Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/f67723c2-64ad-4374-9b2b-3c1633b90448.roa
File:                     f67723c2-64ad-4374-9b2b-3c1633b90448.roa (raw, json)
Hash identifier:          7K67ZS0sFs1+/VzFRDxpaNZTdYiVTzxGAnp8l8tfzmQ=
Subject key identifier:   D8:AB:7B:D4:18:BB:C1:3D:8C:62:DB:0F:0F:B1:A7:7C:4F:09:27:9D
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       7B3B6B8F207746B9600F8F4831644B6F2FD9EF3D
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/f67723c2-64ad-4374-9b2b-3c1633b90448.roa
Signing time:             Wed 05 Feb 2025 00:00:00 +0000
ROA not before:           Wed 05 Feb 2025 00:00:00 +0000
ROA not after:            Wed 12 Mar 2025 23:59:59 +0000
asID:                     8987
IP address blocks:        2605:9cc0:39c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 12 Feb 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:3b:6b:8f:20:77:46:b9:60:0f:8f:48:31:64:4b:6f:2f:d9:ef:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Feb  5 00:00:00 2025 GMT
            Not After : Mar 12 23:59:59 2025 GMT
        Subject: CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:94:cc:3b:12:f0:fd:cd:bb:ba:74:49:40:4b:
                    64:69:76:27:15:ca:4c:cf:f0:99:61:8d:91:f0:72:
                    a4:a7:75:00:88:d6:f8:0b:1d:19:6d:7a:9d:dc:d0:
                    12:b1:08:43:dc:12:0c:db:0d:cb:fb:09:6b:d6:d9:
                    f8:77:53:f2:a3:33:2a:0f:42:90:3b:5d:95:1b:cf:
                    f2:30:37:1a:03:f4:3c:a6:41:a9:2b:b5:b1:79:cd:
                    3c:a4:0c:b7:45:e8:aa:a3:6e:ec:f1:bf:d1:bd:2a:
                    dd:62:a4:65:1b:6b:43:2e:d5:1c:c7:ca:bf:3f:d5:
                    3f:55:16:a6:09:07:3a:93:9d:42:c0:81:64:ef:f4:
                    26:85:ec:61:b8:c4:6f:73:9e:d9:38:5f:3c:b8:de:
                    25:ac:df:2f:00:e2:8e:9a:94:26:ce:9f:ae:4b:29:
                    c4:70:74:df:7a:4f:6a:87:52:a1:9d:97:91:2b:8a:
                    07:f8:1e:69:9b:4a:6d:6c:ea:8c:35:00:7b:00:bc:
                    e3:2b:5e:f5:89:24:7b:18:62:9c:ab:79:28:1c:11:
                    1e:8b:ce:44:e2:90:74:75:6c:89:3a:24:31:4a:10:
                    f7:e8:eb:fa:ac:18:ce:d4:72:3a:f5:b0:c9:f9:13:
                    d3:a0:48:a0:a6:6a:60:ba:26:ca:6d:d9:fd:e9:8f:
                    11:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:AB:7B:D4:18:BB:C1:3D:8C:62:DB:0F:0F:B1:A7:7C:4F:09:27:9D
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/f67723c2-64ad-4374-9b2b-3c1633b90448.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:39c::/48

    Signature Algorithm: sha256WithRSAEncryption
         35:40:5d:c8:f9:6f:85:29:a7:68:6d:3f:db:5f:bb:97:7b:b8:
         54:c4:e3:b1:d3:a4:dd:37:57:28:c8:94:08:fe:97:69:80:5c:
         26:6f:e2:34:fd:e6:8a:4f:e2:79:58:55:d4:ed:85:8e:2f:76:
         7e:ea:ee:d1:21:45:5d:33:2f:86:a4:19:71:13:86:6a:41:39:
         5d:c9:c2:09:71:e9:53:46:e6:a3:64:23:4b:d8:32:96:05:f4:
         18:a3:54:52:28:0c:92:59:f4:f0:31:95:ab:4e:71:f2:c9:f8:
         75:0c:3c:0c:4e:4d:91:84:fe:1f:24:c9:73:53:33:d7:ec:03:
         94:d8:29:4e:41:11:2d:29:54:04:fd:8c:2f:29:44:31:f6:c5:
         a7:f3:14:e9:b9:51:b6:4f:04:e6:ed:92:de:40:13:57:c8:01:
         0e:8c:93:fc:d9:8a:9d:d7:5f:29:0d:57:30:58:a1:83:f2:30:
         6e:72:87:f0:ba:02:02:77:65:db:23:9a:8b:be:85:dc:3b:c7:
         54:29:aa:00:77:14:7c:76:c7:9a:ca:3a:f1:df:c5:55:d3:3c:
         0b:ff:09:f2:68:87:f1:06:44:6a:e6:b7:7c:00:f1:9e:b4:df:
         1c:74:55:5b:9f:29:25:9f:35:3d:3b:22:9d:b9:a2:7b:9b:eb:
         28:a5:b6:3e
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUeztrjyB3RrlgD49IMWRLby/Z7z0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw
MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwMjA1MDAwMDAwWhcNMjUwMzEyMjM1OTU5
WjB6MUkwRwYDVQQFE0AyZjIzMWU4YzZkMGFhYzlmNWEyOWI3NWQzN2VlYmI1ZWNl
M2RlNmQ3NGYxNTg2ZjljMjA2ODMyZmI0Y2NkYmFmMS0wKwYDVQQDEyRmNzI0Mzc4
NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCblMw7EvD9zbu6dElAS2RpdicVykzP8JlhjZHwcqSndQCI
1vgLHRltep3c0BKxCEPcEgzbDcv7CWvW2fh3U/KjMyoPQpA7XZUbz/IwNxoD9Dym
QakrtbF5zTykDLdF6Kqjbuzxv9G9Kt1ipGUba0Mu1RzHyr8/1T9VFqYJBzqTnULA
gWTv9CaF7GG4xG9zntk4Xzy43iWs3y8A4o6alCbOn65LKcRwdN96T2qHUqGdl5Er
igf4HmmbSm1s6ow1AHsAvOMrXvWJJHsYYpyreSgcER6LzkTikHR1bIk6JDFKEPfo
6/qsGM7Ucjr1sMn5E9OgSKCmamC6Jspt2f3pjxF/AgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQU2Kt71Bi7wT2MYtsPD7GnfE8JJ50wHwYDVR0jBBgwFoAUugzhfiM/vHHU
MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m
NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5
YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy
YTEzOWVhOTJiL2Y2NzcyM2MyLTY0YWQtNDM3NC05YjJiLTNjMTYzM2I5MDQ0OC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh
LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmBZzAA5wwDQYJKoZIhvcNAQELBQADggEBADVAXcj5b4Upp2htP9tfu5d7
uFTE47HTpN03VyjIlAj+l2mAXCZv4jT95opP4nlYVdTthY4vdn7q7tEhRV0zL4ak
GXEThmpBOV3Jwglx6VNG5qNkI0vYMpYF9BijVFIoDJJZ9PAxlatOcfLJ+HUMPAxO
TZGE/h8kyXNTM9fsA5TYKU5BES0pVAT9jC8pRDH2xafzFOm5UbZPBObtkt5AE1fI
AQ6Mk/zZip3XXykNVzBYoYPyMG5yh/C6AgJ3Zdsjmou+hdw7x1QpqgB3FHx2x5rK
OvHfxVXTPAv/CfJoh/EGRGrmt3wA8Z603xx0VVufKSWfNT07Ip25onub6yiltj4=
-----END CERTIFICATE-----
Generated at Mon Feb 10 17:04:23 2025 by rpki-client