Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/a80f0b97-d9da-4f60-9430-57b44809fe13.roa
File:                     a80f0b97-d9da-4f60-9430-57b44809fe13.roa (raw, json)
Hash identifier:          ys7Io/WtXk91qaUBtsl57Tp4Z/D4Aw7OxQHG+7Y+dWk=
Subject key identifier:   8A:4A:80:53:9C:80:D9:66:4A:F3:D6:7B:FF:11:8C:A7:85:CF:22:97
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       528B4B91E35C63ED613B5CF7E5081F146C1577C9
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/a80f0b97-d9da-4f60-9430-57b44809fe13.roa
Signing time:             Wed 30 Apr 2025 00:10:17 +0000
ROA not before:           Wed 30 Apr 2025 00:10:17 +0000
ROA not after:            Wed 04 Jun 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2605:9cc0:3b4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 May 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:8b:4b:91:e3:5c:63:ed:61:3b:5c:f7:e5:08:1f:14:6c:15:77:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Apr 30 00:10:17 2025 GMT
            Not After : Jun  4 23:59:59 2025 GMT
        Subject: serialNumber=af53dec44009975087b02d26e39c27dc7b4de54a1d48fc0dd8123bd0c6e2ae1d, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:7a:1a:74:10:0e:53:98:60:d1:d4:04:0d:fd:
                    08:c1:78:88:e3:71:bc:c3:c7:8c:45:e9:76:ff:99:
                    aa:44:97:a3:a6:d4:9f:d8:4b:d5:62:0b:b3:57:3c:
                    bc:c8:10:44:83:bd:f6:7a:64:42:3c:eb:7f:20:aa:
                    9f:ae:3b:38:7e:47:f3:68:dc:fa:fe:58:7a:e3:ff:
                    c9:d8:e4:5e:0d:31:26:8d:78:fb:e5:b3:c9:dc:fe:
                    cd:fd:de:aa:57:71:b1:70:cb:e2:b4:9a:09:3c:eb:
                    8d:ac:06:6a:8e:52:85:28:55:1e:6b:c0:f1:33:49:
                    96:20:ba:f1:88:63:42:e2:c7:98:b5:50:57:ac:13:
                    34:1d:5f:af:09:d2:31:3a:38:17:de:ef:d0:c4:72:
                    42:70:4c:63:18:ba:a1:ab:53:eb:3c:c0:68:bd:9d:
                    20:66:15:93:e1:db:5c:42:f4:32:20:e5:f6:72:b5:
                    a3:e7:ad:5d:a0:bc:f9:41:88:ac:c4:87:db:6b:4c:
                    27:59:95:71:2e:86:46:f5:cc:75:f1:19:75:d3:2e:
                    4e:31:94:42:e6:89:28:0a:fb:38:3e:15:a2:a8:4c:
                    05:17:be:d8:3f:f5:3e:94:65:78:4c:5c:f1:7b:00:
                    b8:3b:f2:a8:ff:66:a4:ff:90:5f:b6:2f:0a:74:bb:
                    b1:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:4A:80:53:9C:80:D9:66:4A:F3:D6:7B:FF:11:8C:A7:85:CF:22:97
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/a80f0b97-d9da-4f60-9430-57b44809fe13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:3b4::/48

    Signature Algorithm: sha256WithRSAEncryption
         3c:d0:e2:6f:1e:1f:ef:3c:4b:20:fb:6b:c7:ca:de:9e:1e:c6:
         c5:83:ef:92:a1:c6:13:d4:32:31:6a:a1:33:e0:aa:bb:4f:ba:
         c6:f3:73:80:09:45:be:15:7e:7b:1e:65:34:6e:46:05:d4:68:
         37:c9:66:2e:3d:5c:c2:09:16:e1:04:ee:05:76:70:4b:ff:f9:
         37:5f:43:29:ba:44:d6:aa:0e:1a:c0:9d:cf:18:03:31:e7:c2:
         39:df:a1:de:7f:6b:f0:6f:b8:4d:a6:54:05:2a:24:5b:06:1f:
         fa:67:49:bc:46:6e:48:6a:ef:8d:64:e9:8c:50:e2:ac:6b:16:
         70:fa:75:d1:09:08:e3:bc:47:ee:8b:86:10:40:a9:93:a3:7a:
         f4:99:36:df:50:b7:23:e5:18:9f:79:68:22:49:47:25:6b:4b:
         02:c9:47:dd:9c:40:9e:c5:28:de:94:64:29:29:28:1c:cb:c0:
         de:9a:16:af:ed:fc:64:7a:0e:4d:47:b0:85:7f:01:0d:ec:21:
         a2:7d:2c:64:9f:e1:bf:f7:d4:c2:b0:6a:66:e6:a7:3e:1f:68:
         14:81:01:ff:df:60:75:de:82:65:75:0c:07:d7:ce:71:ef:52:
         fa:48:1f:66:fe:cc:a5:f9:8c:08:00:29:ae:61:ca:cf:59:d9:
         04:91:8f:be
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue May 6 02:59:38 2025 by rpki-client