Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/bb5af757-1bdc-48f9-bc20-c74fd49096a5.roa
File:                     bb5af757-1bdc-48f9-bc20-c74fd49096a5.roa (raw, json)
Hash identifier:          d3YkTONpFYPIlQzTKXQ8oAebqK5bWCK9huPZJxkyg6k=
Subject key identifier:   8B:3B:DE:BF:CE:AB:24:8D:DC:DF:B1:59:3F:56:B8:3C:92:F6:38:4C
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       2C51DAB2E1F26116C07E0FAE8277E3C218E2BEA5
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/bb5af757-1bdc-48f9-bc20-c74fd49096a5.roa
Signing time:             Fri 23 May 2025 00:31:18 +0000
ROA not before:           Fri 23 May 2025 00:31:18 +0000
ROA not after:            Fri 27 Jun 2025 23:59:59 +0000
asID:                     8987
IP address blocks:        2605:9cc0:611::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:51:da:b2:e1:f2:61:16:c0:7e:0f:ae:82:77:e3:c2:18:e2:be:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: May 23 00:31:18 2025 GMT
            Not After : Jun 27 23:59:59 2025 GMT
        Subject: serialNumber=87d8b507a22066c2f0ed94cebfa481547720d0e9ea8abdbfd4e012d88fd96432, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e2:2b:13:09:b2:c8:71:2b:1a:2f:25:1d:10:
                    2d:2a:34:9e:ba:75:9e:96:07:06:52:87:56:2b:10:
                    51:d5:8c:97:dc:70:0e:47:f2:04:fb:39:ef:e6:5d:
                    85:41:88:6b:b2:77:31:ff:6a:33:5e:90:f9:25:8d:
                    c7:8f:b2:57:f0:05:9c:cb:95:66:c2:f8:d2:c7:77:
                    58:b9:28:c8:10:ca:32:c3:e6:cf:71:d6:b1:7b:fc:
                    51:ed:d1:98:b2:1b:b3:35:6c:1e:ba:3b:8b:58:bc:
                    37:91:40:2c:1f:28:93:77:de:9b:96:72:59:6d:c6:
                    ea:5e:5d:cd:c3:98:77:43:c4:cd:a8:45:4f:fa:11:
                    c9:8e:61:7f:c9:c0:e1:c7:e3:0b:e8:a0:51:28:14:
                    42:b1:4d:50:bb:61:1c:53:e8:93:88:bf:7b:8a:51:
                    8b:08:d1:3e:35:5a:e4:72:8b:ad:8a:a8:c4:b4:b8:
                    ba:d6:fd:cd:2e:b9:88:19:08:4e:3e:80:5f:94:ba:
                    e7:6c:12:e5:8d:02:ed:a1:96:cf:51:81:59:88:cf:
                    04:b5:92:eb:a1:2a:0f:de:c7:f7:8c:6e:88:11:f2:
                    02:65:28:1e:98:5e:01:50:6b:52:9d:72:73:80:55:
                    c1:c8:05:e1:9a:c6:6a:2f:90:59:7b:d8:ca:ce:b4:
                    f2:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:3B:DE:BF:CE:AB:24:8D:DC:DF:B1:59:3F:56:B8:3C:92:F6:38:4C
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/bb5af757-1bdc-48f9-bc20-c74fd49096a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:611::/48

    Signature Algorithm: sha256WithRSAEncryption
         a0:24:1a:bd:71:69:2a:cb:46:81:1f:4f:8d:40:95:2f:96:ff:
         be:02:ca:54:87:ba:d5:9e:6d:e8:d3:7f:e0:e2:4d:a2:99:3e:
         d9:c6:48:31:57:3e:97:9c:8e:1b:47:af:b2:08:f1:f6:8b:2a:
         74:6f:33:12:21:da:e3:2d:41:5c:1b:6c:ef:79:52:59:f7:28:
         32:15:71:66:ef:52:98:16:57:4b:73:f6:aa:a2:b3:6b:2c:5f:
         45:b9:bd:5e:5a:c2:b9:53:29:06:9e:b5:32:b5:d4:d6:48:e9:
         ea:e6:ae:08:20:9c:a1:d5:95:4a:4b:73:ff:23:0d:46:0d:85:
         d8:40:a1:91:0c:e9:b7:3d:05:4d:ba:78:67:cb:ed:47:2d:26:
         db:c5:bb:c0:1e:ba:6e:b6:60:dc:66:36:50:53:e4:8c:c1:30:
         3f:ec:1c:eb:65:c7:d9:d1:a2:a4:74:7e:17:5f:11:f8:34:1b:
         8b:40:bb:ff:df:73:ca:22:f7:7d:27:e6:29:36:69:bc:2c:d6:
         af:ff:10:b3:a6:fe:c0:e7:a6:ec:ef:04:1c:f4:36:b1:b2:eb:
         d4:e7:d8:2d:bf:6c:dd:b1:1b:86:f8:94:6a:00:87:de:02:fb:
         f8:b3:c3:be:16:48:3a:5c:05:99:22:be:ed:63:ac:ba:e7:35:
         22:03:01:71
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIULFHasuHyYRbAfg+ugnfjwhjivqUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw
MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNTIzMDAzMTE4WhcNMjUwNjI3MjM1OTU5
WjB6MUkwRwYDVQQFE0A4N2Q4YjUwN2EyMjA2NmMyZjBlZDk0Y2ViZmE0ODE1NDc3
MjBkMGU5ZWE4YWJkYmZkNGUwMTJkODhmZDk2NDMyMS0wKwYDVQQDEyRmNzI0Mzc4
NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC94isTCbLIcSsaLyUdEC0qNJ66dZ6WBwZSh1YrEFHVjJfc
cA5H8gT7Oe/mXYVBiGuydzH/ajNekPkljcePslfwBZzLlWbC+NLHd1i5KMgQyjLD
5s9x1rF7/FHt0ZiyG7M1bB66O4tYvDeRQCwfKJN33puWclltxupeXc3DmHdDxM2o
RU/6EcmOYX/JwOHH4wvooFEoFEKxTVC7YRxT6JOIv3uKUYsI0T41WuRyi62KqMS0
uLrW/c0uuYgZCE4+gF+UuudsEuWNAu2hls9RgVmIzwS1kuuhKg/ex/eMbogR8gJl
KB6YXgFQa1KdcnOAVcHIBeGaxmovkFl72MrOtPKlAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUizvev86rJI3c37FZP1a4PJL2OEwwHwYDVR0jBBgwFoAUugzhfiM/vHHU
MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m
NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5
YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy
YTEzOWVhOTJiL2JiNWFmNzU3LTFiZGMtNDhmOS1iYzIwLWM3NGZkNDkwOTZhNS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh
LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmBZzABhEwDQYJKoZIhvcNAQELBQADggEBAKAkGr1xaSrLRoEfT41AlS+W
/74CylSHutWebejTf+DiTaKZPtnGSDFXPpecjhtHr7II8faLKnRvMxIh2uMtQVwb
bO95Uln3KDIVcWbvUpgWV0tz9qqis2ssX0W5vV5awrlTKQaetTK11NZI6ermrggg
nKHVlUpLc/8jDUYNhdhAoZEM6bc9BU26eGfL7UctJtvFu8Aeum62YNxmNlBT5IzB
MD/sHOtlx9nRoqR0fhdfEfg0G4tAu//fc8oi930n5ik2abws1q//ELOm/sDnpuzv
BBz0NrGy69Tn2C2/bN2xG4b4lGoAh94C+/izw74WSDpcBZkivu1jrLrnNSIDAXE=
-----END CERTIFICATE-----
Generated at Mon Jun 16 04:32:06 2025 by rpki-client