Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/5c3979d3-e1c0-4d6d-94a7-34bc1e7b3b0e.roa
File:                     5c3979d3-e1c0-4d6d-94a7-34bc1e7b3b0e.roa (raw, json)
Hash identifier:          vWa+OqHl+XWt/xlkLMF7evWZ0BgwtTvVVwizRRuOfUs=
Subject key identifier:   9F:71:AD:19:32:03:21:69:83:F9:49:54:A3:6A:91:7E:18:9C:24:D3
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       472CD8D5D1FB122F61704C1A51D86BAF20AE4DC2
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/5c3979d3-e1c0-4d6d-94a7-34bc1e7b3b0e.roa
Signing time:             Fri 15 Aug 2025 15:21:06 +0000
ROA not before:           Fri 15 Aug 2025 15:21:06 +0000
ROA not after:            Fri 19 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2605:9cc0:c16::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 21 Aug 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:2c:d8:d5:d1:fb:12:2f:61:70:4c:1a:51:d8:6b:af:20:ae:4d:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Aug 15 15:21:06 2025 GMT
            Not After : Sep 19 23:59:59 2025 GMT
        Subject: serialNumber=9d78039160d784ee389d845c577642693e1b1e71c0921544cf90d47c4a25cf00, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:2d:75:95:0d:f7:d4:3d:ff:1d:74:fd:2a:f9:
                    3d:31:cd:ef:13:30:68:41:63:42:33:57:5e:37:d0:
                    69:53:65:f3:23:04:50:42:bc:3d:13:d7:f8:e4:22:
                    b2:1a:5f:48:d9:16:21:07:fc:2d:02:10:61:21:00:
                    89:8f:80:c7:2f:ef:36:5e:e2:a1:b4:e8:51:7b:9e:
                    e6:09:68:ee:4e:00:e9:d2:19:0a:74:ea:ba:05:1c:
                    e6:ef:a9:86:83:25:7c:32:bf:96:3e:c9:db:9f:2e:
                    1e:ed:71:91:84:9d:75:c2:8b:8b:bf:95:0c:12:c6:
                    1a:80:b1:18:43:ac:65:c5:41:2c:b7:68:ac:28:56:
                    c0:d5:37:59:9f:de:f3:73:36:8e:65:cc:2d:4c:b3:
                    85:d7:98:cd:35:2e:11:d1:e5:a6:34:f6:3e:59:02:
                    99:76:47:48:59:97:63:32:95:a4:12:07:40:4f:ff:
                    70:9e:8b:bb:25:20:36:e8:98:64:a4:6c:87:28:b9:
                    b2:d1:d7:0b:ee:56:00:55:01:e8:ff:cd:77:41:b0:
                    2c:f1:22:53:c8:2c:48:9d:6e:8b:5f:83:0e:21:e0:
                    98:59:03:2e:51:1b:54:87:7f:af:9e:7d:68:f3:9c:
                    5f:23:78:2e:5c:c0:e9:ee:16:f5:29:31:60:2e:02:
                    26:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:71:AD:19:32:03:21:69:83:F9:49:54:A3:6A:91:7E:18:9C:24:D3
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/5c3979d3-e1c0-4d6d-94a7-34bc1e7b3b0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:c16::/48

    Signature Algorithm: sha256WithRSAEncryption
         8c:c8:28:11:70:d5:84:3e:1a:24:93:49:30:3f:ac:05:c5:64:
         39:8c:43:ee:00:0f:da:a4:83:8d:8c:c7:3e:25:33:c7:31:6b:
         06:b6:eb:9c:22:d5:eb:e2:e0:a7:9f:8f:e4:1e:af:e4:3f:b4:
         97:85:aa:c5:b8:aa:5b:fa:76:ef:4f:6c:3e:7f:c5:76:6a:7a:
         95:3d:a5:77:70:d5:59:38:1c:af:fc:9a:d7:17:6e:c7:4c:4d:
         fe:88:b7:25:28:fe:2b:46:58:9c:bb:ce:83:e8:47:04:27:35:
         f9:48:2e:89:56:0a:1f:c8:1f:ba:93:46:98:db:91:ea:d8:32:
         ab:68:55:a5:0e:d5:81:60:e0:b1:c6:28:7a:9a:2b:b1:b5:41:
         a7:58:21:18:6a:35:be:8b:62:20:9b:e5:03:e5:f5:32:78:7b:
         e0:1d:94:15:ff:e5:95:bc:33:22:12:fe:21:c6:d9:3b:fa:d2:
         06:91:cf:b4:40:46:aa:04:0a:85:f6:dd:af:ae:34:28:66:26:
         3c:90:a1:74:1e:1b:d0:08:4c:71:0c:ac:77:80:33:53:b2:dc:
         a3:84:95:b3:a1:39:d0:4c:5c:92:46:19:ee:23:ef:51:d6:9c:
         0c:31:7a:54:b5:74:2b:a1:fa:00:9b:13:b6:4d:bc:94:d4:86:
         56:58:1d:85
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIURyzY1dH7Ei9hcEwaUdhrryCuTcIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw
MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwODE1MTUyMTA2WhcNMjUwOTE5MjM1OTU5
WjB6MUkwRwYDVQQFE0A5ZDc4MDM5MTYwZDc4NGVlMzg5ZDg0NWM1Nzc2NDI2OTNl
MWIxZTcxYzA5MjE1NDRjZjkwZDQ3YzRhMjVjZjAwMS0wKwYDVQQDEyRmNzI0Mzc4
NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC7LXWVDffUPf8ddP0q+T0xze8TMGhBY0IzV1430GlTZfMj
BFBCvD0T1/jkIrIaX0jZFiEH/C0CEGEhAImPgMcv7zZe4qG06FF7nuYJaO5OAOnS
GQp06roFHObvqYaDJXwyv5Y+ydufLh7tcZGEnXXCi4u/lQwSxhqAsRhDrGXFQSy3
aKwoVsDVN1mf3vNzNo5lzC1Ms4XXmM01LhHR5aY09j5ZApl2R0hZl2MylaQSB0BP
/3Cei7slIDbomGSkbIcoubLR1wvuVgBVAej/zXdBsCzxIlPILEidbotfgw4h4JhZ
Ay5RG1SHf6+efWjznF8jeC5cwOnuFvUpMWAuAia9AgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUn3GtGTIDIWmD+UlUo2qRfhicJNMwHwYDVR0jBBgwFoAUugzhfiM/vHHU
MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m
NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5
YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy
YTEzOWVhOTJiLzVjMzk3OWQzLWUxYzAtNGQ2ZC05NGE3LTM0YmMxZTdiM2IwZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh
LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmBZzADBYwDQYJKoZIhvcNAQELBQADggEBAIzIKBFw1YQ+GiSTSTA/rAXF
ZDmMQ+4AD9qkg42Mxz4lM8cxawa265wi1evi4Kefj+Qer+Q/tJeFqsW4qlv6du9P
bD5/xXZqepU9pXdw1Vk4HK/8mtcXbsdMTf6ItyUo/itGWJy7zoPoRwQnNflILolW
Ch/IH7qTRpjbkerYMqtoVaUO1YFg4LHGKHqaK7G1QadYIRhqNb6LYiCb5QPl9TJ4
e+AdlBX/5ZW8MyIS/iHG2Tv60gaRz7RARqoECoX23a+uNChmJjyQoXQeG9AITHEM
rHeAM1Oy3KOElbOhOdBMXJJGGe4j71HWnAwxelS1dCuh+gCbE7ZNvJTUhlZYHYU=
-----END CERTIFICATE-----
Generated at Wed Aug 20 10:40:32 2025 by rpki-client