Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/2d483f0f-c559-4f53-a15a-67216b94ba21.roa
File:                     2d483f0f-c559-4f53-a15a-67216b94ba21.roa (raw, json)
Hash identifier:          IPwh7HM61JBNqUBW1FmxqO0YMbCuR41z5SOE3X0yDQ0=
Subject key identifier:   75:4D:86:89:03:FE:C3:E7:E5:2B:22:C3:00:D3:F8:B8:7D:10:8C:F6
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       6603DD7EB73E699A6F90FBA5FE8D6A7901EA3DB0
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/2d483f0f-c559-4f53-a15a-67216b94ba21.roa
Signing time:             Fri 26 Sep 2025 17:51:45 +0000
ROA not before:           Fri 26 Sep 2025 17:51:45 +0000
ROA not after:            Fri 31 Oct 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2605:9cc0:387::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:03:dd:7e:b7:3e:69:9a:6f:90:fb:a5:fe:8d:6a:79:01:ea:3d:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Sep 26 17:51:45 2025 GMT
            Not After : Oct 31 23:59:59 2025 GMT
        Subject: serialNumber=317a3de566576feeb51ccbf5c2bcd6463c1522146ec4ac905738cc2eca342547, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:45:2b:b4:07:ac:b7:7c:47:3f:58:44:cc:74:
                    5a:56:5a:a2:eb:b6:d1:a3:2b:d2:f4:52:3b:1c:f9:
                    f1:bd:e5:35:7b:a6:6a:78:ad:87:55:5f:f0:8e:78:
                    f2:9b:99:50:89:d7:ac:3a:0c:e6:f7:91:22:a8:97:
                    b3:4d:e7:0a:39:10:04:6f:35:5f:1a:92:a8:54:e7:
                    8d:6f:57:e8:f8:b3:d4:38:26:06:91:c5:81:46:7b:
                    ae:61:c4:af:36:fb:d7:15:28:d4:72:b5:01:82:a2:
                    86:41:c8:fb:22:20:ec:8d:47:29:e9:d9:71:7f:b9:
                    53:ef:06:c5:98:63:fd:a6:2b:a7:87:14:1e:5a:2a:
                    08:56:f7:bf:70:b2:0b:b7:53:e7:b4:30:f7:00:47:
                    c0:86:5a:64:5e:c6:a9:07:cd:d0:8c:7e:04:4d:73:
                    63:52:47:5d:d4:b3:08:20:06:e4:58:27:2b:13:50:
                    42:65:0a:ae:da:0f:ab:af:ae:96:58:ac:82:de:bc:
                    ca:fe:85:e9:25:78:1b:3f:7f:70:fb:6e:7a:92:71:
                    d3:2a:6c:74:ed:ba:45:8b:c0:a0:df:22:23:78:44:
                    37:73:4d:b7:a3:cd:ae:b6:e9:f5:3c:9b:85:89:2e:
                    8e:2c:d0:db:92:86:05:4a:7e:43:9e:86:61:34:f4:
                    f2:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:4D:86:89:03:FE:C3:E7:E5:2B:22:C3:00:D3:F8:B8:7D:10:8C:F6
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/2d483f0f-c559-4f53-a15a-67216b94ba21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:387::/48

    Signature Algorithm: sha256WithRSAEncryption
         1a:da:4d:ff:eb:12:82:61:1a:49:8f:3d:32:49:e7:c5:b5:4c:
         44:89:0d:02:d6:d1:f1:d8:de:50:00:7e:b3:a8:a0:1b:fc:8a:
         96:e1:62:74:1f:19:33:c9:76:21:cc:31:ac:15:b6:da:4a:21:
         ee:68:9f:d3:24:63:71:5b:e9:a6:f1:2b:ae:23:50:68:1f:91:
         f7:2a:86:cd:79:fa:07:c1:b4:5b:a3:72:71:ab:bc:f4:bf:6e:
         85:74:3c:b2:89:a5:8e:8f:d7:b2:3f:f4:61:49:82:9f:44:fc:
         7c:27:8b:d3:34:07:d0:66:04:34:e6:3e:88:31:ea:d7:f6:df:
         35:fe:e8:e8:f6:79:4a:03:f2:73:01:f6:b3:b2:c4:18:52:12:
         68:cd:37:f1:7e:b2:92:54:bf:7f:f1:3a:c9:2d:cb:84:36:27:
         38:e0:12:bf:34:ef:c0:63:f2:c5:80:f3:6f:dc:1b:1f:2a:e0:
         fe:71:c5:1e:c2:d9:47:e4:15:ab:ef:ed:8b:82:f9:e4:87:f3:
         36:b0:f7:e4:8c:2a:31:ae:76:1a:67:88:48:4a:56:43:9b:b6:
         a3:5d:12:00:95:7f:0e:21:93:f9:44:6e:c2:72:95:1e:05:fc:
         86:dc:da:10:6e:bc:00:3d:09:fb:fa:0e:c6:b4:d1:b4:65:af:
         ea:a4:00:75
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUZgPdfrc+aZpvkPul/o1qeQHqPbAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw
MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwOTI2MTc1MTQ1WhcNMjUxMDMxMjM1OTU5
WjB6MUkwRwYDVQQFE0AzMTdhM2RlNTY2NTc2ZmVlYjUxY2NiZjVjMmJjZDY0NjNj
MTUyMjE0NmVjNGFjOTA1NzM4Y2MyZWNhMzQyNTQ3MS0wKwYDVQQDEyRmNzI0Mzc4
NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDARSu0B6y3fEc/WETMdFpWWqLrttGjK9L0Ujsc+fG95TV7
pmp4rYdVX/COePKbmVCJ16w6DOb3kSKol7NN5wo5EARvNV8akqhU541vV+j4s9Q4
JgaRxYFGe65hxK82+9cVKNRytQGCooZByPsiIOyNRynp2XF/uVPvBsWYY/2mK6eH
FB5aKghW979wsgu3U+e0MPcAR8CGWmRexqkHzdCMfgRNc2NSR13UswggBuRYJysT
UEJlCq7aD6uvrpZYrILevMr+hekleBs/f3D7bnqScdMqbHTtukWLwKDfIiN4RDdz
Tbejza626fU8m4WJLo4s0NuShgVKfkOehmE09PINAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUdU2GiQP+w+flKyLDANP4uH0QjPYwHwYDVR0jBBgwFoAUugzhfiM/vHHU
MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m
NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5
YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy
YTEzOWVhOTJiLzJkNDgzZjBmLWM1NTktNGY1My1hMTVhLTY3MjE2Yjk0YmEyMS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh
LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmBZzAA4cwDQYJKoZIhvcNAQELBQADggEBABraTf/rEoJhGkmPPTJJ58W1
TESJDQLW0fHY3lAAfrOooBv8ipbhYnQfGTPJdiHMMawVttpKIe5on9MkY3Fb6abx
K64jUGgfkfcqhs15+gfBtFujcnGrvPS/boV0PLKJpY6P17I/9GFJgp9E/Hwni9M0
B9BmBDTmPogx6tf23zX+6Oj2eUoD8nMB9rOyxBhSEmjNN/F+spJUv3/xOskty4Q2
JzjgEr8078Bj8sWA82/cGx8q4P5xxR7C2UfkFavv7YuC+eSH8zaw9+SMKjGudhpn
iEhKVkObtqNdEgCVfw4hk/lEbsJylR4F/Ibc2hBuvAA9Cfv6Dsa00bRlr+qkAHU=
-----END CERTIFICATE-----
Generated at Wed Oct 8 23:13:42 2025 by rpki-client