Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/ce035316-a06e-4b49-a04d-0f1a5ca31246.roa
File:                     ce035316-a06e-4b49-a04d-0f1a5ca31246.roa (raw, json)
Hash identifier:          U5lTw2xV1a4lt9TxPSs0pit0+adjF1F0QEiMUUcFMho=
Subject key identifier:   06:F2:C6:61:AB:8E:7E:B4:C6:AD:03:C3:89:FD:A9:02:25:41:FE:8A
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       62EECE7363014036A07260892767681E21D0F589
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/ce035316-a06e-4b49-a04d-0f1a5ca31246.roa
Signing time:             Wed 25 Jun 2025 00:40:51 +0000
ROA not before:           Wed 25 Jun 2025 00:40:51 +0000
ROA not after:            Wed 30 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2605:9cc0:c18::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:ee:ce:73:63:01:40:36:a0:72:60:89:27:67:68:1e:21:d0:f5:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Jun 25 00:40:51 2025 GMT
            Not After : Jul 30 23:59:59 2025 GMT
        Subject: serialNumber=a7a0a5bca11539b57d894f111ff562875b8193bb0afc55fbc3e6662da94b7f34, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:de:ca:76:d9:1b:d1:d5:92:27:ef:ac:39:a0:
                    13:62:5f:00:69:6e:3e:7c:3d:3f:f0:eb:09:83:d6:
                    71:6c:21:12:f0:88:5b:6d:fe:2c:4e:e8:c6:d1:31:
                    3a:15:8a:f3:0f:96:cf:25:c5:83:19:26:26:7a:0c:
                    02:76:76:77:89:e0:3f:f1:39:d9:da:39:bc:b3:21:
                    9c:77:d8:27:f9:fe:a8:e8:c1:0e:c0:95:28:05:6f:
                    e0:65:55:50:00:07:25:62:1d:69:c6:0a:3e:9f:33:
                    60:d8:2e:f1:eb:7e:2b:9d:f8:6c:a3:35:da:2b:14:
                    f0:4d:14:5d:3b:b2:af:28:6c:57:13:86:d4:c1:a4:
                    c2:61:c1:3f:06:32:25:b0:b4:cd:f9:c7:51:34:c1:
                    8c:64:7b:64:f2:a5:1f:99:85:e9:ea:4a:73:e1:9d:
                    11:b0:c9:fb:06:5b:0b:09:ef:0d:59:45:c5:23:0f:
                    f9:5b:6f:c2:87:65:ce:94:1c:7e:5a:05:38:f4:7a:
                    d2:26:4c:8f:5e:e7:92:5f:0f:6c:bb:ca:16:7f:1f:
                    23:16:9a:cb:20:ff:7a:00:ea:4d:ba:9d:1b:9d:8e:
                    55:e8:dd:b9:da:f8:4c:11:b3:17:3f:21:5a:08:50:
                    99:6a:27:c0:56:8c:2d:a5:fb:57:fb:49:27:41:73:
                    5b:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:F2:C6:61:AB:8E:7E:B4:C6:AD:03:C3:89:FD:A9:02:25:41:FE:8A
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/ce035316-a06e-4b49-a04d-0f1a5ca31246.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:c18::/48

    Signature Algorithm: sha256WithRSAEncryption
         07:20:1e:7b:e3:49:19:c6:85:8c:ae:58:3b:dc:b1:be:ab:13:
         6f:f5:02:92:3e:b9:51:1a:ff:cb:9c:cc:1e:91:c1:0a:29:e2:
         5b:73:ff:0a:a9:1f:b4:94:69:9d:38:70:b8:ce:fe:31:d0:f4:
         d0:05:61:62:f5:3f:9f:ef:16:3a:b9:f4:d0:b6:a5:f1:1c:7e:
         d3:2f:a7:7e:87:f7:01:0a:2d:46:bb:99:a0:9a:9e:9a:2c:b8:
         54:90:82:b9:32:5b:c5:3d:8d:8c:91:fc:03:c3:52:f7:f3:4e:
         74:3e:d9:80:7f:e5:a3:41:7d:fe:94:e5:3c:14:b4:b9:b3:7c:
         a6:d9:08:7e:f2:a5:f7:ad:64:0e:28:7a:fd:a2:76:85:b8:89:
         b5:f1:46:81:32:7a:d2:24:9b:14:2d:50:cb:41:ee:12:de:65:
         ed:8b:ad:bb:b4:fa:eb:63:8a:c5:bc:9a:46:49:c0:86:2d:51:
         f1:72:4b:35:fd:6f:ff:77:da:71:dd:05:eb:b2:c3:46:ae:aa:
         1f:31:79:6e:2f:62:d8:25:09:9b:0f:ce:1a:5f:d7:74:8d:ff:
         15:9b:12:3a:e8:06:15:0d:9c:d6:7e:d8:83:d5:85:7b:d6:a5:
         39:d9:ea:e8:35:e7:4b:0c:fc:63:3f:20:09:83:dc:27:36:f9:
         11:14:60:6c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Jun 29 03:00:06 2025 by rpki-client