Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/7f11bb8b-2990-472c-9fc9-88ffffd976d2.roa
File:                     7f11bb8b-2990-472c-9fc9-88ffffd976d2.roa (raw, json)
Hash identifier:          KmCaeSWj7wjEGWu+ynbXrx11Phj4O8Ty1GuIlAALnTc=
Subject key identifier:   FC:2C:E9:E2:FA:AD:C8:E8:D5:29:B3:B5:88:13:41:7F:8F:AA:FC:5A
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       17928DFA5E5165425D4EBBA904EA3717F11EFF97
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/7f11bb8b-2990-472c-9fc9-88ffffd976d2.roa
Signing time:             Mon 29 Sep 2025 15:23:39 +0000
ROA not before:           Mon 29 Sep 2025 15:23:39 +0000
ROA not after:            Mon 03 Nov 2025 23:59:59 +0000
asID:                     40045
IP address blocks:        2605:9cc0:3b3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:92:8d:fa:5e:51:65:42:5d:4e:bb:a9:04:ea:37:17:f1:1e:ff:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Sep 29 15:23:39 2025 GMT
            Not After : Nov  3 23:59:59 2025 GMT
        Subject: serialNumber=7323bd30b410beb4b44459afcf78c5fc755e6b24de9f6e5928e1a603ff945f5c, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e7:91:67:57:cc:ab:2b:ef:a5:c7:86:ec:50:
                    3d:71:a5:73:1a:fa:52:1b:b5:19:d0:3f:dc:87:cd:
                    4c:63:63:cd:7e:d7:93:3d:86:93:c3:ff:45:ce:86:
                    97:80:1b:83:6c:75:ba:17:ab:1c:f1:7b:4f:8a:52:
                    3e:dc:ac:04:71:56:a4:ff:fa:30:7c:4b:22:75:fc:
                    e3:28:e7:4e:2b:c2:c1:96:2c:96:3c:27:c4:2d:63:
                    18:2e:08:33:70:f0:2b:93:2a:79:8f:1e:2c:84:4a:
                    c1:81:fd:ab:e5:fe:2c:2b:ec:b4:49:c2:5c:3f:7a:
                    8c:a3:ec:93:6f:80:45:a7:c8:9f:d1:04:83:f5:f8:
                    74:82:87:29:26:ff:0f:80:ab:e1:71:76:d1:74:f6:
                    4c:9e:b6:d8:a0:09:a6:b9:95:a1:34:77:17:48:98:
                    8c:ed:5a:ff:3f:e4:76:56:67:38:41:9d:95:5a:f0:
                    b9:dc:bd:16:93:d5:be:63:64:9b:61:45:91:ba:75:
                    83:0f:fa:b0:8f:27:b0:8f:2f:0b:98:ef:15:1e:82:
                    61:28:35:bc:51:ed:b7:38:c6:36:b8:5b:4e:e8:f5:
                    88:ea:0a:e6:45:39:0f:81:5a:67:aa:90:28:b8:a1:
                    c9:c5:2d:4d:ff:c0:3c:53:f5:8f:c5:6d:dd:e3:c5:
                    46:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:2C:E9:E2:FA:AD:C8:E8:D5:29:B3:B5:88:13:41:7F:8F:AA:FC:5A
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/7f11bb8b-2990-472c-9fc9-88ffffd976d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:3b3::/48

    Signature Algorithm: sha256WithRSAEncryption
         82:d2:52:9e:11:9f:78:90:a5:17:2f:06:ff:8e:ac:00:3c:47:
         48:be:24:c8:9c:26:e4:ff:40:bb:e5:4c:a0:73:46:99:81:18:
         4b:76:bc:26:17:20:ff:a7:e4:7c:28:66:f3:03:fa:6c:8c:8f:
         fd:14:a3:63:7a:2b:3a:15:26:66:e8:c4:70:25:67:95:3e:ba:
         be:ee:b5:e9:06:e6:3b:fe:64:7d:5d:22:25:b9:2a:bb:a2:c9:
         06:53:9f:d0:3a:08:8e:5a:f6:4d:58:5d:7d:97:e0:0d:7a:5b:
         9a:1f:6d:ef:14:b6:5b:a3:39:37:ea:84:11:07:e3:7b:9e:2e:
         32:e9:dd:a3:13:08:56:60:9b:17:50:f6:80:86:cb:0d:b0:07:
         76:b8:e8:93:6f:b1:49:2b:09:5d:eb:34:ff:3d:8c:ac:9e:e3:
         58:bf:5b:64:b9:f0:e5:7e:a1:06:0f:64:71:e2:4e:30:40:fc:
         4b:78:43:ba:15:95:32:f7:34:80:4a:eb:61:6a:7f:20:14:00:
         81:42:34:5f:1a:48:c1:64:05:26:2a:52:98:61:87:a1:e8:ac:
         8d:3b:99:20:ab:00:d5:d4:ae:0f:8f:8a:a3:15:2d:12:a9:8e:
         f5:af:98:66:ac:41:44:52:ff:5a:16:64:0d:80:ca:8d:bd:b3:
         99:e2:9a:70
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Oct 20 04:53:34 2025 by rpki-client