Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/53ea693e-fa8d-4126-baf5-06e1ceebdcec.roa
File:                     53ea693e-fa8d-4126-baf5-06e1ceebdcec.roa (raw, json)
Hash identifier:          m/y7T6emS29HqJ4Mmd99a8iExWk37FLGsWDwfJEhass=
Subject key identifier:   A8:6E:29:E6:CA:D4:02:9A:F1:E0:E9:DE:BB:7A:E1:1B:5D:15:E7:C8
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       05E9F4DDFC6AC94E44EAA2A180D5FDA159BC81CC
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/53ea693e-fa8d-4126-baf5-06e1ceebdcec.roa
Signing time:             Mon 18 Aug 2025 18:22:16 +0000
ROA not before:           Mon 18 Aug 2025 18:22:16 +0000
ROA not after:            Mon 22 Sep 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:f0f0:6107::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:e9:f4:dd:fc:6a:c9:4e:44:ea:a2:a1:80:d5:fd:a1:59:bc:81:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Aug 18 18:22:16 2025 GMT
            Not After : Sep 22 23:59:59 2025 GMT
        Subject: serialNumber=d818a35f5024d132a3147ba59a110bfb040139448c23de4966568a3b6e010779, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f0:4f:30:21:53:be:c0:8a:6f:95:87:16:93:
                    ed:b8:c3:30:30:06:c0:16:1b:c3:15:22:f1:23:0c:
                    ec:2c:91:8d:52:e9:8c:26:2c:17:3c:d1:00:48:fb:
                    ff:f5:3f:85:de:62:af:c9:fc:cc:63:ed:cd:5d:26:
                    d5:f7:27:19:db:ee:da:81:c6:4b:32:82:a4:0c:0c:
                    af:35:f9:d2:56:73:51:15:5d:cc:02:f5:b7:09:f2:
                    03:1a:5f:c3:7a:b9:80:69:e4:31:48:84:7a:43:a8:
                    78:9a:87:64:aa:57:3f:ee:77:b0:d7:d2:6b:d6:34:
                    fa:d5:3a:19:29:d1:a6:b1:bc:cd:f2:f9:dc:08:09:
                    1b:ac:00:8e:6b:83:45:98:e0:29:17:aa:51:02:67:
                    7f:0a:bf:22:e3:ca:5f:9d:c3:c7:80:3b:b4:fb:aa:
                    bd:1b:81:b9:a9:2b:a6:91:a1:1b:99:c5:40:b9:79:
                    06:ee:21:f1:46:85:b4:ba:f4:2c:b6:04:5d:2c:52:
                    62:a5:7f:d6:66:62:f6:7d:02:6e:b7:ce:09:95:4c:
                    c2:66:07:aa:11:fd:03:ac:ef:32:73:67:47:75:cc:
                    04:f9:5f:9d:6e:7f:3f:3b:1d:f8:d4:9d:c0:de:0f:
                    00:a7:b2:f2:e0:db:5f:72:4b:1b:8e:13:c7:92:b3:
                    a5:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:6E:29:E6:CA:D4:02:9A:F1:E0:E9:DE:BB:7A:E1:1B:5D:15:E7:C8
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/53ea693e-fa8d-4126-baf5-06e1ceebdcec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:6107::/48

    Signature Algorithm: sha256WithRSAEncryption
         a5:b5:a5:10:a2:32:56:a9:77:51:44:20:30:73:39:a7:82:62:
         84:7a:d8:ff:80:92:cb:8a:84:7e:2a:6e:88:d6:5b:65:9e:8d:
         87:f1:3a:c8:a1:21:f1:c3:e9:a0:81:ef:d9:73:34:51:2f:a6:
         e5:6e:c3:2b:75:1e:33:0a:eb:ee:10:b7:3a:3e:30:8a:dc:f1:
         5d:60:5b:43:27:1e:50:3e:25:d4:f8:3c:96:4a:42:d8:1b:7a:
         3e:37:18:cb:87:60:a1:7d:dd:77:cf:85:3c:f0:a6:ed:00:1a:
         e3:25:2c:16:7b:5d:a7:03:10:b2:67:26:bf:3b:0c:24:db:91:
         57:61:c2:38:ac:e0:77:fa:fa:78:33:e0:e8:cc:5d:35:02:82:
         42:c7:a3:47:58:82:a0:43:b8:9d:d0:6b:c0:6d:2a:54:0a:52:
         e9:5f:8d:cd:6a:30:77:69:32:1f:1b:b6:f5:4f:7f:f7:a2:f7:
         0a:12:98:3e:07:da:d5:3b:00:f0:a3:7c:84:bf:22:31:ca:e6:
         7c:b7:12:7e:a8:58:82:7a:7a:65:48:00:82:d0:be:e4:e0:46:
         2c:91:12:26:79:26:03:53:e9:5d:1c:ba:38:60:27:ec:20:58:
         e6:1e:16:b8:a2:0e:cd:1e:25:39:d4:06:e5:91:d2:99:79:8b:
         86:30:b5:7a
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUBen03fxqyU5E6qKhgNX9oVm8gcwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi
MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwODE4MTgyMjE2WhcNMjUwOTIyMjM1OTU5
WjB6MUkwRwYDVQQFE0BkODE4YTM1ZjUwMjRkMTMyYTMxNDdiYTU5YTExMGJmYjA0
MDEzOTQ0OGMyM2RlNDk2NjU2OGEzYjZlMDEwNzc5MS0wKwYDVQQDEyRmYmIyNzU3
Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCb8E8wIVO+wIpvlYcWk+24wzAwBsAWG8MVIvEjDOwskY1S
6YwmLBc80QBI+//1P4XeYq/J/Mxj7c1dJtX3Jxnb7tqBxksygqQMDK81+dJWc1EV
XcwC9bcJ8gMaX8N6uYBp5DFIhHpDqHiah2SqVz/ud7DX0mvWNPrVOhkp0aaxvM3y
+dwICRusAI5rg0WY4CkXqlECZ38KvyLjyl+dw8eAO7T7qr0bgbmpK6aRoRuZxUC5
eQbuIfFGhbS69Cy2BF0sUmKlf9ZmYvZ9Am63zgmVTMJmB6oR/QOs7zJzZ0d1zAT5
X51ufz87HfjUncDeDwCnsvLg219ySxuOE8eSs6XLAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUqG4p5srUAprx4Oneu3rhG10V58gwHwYDVR0jBBgwFoAULhjiCKGCVxsJ
fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h
Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4
YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk
NjJlNDhmMDU2LzUzZWE2OTNlLWZhOGQtNDEyNi1iYWY1LTA2ZTFjZWViZGNlYy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3
LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAPDwYQcwDQYJKoZIhvcNAQELBQADggEBAKW1pRCiMlapd1FEIDBzOaeC
YoR62P+AksuKhH4qbojWW2WejYfxOsihIfHD6aCB79lzNFEvpuVuwyt1HjMK6+4Q
tzo+MIrc8V1gW0MnHlA+JdT4PJZKQtgbej43GMuHYKF93XfPhTzwpu0AGuMlLBZ7
XacDELJnJr87DCTbkVdhwjis4Hf6+ngz4OjMXTUCgkLHo0dYgqBDuJ3Qa8BtKlQK
Uulfjc1qMHdpMh8btvVPf/ei9woSmD4H2tU7APCjfIS/IjHK5ny3En6oWIJ6emVI
AILQvuTgRiyREiZ5JgNT6V0cujhgJ+wgWOYeFriiDs0eJTnUBuWR0pl5i4YwtXo=
-----END CERTIFICATE-----
Generated at Thu Aug 21 05:00:21 2025 by rpki-client