Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/9bfde94a-1d95-4dce-b0b2-727172f5e49d.roa
File:                     9bfde94a-1d95-4dce-b0b2-727172f5e49d.roa (raw, json)
Hash identifier:          nzWsD2m05Ts1GbQyRffOwV3Pvt1UhByLAylDLVqtkMc=
Subject key identifier:   83:BC:F3:A6:A7:82:96:F0:13:FC:AF:C7:34:10:43:B3:E7:4E:06:47
Certificate issuer:       /CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04
Certificate serial:       1D9ED23ADA2E88AA94BDED5DEF94C89C38CA7F5B
Authority key identifier: 99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/9bfde94a-1d95-4dce-b0b2-727172f5e49d.roa
Signing time:             Tue 05 Aug 2025 15:00:59 +0000
ROA not before:           Tue 05 Aug 2025 15:00:59 +0000
ROA not after:            Tue 09 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        96.127.8.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:9e:d2:3a:da:2e:88:aa:94:bd:ed:5d:ef:94:c8:9c:38:ca:7f:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04
        Validity
            Not Before: Aug  5 15:00:59 2025 GMT
            Not After : Sep  9 23:59:59 2025 GMT
        Subject: serialNumber=8f23313c05040bd0cb8e0974e6136870e008daa8e43320884ab2758f23737285, CN=0099a7ea-794a-4a28-b164-49547626eb11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:8f:36:98:5c:ac:d6:9c:79:51:f2:a2:9d:e0:
                    cd:6c:df:be:af:27:b8:46:1e:f7:19:d5:eb:b9:b8:
                    c7:74:5c:e4:ab:22:84:7e:b8:83:64:0f:9d:48:8d:
                    b2:06:21:f3:44:90:af:b1:88:29:67:72:f4:e5:57:
                    23:34:42:00:0c:50:8c:80:c7:69:68:05:a2:fa:86:
                    c3:9d:15:5c:05:26:d0:04:e7:80:d4:7b:86:31:0f:
                    62:a3:70:0c:99:37:dc:f8:1b:18:34:b7:f1:38:76:
                    98:5f:46:11:95:2f:43:2c:df:32:3a:20:2f:b1:3a:
                    41:cc:78:fe:33:42:b5:85:a6:02:b2:a4:04:96:a7:
                    6c:2d:a0:92:31:75:76:6c:32:e5:d1:7f:2f:f5:60:
                    43:de:52:80:e7:7d:10:fd:0b:9f:e0:14:36:2d:40:
                    42:e0:22:30:c0:4b:a9:61:55:d9:9a:c4:cb:7d:d9:
                    de:42:f7:22:5e:8e:25:ae:78:00:8b:79:a5:4a:16:
                    e0:2e:a9:93:c1:b1:c7:cb:fd:50:b4:45:6b:8e:49:
                    a1:95:f3:94:7a:fa:c7:e8:5a:f6:9b:be:1e:29:68:
                    32:06:46:61:df:2a:41:a5:40:38:4a:2f:c4:1f:c6:
                    db:36:9c:bc:3d:d8:72:e7:47:34:c3:f1:c3:60:9b:
                    61:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:BC:F3:A6:A7:82:96:F0:13:FC:AF:C7:34:10:43:B3:E7:4E:06:47
            X509v3 Authority Key Identifier:
                keyid:99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/9bfde94a-1d95-4dce-b0b2-727172f5e49d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.127.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         18:de:a3:4b:b4:e6:f4:66:59:89:fe:60:1c:84:2c:23:25:ab:
         6c:b3:98:8a:16:14:59:80:7e:c7:c2:89:ed:af:39:2e:10:1b:
         0f:9d:bd:98:a2:6f:b6:ca:fe:99:35:6d:b2:64:fc:d3:5b:d6:
         84:50:a3:3f:0d:c1:b6:fe:03:0d:25:16:cf:ee:91:c2:54:b4:
         b8:79:5a:09:6d:14:f4:c8:f6:ed:ba:a4:50:f5:ef:11:c3:d4:
         69:b5:9f:26:87:ff:5f:57:11:79:8a:0f:ed:8b:12:1e:43:ca:
         aa:c8:a4:4e:08:72:da:ab:65:d3:3d:f5:c7:53:01:e9:1d:57:
         a4:7d:a8:c4:2b:e9:14:88:63:0c:11:68:7b:12:2f:eb:ff:2c:
         89:aa:8d:b3:6b:4e:b9:ca:fc:22:a3:9d:c8:75:9c:a8:36:1b:
         d7:2f:2c:f3:95:eb:8d:53:d9:1a:9c:f5:88:b9:d8:d2:00:48:
         58:88:db:5e:e3:ae:24:42:f0:33:fa:4d:e2:3c:60:08:27:9a:
         63:f2:be:1e:01:94:45:51:4c:70:8d:3f:be:02:f1:ec:3b:27:
         e0:44:4b:8a:02:c3:15:77:c5:16:ed:21:64:69:96:be:ac:b5:
         b3:fc:32:05:90:b0:d5:a7:06:60:72:4a:09:a9:47:a7:a7:5d:
         31:8e:c3:68
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUHZ7SOtouiKqUve1d75TInDjKf1swDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYzA1Njc2YzczM2ZkOGNjYWU1YmU2M2I5MmJkZGM5MGI3
YTViNzRlNjk0NDljMWViMDQwHhcNMjUwODA1MTUwMDU5WhcNMjUwOTA5MjM1OTU5
WjB6MUkwRwYDVQQFE0A4ZjIzMzEzYzA1MDQwYmQwY2I4ZTA5NzRlNjEzNjg3MGUw
MDhkYWE4ZTQzMzIwODg0YWIyNzU4ZjIzNzM3Mjg1MS0wKwYDVQQDEyQwMDk5YTdl
YS03OTRhLTRhMjgtYjE2NC00OTU0NzYyNmViMTEwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCtjzaYXKzWnHlR8qKd4M1s376vJ7hGHvcZ1eu5uMd0XOSr
IoR+uINkD51IjbIGIfNEkK+xiClncvTlVyM0QgAMUIyAx2loBaL6hsOdFVwFJtAE
54DUe4YxD2KjcAyZN9z4Gxg0t/E4dphfRhGVL0Ms3zI6IC+xOkHMeP4zQrWFpgKy
pASWp2wtoJIxdXZsMuXRfy/1YEPeUoDnfRD9C5/gFDYtQELgIjDAS6lhVdmaxMt9
2d5C9yJejiWueACLeaVKFuAuqZPBscfL/VC0RWuOSaGV85R6+sfoWvabvh4paDIG
RmHfKkGlQDhKL8Qfxts2nLw92HLnRzTD8cNgm2HJAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUg7zzpqeClvAT/K/HNBBDs+dOBkcwHwYDVR0jBBgwFoAUmcNUTAjJlFS4
eZUe/6R6j2PIp3cwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83N2I1NjQyOC05
YjUyLTQxNmYtYjI3OS1iYmFlMTQ0MjJkZTIvYzA1Njc2YzczM2ZkOGNjYWU1YmU2
M2I5MmJkZGM5MGI3YTViNzRlNjk0NDljMWViMDQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNDI1ODJjNjctZGQzZi00YmM1LWJhNjAtZTk3
ZTU1MmM2ZTM1LzliZmRlOTRhLTFkOTUtNGRjZS1iMGIyLTcyNzE3MmY1ZTQ5ZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzQyNTgyYzY3LWRkM2YtNGJjNS1iYTYw
LWU5N2U1NTJjNmUzNS9fWXpLNWI1anVTdmR5UXQ2VzNUbWxFbkI2d1EuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBANgfwgwDQYJKoZIhvcNAQELBQADggEBABjeo0u05vRmWYn+YByELCMlq2yz
mIoWFFmAfsfCie2vOS4QGw+dvZiib7bK/pk1bbJk/NNb1oRQoz8Nwbb+Aw0lFs/u
kcJUtLh5WgltFPTI9u26pFD17xHD1Gm1nyaH/19XEXmKD+2LEh5DyqrIpE4Ictqr
ZdM99cdTAekdV6R9qMQr6RSIYwwRaHsSL+v/LImqjbNrTrnK/CKjnch1nKg2G9cv
LPOV641T2Rqc9Yi52NIASFiI217jriRC8DP6TeI8YAgnmmPyvh4BlEVRTHCNP74C
8ew7J+BES4oCwxV3xRbtIWRplr6stbP8MgWQsNWnBmBySgmpR6enXTGOw2g=
-----END CERTIFICATE-----
Generated at Sat Aug 23 08:11:18 2025 by rpki-client