Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/fc2e9df4-0643-4bfc-b528-6948594de8d8.roa
File:                     fc2e9df4-0643-4bfc-b528-6948594de8d8.roa (raw, json)
Hash identifier:          ImY/QPxjDeGBHAE3S/UzWJXQ3gz3xZ0Akullyasrhvc=
Subject key identifier:   50:F6:63:BE:F4:D4:8F:70:86:21:8E:48:0B:AC:BB:41:44:8F:78:FF
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       6F73CACD1429C549A9D0542C03940C3782865BEC
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/fc2e9df4-0643-4bfc-b528-6948594de8d8.roa
Signing time:             Tue 19 Aug 2025 16:40:13 +0000
ROA not before:           Tue 19 Aug 2025 16:40:13 +0000
ROA not after:            Tue 23 Sep 2025 23:59:59 +0000
asID:                     21664
IP address blocks:        173.82.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:73:ca:cd:14:29:c5:49:a9:d0:54:2c:03:94:0c:37:82:86:5b:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Aug 19 16:40:13 2025 GMT
            Not After : Sep 23 23:59:59 2025 GMT
        Subject: serialNumber=fb8c87330d894407a853e0cde7a93bfaa5a050a5d7eaf65e336b902ed0841277, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:51:1e:77:07:b1:37:78:29:53:a2:19:5b:81:
                    d2:b9:c7:09:f3:b5:c8:1b:7c:20:87:05:c6:b8:0f:
                    ff:4d:9a:2f:e8:42:bb:91:40:fa:f2:ed:51:54:66:
                    fc:61:cc:40:6e:40:d8:49:cb:09:63:b1:19:2e:de:
                    8f:df:aa:0c:ad:52:77:f5:68:f5:fe:54:91:90:80:
                    11:04:00:44:d9:e4:86:a4:9b:73:74:fe:ad:61:16:
                    98:12:32:e5:3f:58:8a:f2:b9:5c:9e:b9:be:eb:30:
                    49:41:e7:11:e8:2a:17:ee:4c:ee:7f:c7:9c:d6:e5:
                    27:8d:54:7e:26:39:de:b3:e6:9b:45:fd:66:d1:c1:
                    33:30:bd:f3:32:dd:ef:07:bb:36:ca:f5:3c:77:bd:
                    fa:06:45:f5:c6:3f:10:73:f6:42:dd:1c:ca:61:de:
                    97:7c:4e:80:df:80:d2:ff:3b:fd:cd:20:91:66:d3:
                    d0:08:52:4e:c6:a5:c5:c1:08:7b:9f:8f:0c:57:34:
                    e2:57:bc:42:2d:3b:1b:d2:51:65:83:14:cf:14:46:
                    9f:f0:32:15:1f:4b:34:f7:f1:37:72:8f:f6:d7:62:
                    69:b5:76:75:39:38:e8:05:41:7c:4f:e8:96:ca:c1:
                    78:52:d2:b4:da:6a:db:da:85:6c:7d:06:49:de:53:
                    c9:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:F6:63:BE:F4:D4:8F:70:86:21:8E:48:0B:AC:BB:41:44:8F:78:FF
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/fc2e9df4-0643-4bfc-b528-6948594de8d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.82.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         97:d9:55:a6:79:a2:3d:1f:93:e6:91:10:0d:3e:09:15:8b:71:
         52:1f:15:15:38:38:74:4e:df:8c:7f:67:2f:ee:ed:79:02:5c:
         28:ee:75:71:7f:30:b6:48:67:3f:30:d1:3e:8f:14:d2:b6:a0:
         94:aa:dc:cc:e6:89:69:42:eb:4c:6d:d6:a7:cb:60:c3:bc:23:
         d1:11:32:80:5b:67:d2:47:aa:f2:bc:43:d9:95:ae:8e:40:72:
         1e:f0:4b:fa:cf:bf:71:20:b1:4b:e7:6b:43:1d:8b:1d:fe:d1:
         fb:cd:98:d8:7e:6d:45:8f:a9:a8:d2:0e:ae:62:3d:77:5f:36:
         31:b3:a7:6c:03:62:2b:2d:2d:46:36:c4:5b:9d:e4:4c:08:b8:
         2c:dd:55:a3:64:c9:72:65:49:ed:ae:eb:12:0b:6f:09:b9:f9:
         75:60:d1:23:30:e9:56:04:99:09:0c:e4:1e:34:e0:27:6f:1e:
         5c:e8:9e:1c:00:33:7d:32:a0:9b:43:bc:9f:2e:e3:c6:b3:cd:
         ab:ca:42:ce:7d:62:3d:c9:fa:da:ef:0c:35:da:28:f7:88:ae:
         80:d4:0d:87:07:3e:93:16:27:39:f0:7a:be:a4:cd:19:b3:5c:
         2e:7b:64:af:f4:25:2c:9e:d5:41:c6:e9:01:4c:55:ab:a1:8b:
         0b:0b:64:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:04:07 2025 by rpki-client