Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/c3c1377b-15a9-4918-8ac4-4abafd31046f.roa
File:                     c3c1377b-15a9-4918-8ac4-4abafd31046f.roa (raw, json)
Hash identifier:          2FWjKYiac5ZOwrEb1qJsRszBw48qcMUZ1rbiJuWYMr4=
Subject key identifier:   7A:F7:53:4A:CD:60:19:F7:F9:98:59:A2:C8:73:05:1F:9E:2A:C1:31
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       2AD8BB6C27FAD436879D93F351F74A45386D6864
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/c3c1377b-15a9-4918-8ac4-4abafd31046f.roa
Signing time:             Fri 15 Aug 2025 15:00:18 +0000
ROA not before:           Fri 15 Aug 2025 15:00:18 +0000
ROA not after:            Fri 19 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2605:9cc0:647::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 21 Aug 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:d8:bb:6c:27:fa:d4:36:87:9d:93:f3:51:f7:4a:45:38:6d:68:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Aug 15 15:00:18 2025 GMT
            Not After : Sep 19 23:59:59 2025 GMT
        Subject: serialNumber=3d8294444bb54dbd0982e0549c52c1d0dfea39d9852f685917958d18bffd2c8f, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:85:d6:fa:b6:6a:22:31:0e:fd:89:75:2d:d9:
                    d1:bc:84:72:33:6b:93:d8:59:2b:e5:65:a1:f6:ef:
                    9e:b0:81:68:78:f6:39:ef:4f:a3:2e:06:aa:19:7b:
                    f4:46:fc:c2:19:6f:ad:e7:b4:d4:0f:ba:9c:e7:f4:
                    f6:63:5b:b5:cc:fa:54:2f:e1:cd:18:82:03:d9:75:
                    69:6a:75:80:56:f9:29:4f:5c:a9:2c:88:23:5f:cf:
                    57:f2:8d:6a:e6:14:0b:6d:a4:df:9d:5a:ab:d4:22:
                    6f:5b:2e:59:0b:d4:fd:4c:1e:48:c2:4c:97:f1:52:
                    ed:2a:93:7d:d9:39:e8:16:77:f3:31:29:b0:3c:53:
                    24:07:36:ab:f4:87:f0:3e:fa:db:86:78:eb:79:e1:
                    4a:b4:20:17:cb:9b:65:a7:1a:0b:92:47:9a:46:c8:
                    4c:92:32:27:49:f2:be:32:47:cd:0f:65:4a:42:9e:
                    87:5f:8f:a3:bb:bd:b9:53:56:fc:05:3a:7c:47:e0:
                    3e:96:31:15:64:7d:5c:1d:f3:0d:a5:4b:cf:11:db:
                    af:47:f4:08:e2:6c:5c:a7:4c:a7:59:49:92:45:03:
                    58:d2:1c:ec:18:2d:a4:da:ac:5e:cf:93:7c:9e:c5:
                    8f:84:45:f1:50:c1:c1:2c:c0:f8:c0:2c:d5:29:2f:
                    ea:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:F7:53:4A:CD:60:19:F7:F9:98:59:A2:C8:73:05:1F:9E:2A:C1:31
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/c3c1377b-15a9-4918-8ac4-4abafd31046f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:647::/48

    Signature Algorithm: sha256WithRSAEncryption
         2d:cb:30:d0:62:7a:37:da:6f:ea:d5:36:f6:fe:9c:88:7f:fe:
         25:44:34:e5:e4:f3:be:5d:65:7c:e6:6d:98:50:ab:4e:a8:cb:
         8a:7f:13:38:e5:38:eb:25:c4:67:79:2e:e5:ac:cc:d2:9a:fe:
         83:16:cc:4a:a4:3d:36:32:5c:1d:58:9d:d9:ca:96:5c:6f:1f:
         a4:2c:b8:af:a5:31:bf:02:02:c6:5b:c8:bd:9a:fa:5a:ce:c1:
         86:a9:21:87:f3:cb:8c:39:31:fc:b6:6c:53:a6:28:d1:11:9c:
         5b:27:3c:60:ac:89:4a:e3:03:21:6f:88:a7:c1:09:f5:7a:e4:
         66:81:4f:b7:2c:a8:f7:a8:ab:a4:71:db:ab:01:a8:7d:be:ad:
         64:e4:b7:fb:5d:4e:52:59:79:bd:af:4f:05:99:2f:e8:34:fd:
         80:27:bd:24:99:8d:36:41:b1:52:3e:89:e9:d1:3d:2e:96:f1:
         0c:e1:6f:e0:a2:19:8c:31:88:e2:72:65:f4:66:48:3e:66:d1:
         8d:9f:1f:02:5e:08:42:0b:3a:3b:44:3b:85:71:97:f4:95:16:
         d7:ff:09:1d:9d:5b:54:e5:d2:cc:c6:e7:f4:21:2b:25:cc:8b:
         b4:eb:d8:5e:00:19:59:65:e3:b0:a4:2e:aa:d8:74:77:53:54:
         26:fc:3e:bd
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUKti7bCf61DaHnZPzUfdKRThtaGQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw
MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwODE1MTUwMDE4WhcNMjUwOTE5MjM1OTU5
WjB6MUkwRwYDVQQFE0AzZDgyOTQ0NDRiYjU0ZGJkMDk4MmUwNTQ5YzUyYzFkMGRm
ZWEzOWQ5ODUyZjY4NTkxNzk1OGQxOGJmZmQyYzhmMS0wKwYDVQQDEyRmNzI0Mzc4
NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCwhdb6tmoiMQ79iXUt2dG8hHIza5PYWSvlZaH2756wgWh4
9jnvT6MuBqoZe/RG/MIZb63ntNQPupzn9PZjW7XM+lQv4c0YggPZdWlqdYBW+SlP
XKksiCNfz1fyjWrmFAttpN+dWqvUIm9bLlkL1P1MHkjCTJfxUu0qk33ZOegWd/Mx
KbA8UyQHNqv0h/A++tuGeOt54Uq0IBfLm2WnGguSR5pGyEySMidJ8r4yR80PZUpC
nodfj6O7vblTVvwFOnxH4D6WMRVkfVwd8w2lS88R269H9AjibFynTKdZSZJFA1jS
HOwYLaTarF7Pk3yexY+ERfFQwcEswPjALNUpL+qTAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUevdTSs1gGff5mFmiyHMFH54qwTEwHwYDVR0jBBgwFoAUugzhfiM/vHHU
MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m
NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5
YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy
YTEzOWVhOTJiL2MzYzEzNzdiLTE1YTktNDkxOC04YWM0LTRhYmFmZDMxMDQ2Zi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh
LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmBZzABkcwDQYJKoZIhvcNAQELBQADggEBAC3LMNBiejfab+rVNvb+nIh/
/iVENOXk875dZXzmbZhQq06oy4p/EzjlOOslxGd5LuWszNKa/oMWzEqkPTYyXB1Y
ndnKllxvH6QsuK+lMb8CAsZbyL2a+lrOwYapIYfzy4w5Mfy2bFOmKNERnFsnPGCs
iUrjAyFviKfBCfV65GaBT7csqPeoq6Rx26sBqH2+rWTkt/tdTlJZeb2vTwWZL+g0
/YAnvSSZjTZBsVI+ienRPS6W8Qzhb+CiGYwxiOJyZfRmSD5m0Y2fHwJeCEILOjtE
O4Vxl/SVFtf/CR2dW1Tl0szG5/QhKyXMi7Tr2F4AGVll47CkLqrYdHdTVCb8Pr0=
-----END CERTIFICATE-----
Generated at Wed Aug 20 10:43:55 2025 by rpki-client