Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/a49b6d39-86ae-439b-9ec9-aff31127381f.roa
File:                     a49b6d39-86ae-439b-9ec9-aff31127381f.roa (raw, json)
Hash identifier:          xhbJ6arWiS5hVPowoc6Ofb0jSdjslkvD5txFZ+pqwWE=
Subject key identifier:   71:A7:B5:A2:2E:AE:0C:FF:01:4D:FF:76:47:C3:0D:02:E6:F2:E8:3C
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       3E105AE4EF10F6A2B144794DE69BE3FC8D914B2B
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/a49b6d39-86ae-439b-9ec9-aff31127381f.roa
Signing time:             Fri 11 Jul 2025 18:01:42 +0000
ROA not before:           Fri 11 Jul 2025 18:01:42 +0000
ROA not after:            Fri 15 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2605:9cc0:30f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:10:5a:e4:ef:10:f6:a2:b1:44:79:4d:e6:9b:e3:fc:8d:91:4b:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Jul 11 18:01:42 2025 GMT
            Not After : Aug 15 23:59:59 2025 GMT
        Subject: serialNumber=5f0fce9b78273ee159789329fc244d04fec9cb0f81695a8853af6c69d87a3285, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:2b:e0:e5:e8:b0:0c:e2:07:64:fd:ee:04:4c:
                    ad:c3:e5:d7:3e:7e:7d:cc:35:d4:30:b6:5d:ce:ab:
                    38:95:61:8e:de:17:aa:54:c9:fc:c8:8f:a4:c2:f1:
                    95:92:b4:23:cb:04:da:91:e8:18:7b:75:e8:fd:15:
                    85:1c:d7:35:85:2c:04:05:e5:32:b7:11:5b:17:fd:
                    61:93:1f:8c:5d:2f:52:95:95:70:eb:20:07:ef:5c:
                    d4:50:d6:f1:a4:b3:62:37:e9:e8:2b:3f:cf:b0:b9:
                    e2:21:37:80:10:0c:40:bb:81:8f:6a:77:27:0f:bd:
                    41:59:e7:56:10:b0:fe:e6:62:d0:06:c7:38:f2:97:
                    dd:1d:a1:da:d5:8e:7c:09:64:f3:89:65:6d:51:33:
                    91:d1:a0:1d:45:f2:05:ce:b9:9e:5a:8a:4a:e1:80:
                    84:08:6b:1b:6c:4a:35:e8:04:7d:cd:2b:87:4e:d0:
                    43:68:65:25:e3:7d:3d:97:3b:2f:be:f5:d5:6d:fb:
                    a0:44:de:40:01:ca:ab:e5:26:4d:95:b2:07:f5:ca:
                    54:16:0b:d8:00:ca:92:0b:78:db:93:35:9d:27:ec:
                    85:73:1d:bf:0b:82:c6:10:b7:29:13:e9:3d:76:f6:
                    ea:16:48:1b:09:2b:52:10:56:be:87:64:1f:05:2d:
                    d6:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:A7:B5:A2:2E:AE:0C:FF:01:4D:FF:76:47:C3:0D:02:E6:F2:E8:3C
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/a49b6d39-86ae-439b-9ec9-aff31127381f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:30f::/48

    Signature Algorithm: sha256WithRSAEncryption
         43:c7:02:8d:fc:9a:53:08:e0:b4:40:4e:56:4f:3c:3e:60:c6:
         fb:16:b8:df:57:45:b0:f0:87:b2:9d:5c:40:6b:cc:68:06:ce:
         7b:cb:71:61:dc:ba:24:60:da:3d:08:1a:71:aa:2c:97:45:40:
         4c:97:e6:8c:45:03:e2:6b:05:12:ab:ec:2b:cc:2e:56:ff:d3:
         d5:5b:4e:5a:ee:cd:e8:35:c4:58:82:04:41:bb:bd:c0:58:d0:
         88:d8:c2:79:9c:ed:a6:9e:8e:7b:a7:3b:49:94:36:01:fc:df:
         93:6f:58:09:52:e8:47:09:7a:26:7e:18:a9:9c:71:33:b9:20:
         31:86:81:39:f6:e2:61:70:4e:bc:6b:72:27:40:0c:04:6d:e5:
         1e:45:33:6f:69:ef:d7:47:ab:b5:ea:e0:71:e4:6f:43:b2:ca:
         85:83:8d:d5:01:12:3f:91:0e:1e:7d:f2:ed:25:de:a7:7e:12:
         d2:3e:0a:8c:43:ff:7a:c8:10:07:d3:08:18:24:7d:86:1e:ae:
         2a:9b:70:cd:f5:5b:7b:48:1d:c4:f9:c9:04:b9:e6:3f:ce:07:
         51:26:52:db:3a:08:b4:d7:d1:fa:ca:69:6e:e0:2f:aa:5a:fd:
         34:26:75:2d:88:a5:be:29:8a:14:43:38:8d:94:c8:25:fc:7c:
         76:f7:1c:95
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUPhBa5O8Q9qKxRHlN5pvj/I2RSyswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw
MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNzExMTgwMTQyWhcNMjUwODE1MjM1OTU5
WjB6MUkwRwYDVQQFE0A1ZjBmY2U5Yjc4MjczZWUxNTk3ODkzMjlmYzI0NGQwNGZl
YzljYjBmODE2OTVhODg1M2FmNmM2OWQ4N2EzMjg1MS0wKwYDVQQDEyRmNzI0Mzc4
NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCYK+Dl6LAM4gdk/e4ETK3D5dc+fn3MNdQwtl3OqziVYY7e
F6pUyfzIj6TC8ZWStCPLBNqR6Bh7dej9FYUc1zWFLAQF5TK3EVsX/WGTH4xdL1KV
lXDrIAfvXNRQ1vGks2I36egrP8+wueIhN4AQDEC7gY9qdycPvUFZ51YQsP7mYtAG
xzjyl90dodrVjnwJZPOJZW1RM5HRoB1F8gXOuZ5aikrhgIQIaxtsSjXoBH3NK4dO
0ENoZSXjfT2XOy++9dVt+6BE3kAByqvlJk2Vsgf1ylQWC9gAypILeNuTNZ0n7IVz
Hb8LgsYQtykT6T129uoWSBsJK1IQVr6HZB8FLdYzAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUcae1oi6uDP8BTf92R8MNAuby6DwwHwYDVR0jBBgwFoAUugzhfiM/vHHU
MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m
NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5
YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy
YTEzOWVhOTJiL2E0OWI2ZDM5LTg2YWUtNDM5Yi05ZWM5LWFmZjMxMTI3MzgxZi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh
LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmBZzAAw8wDQYJKoZIhvcNAQELBQADggEBAEPHAo38mlMI4LRATlZPPD5g
xvsWuN9XRbDwh7KdXEBrzGgGznvLcWHcuiRg2j0IGnGqLJdFQEyX5oxFA+JrBRKr
7CvMLlb/09VbTlruzeg1xFiCBEG7vcBY0IjYwnmc7aaejnunO0mUNgH835NvWAlS
6EcJeiZ+GKmccTO5IDGGgTn24mFwTrxrcidADARt5R5FM29p79dHq7Xq4HHkb0Oy
yoWDjdUBEj+RDh598u0l3qd+EtI+CoxD/3rIEAfTCBgkfYYeriqbcM31W3tIHcT5
yQS55j/OB1EmUts6CLTX0frKaW7gL6pa/TQmdS2Ipb4pihRDOI2UyCX8fHb3HJU=
-----END CERTIFICATE-----
Generated at Tue Aug 5 17:15:05 2025 by rpki-client