Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/79232961-c24e-4e24-a09f-bc78fb7c0bcc.roa
File:                     79232961-c24e-4e24-a09f-bc78fb7c0bcc.roa (raw, json)
Hash identifier:          +NfvmaxxsqeKqxFwIk+im7n+BOzQ/xvP9pXfIgLJ1gY=
Subject key identifier:   30:D8:AA:CF:66:65:7B:A4:40:32:62:5C:C7:3F:A8:F8:E8:83:BD:A1
Certificate issuer:       /CN=5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64
Certificate serial:       6925BB70A60578D30C38C296267528C0B4DC3CB6
Authority key identifier: FE:22:E0:F7:22:CC:4F:06:0C:58:5A:12:6F:E6:A2:65:00:36:5E:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/79232961-c24e-4e24-a09f-bc78fb7c0bcc.roa
Signing time:             Mon 06 Oct 2025 16:41:09 +0000
ROA not before:           Mon 06 Oct 2025 16:41:09 +0000
ROA not after:            Mon 10 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2620:107:3001::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/42b2991f-22c7-42f7-8cf5-4f3138859732.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/42b2991f-22c7-42f7-8cf5-4f3138859732.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:25:bb:70:a6:05:78:d3:0c:38:c2:96:26:75:28:c0:b4:dc:3c:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64
        Validity
            Not Before: Oct  6 16:41:09 2025 GMT
            Not After : Nov 10 23:59:59 2025 GMT
        Subject: serialNumber=0c306e60b761966a291fb1b4489b35fb145a55b0367def4a3c8894a2ff5028fb, CN=71c3876e-b944-4600-92c7-cec33d89523f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:3f:21:e2:e5:5b:32:e2:92:86:1d:c9:66:61:
                    2f:a8:c8:3e:55:d2:7e:63:52:97:7e:4c:4c:c0:f5:
                    24:78:0f:d4:cb:19:c4:81:97:ac:92:91:33:57:9c:
                    cc:ef:16:63:bb:b3:0a:79:30:e3:61:75:e4:b9:01:
                    77:96:d6:4b:f8:f1:2c:19:34:70:d9:11:b3:c4:57:
                    ea:33:65:c1:95:e4:7c:a9:3d:fe:5c:1a:9b:96:0e:
                    ef:ae:f8:e3:56:71:11:5b:44:d3:7b:b0:5f:6f:5b:
                    3e:cb:b1:c3:c2:93:61:31:1e:47:d4:94:ee:5b:1b:
                    44:fb:59:86:57:16:a3:85:04:f1:fd:a8:ae:c2:b5:
                    c8:ae:d2:59:9e:b3:97:f4:4c:5b:8f:de:9a:ae:77:
                    f3:3f:8c:5b:f4:d6:4a:2f:c2:be:c6:48:16:f0:f3:
                    77:6d:44:bc:0a:7e:b2:06:c8:27:b7:cc:27:72:e0:
                    94:d3:36:be:ad:63:bc:7e:ee:37:b4:99:78:33:13:
                    e0:9b:fc:38:54:5d:c3:3e:eb:40:10:9d:78:62:3a:
                    d7:4e:3f:d2:ba:e5:86:e3:87:ab:b4:0b:e6:ef:52:
                    41:18:be:0f:7b:0a:78:ff:f8:64:81:1b:09:b1:ee:
                    74:c0:06:c7:1e:13:3d:8e:45:2b:2a:77:b4:64:1a:
                    56:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:D8:AA:CF:66:65:7B:A4:40:32:62:5C:C7:3F:A8:F8:E8:83:BD:A1
            X509v3 Authority Key Identifier:
                keyid:FE:22:E0:F7:22:CC:4F:06:0C:58:5A:12:6F:E6:A2:65:00:36:5E:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/79232961-c24e-4e24-a09f-bc78fb7c0bcc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:107:3001::/48

    Signature Algorithm: sha256WithRSAEncryption
         13:ed:9c:1a:d6:83:64:31:c7:71:4b:90:1d:51:b7:73:64:da:
         5a:c7:31:48:c8:8a:b2:95:50:f4:c0:47:a1:7f:09:9d:1e:83:
         ee:35:64:8f:c5:94:b8:86:4e:1e:45:78:ea:c4:7d:4b:11:bf:
         ed:c5:ec:68:e9:97:c3:c9:57:cd:eb:72:6b:95:26:ab:00:ce:
         95:bc:a7:56:72:91:20:91:e0:88:a2:f4:15:0e:3c:2e:55:da:
         34:f5:b8:38:5d:39:ce:10:e0:1c:a7:95:4f:32:4a:9b:16:7c:
         fc:3b:e5:73:1b:53:00:44:07:11:4f:82:c0:71:2f:91:dc:f6:
         9c:8c:08:ca:c8:ba:53:12:c9:a1:5b:16:2c:32:2c:67:03:93:
         ac:36:90:c5:f3:74:5a:6f:5b:e1:f7:9e:34:ef:cd:a1:9e:6d:
         80:be:c3:c0:7a:e7:9d:e1:46:7c:da:33:65:52:49:7e:f8:f2:
         e9:2e:7b:e7:68:81:1b:59:35:9c:1e:26:1e:85:9b:ff:de:9c:
         ed:9b:17:59:f1:00:db:fd:33:a6:ae:3d:fe:69:94:cd:0a:88:
         ec:b2:6f:6b:08:25:f9:a2:fa:41:06:84:c3:c3:28:81:ba:d3:
         2b:53:b0:60:6e:7b:c0:3c:0b:c2:6a:44:b6:26:7a:1b:39:cb:
         f8:45:45:eb
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Oct 20 12:52:55 2025 by rpki-client