Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/9318efc3-4d3a-413f-86c6-169a71d2eccb.roa
File:                     9318efc3-4d3a-413f-86c6-169a71d2eccb.roa (raw, json)
Hash identifier:          fI0AxCUrfvmNusEM8IUtrafc/+Cqp+BuNNqAlcdbLco=
Subject key identifier:   4B:0B:65:44:AF:E5:CC:24:B0:E4:E4:F9:CD:80:CE:8B:21:DC:AD:F5
Certificate issuer:       /CN=0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d
Certificate serial:       1E6E7956370264BF906F4FB30E5857582632CC55
Authority key identifier: 7D:84:47:C4:97:8A:0B:4C:73:9B:EB:F6:92:E2:4C:75:DD:3F:BC:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/9318efc3-4d3a-413f-86c6-169a71d2eccb.roa
Signing time:             Fri 10 Oct 2025 00:21:08 +0000
ROA not before:           Fri 10 Oct 2025 00:21:08 +0000
ROA not after:            Fri 14 Nov 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2605:b140::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/b4e4fec5-3510-4017-90ef-8391412ecd6c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/b4e4fec5-3510-4017-90ef-8391412ecd6c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:6e:79:56:37:02:64:bf:90:6f:4f:b3:0e:58:57:58:26:32:cc:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d
        Validity
            Not Before: Oct 10 00:21:08 2025 GMT
            Not After : Nov 14 23:59:59 2025 GMT
        Subject: serialNumber=b3f430443b046893b558d5a17cab7f6a4b7e7e295f5f199d8714ec8c9a3b7a8b, CN=b0dbbb6a-5472-4b68-ae4d-401518603039
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:fd:fd:8c:07:58:f2:c0:23:15:a9:e6:66:eb:
                    5a:a5:70:cc:3d:7a:cc:23:8b:ee:d0:e6:89:af:97:
                    7e:77:83:01:58:14:00:b0:ce:91:6b:85:c3:03:51:
                    86:42:57:fb:33:50:b7:3f:68:be:59:29:0c:a5:50:
                    73:e1:42:12:20:13:07:9b:c1:43:59:c7:07:9c:78:
                    9b:3e:47:2e:43:5c:2a:6c:66:38:5c:f7:f4:b7:26:
                    ce:31:bb:5e:57:50:06:f4:38:2c:83:45:8b:df:02:
                    32:e9:55:dd:08:3d:8b:5c:d7:4a:c4:7a:c9:97:94:
                    b2:6b:34:33:8c:22:f3:94:f7:21:c9:cf:33:e9:53:
                    cb:0a:71:b4:b5:fa:25:fd:f9:d2:d7:4c:ff:18:88:
                    c8:7b:d9:af:1d:dd:a7:36:c9:39:14:a1:f1:5c:bc:
                    a2:e0:a6:fb:3e:48:59:dc:9b:24:3d:53:4e:72:70:
                    0f:8d:df:a6:2a:98:80:37:0e:24:2a:2a:47:f7:4c:
                    ab:7c:f2:a8:10:84:1e:e2:f7:e4:2b:c0:54:e6:6c:
                    6f:c8:ac:a8:2b:e2:46:3d:79:9c:2e:83:20:f8:28:
                    8d:a1:fc:1a:67:f8:67:dd:2b:36:d5:80:e6:8a:f4:
                    e2:05:9a:27:86:33:f2:98:a7:bf:e7:7d:f4:82:05:
                    a1:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:0B:65:44:AF:E5:CC:24:B0:E4:E4:F9:CD:80:CE:8B:21:DC:AD:F5
            X509v3 Authority Key Identifier:
                keyid:7D:84:47:C4:97:8A:0B:4C:73:9B:EB:F6:92:E2:4C:75:DD:3F:BC:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/9318efc3-4d3a-413f-86c6-169a71d2eccb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:b140::/32

    Signature Algorithm: sha256WithRSAEncryption
         11:49:c8:78:ca:d2:70:c3:d3:6e:f4:48:9c:1f:56:e1:0d:20:
         a2:95:0f:dc:2d:c9:9c:24:70:5a:63:b6:54:b8:ff:5f:e1:94:
         dd:e9:0a:59:53:73:ea:48:81:8a:b7:57:28:02:ab:f0:ff:ee:
         de:88:ab:10:16:01:f5:c7:7c:d9:e1:31:50:64:ef:71:b4:ca:
         89:19:28:b5:32:0d:1c:4d:bd:3b:ce:b3:21:0f:85:41:e7:36:
         18:a2:3c:39:ad:9a:4e:6b:3a:ae:e6:fb:10:c5:64:39:87:04:
         a3:f3:fd:0b:de:69:35:68:cd:d1:3a:8a:3b:cb:bf:b0:69:7e:
         2e:d9:4f:5d:b9:37:72:13:4e:3f:56:1d:f3:00:db:76:03:8e:
         11:92:d1:dd:3c:1c:87:90:d0:62:b8:8c:0b:34:10:18:61:84:
         49:e0:f1:74:6d:a1:e1:fc:54:98:1a:e1:11:0a:07:77:e6:54:
         58:40:59:60:73:ea:88:a8:e9:03:ae:4c:f1:7d:3a:1d:c4:a3:
         d6:0d:a5:8c:bb:b1:08:7d:b0:86:3d:9e:9f:ca:12:0f:d8:9e:
         24:ba:5b:c5:b7:96:0c:3f:cc:34:07:67:d5:9b:80:4d:d5:25:
         c0:f2:fd:ae:86:df:b4:b3:eb:15:ce:86:34:f1:6c:74:fb:78:
         59:8e:57:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:22:13 2025 by rpki-client