Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/bb5af757-1bdc-48f9-bc20-c74fd49096a5.roa
File:                     bb5af757-1bdc-48f9-bc20-c74fd49096a5.roa (raw, json)
Hash identifier:          J4mU6gxWonDagIBo1+PjjPNTuQqDqmmUDMIaZ913HLE=
Subject key identifier:   53:69:CB:CB:81:07:33:6B:86:F0:FE:53:59:6A:3E:FF:5E:8F:C0:A3
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       75C2298193C810308B5247BDEAE71BFB84AE0B6B
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/bb5af757-1bdc-48f9-bc20-c74fd49096a5.roa
Signing time:             Fri 26 Sep 2025 17:53:18 +0000
ROA not before:           Fri 26 Sep 2025 17:53:18 +0000
ROA not after:            Fri 31 Oct 2025 23:59:59 +0000
asID:                     8987
IP address blocks:        2605:9cc0:611::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:c2:29:81:93:c8:10:30:8b:52:47:bd:ea:e7:1b:fb:84:ae:0b:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Sep 26 17:53:18 2025 GMT
            Not After : Oct 31 23:59:59 2025 GMT
        Subject: serialNumber=46140cb4c96a1106a8b26ec42194e4906934571f5839d7cab60ad6a2314041ea, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:fd:85:55:40:b9:af:bf:9f:85:ad:cf:95:02:
                    92:36:2b:8b:e0:12:07:54:1d:27:36:f1:62:6d:24:
                    2d:3e:28:4c:8e:fc:57:b6:7a:b8:a7:f4:0c:2c:c3:
                    9d:89:df:6c:d7:6b:5d:96:68:6b:c7:36:ca:24:c1:
                    06:d9:d5:63:3f:18:00:ec:48:eb:26:f8:5b:5e:74:
                    7d:91:6a:1a:ba:35:92:a8:5b:4e:9e:7f:eb:e9:35:
                    2d:64:0f:ba:43:8a:99:39:85:4b:58:e8:3c:de:fc:
                    bd:e8:bd:8b:a7:d7:d7:4b:5e:54:50:3b:e8:25:19:
                    95:4b:1b:c3:1d:fa:de:ff:6e:f5:b6:2f:fa:31:2a:
                    91:eb:91:fd:2f:6b:a0:fa:b2:d4:8e:65:be:0d:8e:
                    9d:53:1f:d4:a4:75:af:66:25:73:e4:1f:b0:79:d7:
                    c8:dd:65:a1:70:51:e5:c5:ec:79:e5:b4:40:23:b2:
                    f8:49:81:bb:f1:49:97:04:ca:cb:94:c6:1d:40:33:
                    95:6b:c1:44:78:13:6b:27:5d:b0:3e:48:dc:a2:95:
                    34:80:44:90:68:fd:a1:59:f2:4b:67:0f:91:fd:4c:
                    63:49:b8:33:cc:9d:d8:6c:ba:95:96:56:ed:0e:12:
                    f4:8e:aa:6a:5c:aa:be:fd:2b:2d:19:e7:ad:5e:e0:
                    e5:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:69:CB:CB:81:07:33:6B:86:F0:FE:53:59:6A:3E:FF:5E:8F:C0:A3
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/bb5af757-1bdc-48f9-bc20-c74fd49096a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:611::/48

    Signature Algorithm: sha256WithRSAEncryption
         0b:1f:56:0e:bb:e7:47:1a:77:06:0d:a2:44:e8:5b:90:fa:24:
         c4:1e:4b:aa:e0:b2:8e:06:8b:9e:89:2a:78:9f:25:ad:01:9c:
         25:2d:c4:0f:93:db:86:5f:f3:d4:9d:33:d2:b0:de:f4:58:99:
         93:af:ee:d0:14:3a:b9:42:78:74:f8:08:aa:87:85:e6:49:db:
         68:69:8f:14:5d:aa:ad:fa:32:fa:83:5d:6f:26:9c:68:ac:8b:
         73:48:a6:09:ad:50:21:93:e8:66:b7:65:e6:00:d6:71:75:8b:
         b3:97:29:03:0b:fb:64:36:01:54:26:5a:86:61:43:35:59:8c:
         af:34:fe:09:51:64:c2:5b:ee:f3:8b:9f:56:c7:1a:06:d1:66:
         68:9c:d8:0d:ba:5b:5f:ff:ae:ea:3f:67:35:18:72:44:ac:39:
         36:51:bf:6e:8a:4f:91:99:81:bd:08:a1:a2:5d:ad:52:98:dc:
         86:31:b1:69:d0:4a:5e:8d:b7:a7:63:b9:d2:6d:a6:00:3f:17:
         22:db:d3:64:79:b2:4b:b7:19:69:88:41:db:4e:a1:dd:b3:0f:
         d1:14:9b:89:82:78:d7:46:da:c5:b5:dc:91:02:9e:79:d8:9e:
         45:ea:82:1f:11:1a:e6:ad:75:7f:a8:70:e4:80:ab:b3:ad:a3:
         2f:40:08:07
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Oct 20 07:38:08 2025 by rpki-client