d3:7b:4c:f0:72:eb:6e:21:6a:f5:5e:2f:af:
                    3c:ed:e6:b6:81:15:86:e8:9c:08:2c:a5:76:13:81:
                    b5:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:86:93:46:6A:78:06:18:8D:B0:1D:93:9D:71:99:2D:DD:E2:C2:09
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/69d3ff66-a8d4-4624-b122-66d52c0c5489.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:c00::/48

    Signature Algorithm: sha256WithRSAEncryption
         88:3c:8f:ef:6b:a0:21:8c:89:31:46:64:cb:cb:4c:3a:3f:01:
         48:d7:97:d2:cd:6e:c1:b2:77:c0:79:9a:1c:71:ea:6d:2b:af:
         69:04:76:64:a8:12:1c:1b:d3:70:a1:2a:e1:e6:af:31:73:70:
         38:15:92:5b:aa:26:90:e6:9c:69:fa:62:b0:79:95:e1:b2:a4:
         51:4e:e5:0b:91:8f:ed:e1:e9:4f:d8:b9:f4:f4:15:82:34:4c:
         7e:a6:8b:35:17:1f:79:35:19:53:04:3b:6c:ca:aa:49:88:0b:
         9b:b2:61:f4:a5:5f:55:ae:d1:12:e5:08:f3:fb:bf:b4:64:3c:
         bb:1d:aa:c5:05:5e:41:9a:02:79:8a:4a:6b:32:11:18:17:84:
         2d:d6:b8:e3:ef:b9:56:b1:1b:0d:54:74:63:d3:0a:8c:ce:a8:
         f4:8f:5d:3f:76:e7:a4:b9:19:4a:f7:47:a9:0e:57:7c:45:e0:
         46:35:9a:7a:56:46:ce:3e:0f:ba:38:4c:df:d3:d2:ed:53:10:
         16:99:7e:8a:2d:40:4e:49:2b:29:1f:1f:c7:76:c3:7b:f8:8c:
         93:8f:43:f3:1c:51:04:4b:87:9b:14:e0:2e:5d:8c:8f:a8:eb:
         b0:75:10:77:cd:a0:c8:f8:81:a9:ed:be:d0:a4:89:54:5c:15:
         df:f5:e6:ac
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Jun 29 06:35:22 2025 by rpki-client