Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/02dd0cf1-fdbe-4766-ad6f-3102791e6256.roa
File:                     02dd0cf1-fdbe-4766-ad6f-3102791e6256.roa (raw, json)
Hash identifier:          9ywApbh4FgJ83Ifccr07ru1f7dKrnES2eyHGfbO3yvs=
Subject key identifier:   EE:18:6A:42:05:9C:CD:B3:24:11:46:41:91:11:4F:D8:56:8C:73:B3
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       753F980803137B2CCDA2DEE176BADE667445811C
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/02dd0cf1-fdbe-4766-ad6f-3102791e6256.roa
Signing time:             Mon 06 Oct 2025 17:12:49 +0000
ROA not before:           Mon 06 Oct 2025 17:12:49 +0000
ROA not after:            Mon 10 Nov 2025 23:59:59 +0000
asID:                     40045
IP address blocks:        2605:9cc0:c05::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:3f:98:08:03:13:7b:2c:cd:a2:de:e1:76:ba:de:66:74:45:81:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Oct  6 17:12:49 2025 GMT
            Not After : Nov 10 23:59:59 2025 GMT
        Subject: serialNumber=745bef2f696016bb2a06d29a63f1d9050f4f40be629e50839ebe60d56fe1ad40, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:23:52:f3:93:09:1e:a9:5f:1a:6f:27:f8:af:
                    ce:43:cd:54:10:07:83:76:e0:ff:64:67:1f:60:70:
                    3c:5f:b3:46:a3:50:7c:0c:fd:cd:c3:56:fa:66:3d:
                    50:22:5e:f7:e7:ad:3a:50:c0:5e:97:d0:eb:dc:2a:
                    47:0e:28:a5:d7:43:df:05:4c:80:d7:ba:69:0f:3e:
                    ad:04:e0:02:5a:cb:63:43:33:44:5c:47:e4:08:60:
                    94:da:06:f2:03:c5:af:f8:50:8a:5a:b1:15:ea:b3:
                    8d:0b:84:3b:a1:a0:2c:6a:8d:13:1e:b3:25:2a:59:
                    f8:39:88:6a:d9:ad:9f:54:fe:08:ba:70:2c:b8:cf:
                    e3:92:c2:94:e2:9d:9b:9f:81:69:ca:d6:22:18:db:
                    04:5d:5c:0c:ed:5a:a9:4c:a1:b6:85:88:78:07:b7:
                    8d:d5:60:63:5f:0f:3d:18:9f:60:8d:6a:02:62:fc:
                    3b:bf:2f:8c:97:95:2e:10:47:4f:fd:0e:b0:de:66:
                    63:f6:da:d0:dd:bc:94:7f:8c:28:ef:3e:80:3f:78:
                    93:7b:37:f1:98:85:08:32:64:e2:dd:0e:76:5a:1e:
                    2d:d9:c0:84:b6:8f:81:dc:d3:27:d5:07:33:60:62:
                    c3:79:4c:db:b6:70:73:5c:db:ce:41:29:1a:35:f4:
                    98:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:18:6A:42:05:9C:CD:B3:24:11:46:41:91:11:4F:D8:56:8C:73:B3
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/02dd0cf1-fdbe-4766-ad6f-3102791e6256.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:c05::/48

    Signature Algorithm: sha256WithRSAEncryption
         6e:67:43:6d:c5:3c:8f:89:b4:4c:9f:11:21:5d:10:14:b2:98:
         06:2b:a2:0b:9b:d0:72:6b:9f:80:ed:c6:9d:7d:76:0d:8c:5b:
         f5:c4:0c:aa:5b:e9:b7:55:a7:15:29:09:7a:64:49:21:73:d9:
         79:f8:b0:fa:23:b5:3b:21:a3:e3:44:4a:5c:ed:6a:17:e9:72:
         39:7a:b1:93:97:0f:0f:1b:8d:2b:06:7d:ca:84:de:40:5b:e3:
         2f:bc:dc:d2:35:da:76:58:8b:ed:ae:c2:fa:8a:f3:ef:08:5e:
         20:ee:7d:c6:a6:4e:dd:93:46:02:13:e4:5d:f8:fa:85:ed:22:
         fd:cb:01:b9:3b:ca:64:a4:8c:06:d1:91:d9:16:75:8c:18:e9:
         77:76:aa:98:3b:48:c6:d4:79:91:99:90:f9:09:ac:a2:0f:77:
         e7:0c:5e:2e:06:b1:96:c1:80:27:81:47:4e:2f:44:93:43:ac:
         eb:89:3e:1a:5f:21:f5:12:67:a3:ba:ad:34:7a:28:f8:08:75:
         25:84:85:92:a4:f2:d3:8b:b3:ed:a4:ed:81:e6:ce:43:2e:59:
         1b:08:d7:18:f8:ac:aa:28:a8:6e:11:2b:cc:c6:5e:53:b3:95:
         11:74:a2:27:7f:16:47:e8:fe:8b:7f:ab:38:88:cd:79:53:08:
         9e:1a:85:c1
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUdT+YCAMTeyzNot7hdrreZnRFgRwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw
MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUxMDA2MTcxMjQ5WhcNMjUxMTEwMjM1OTU5
WjB6MUkwRwYDVQQFE0A3NDViZWYyZjY5NjAxNmJiMmEwNmQyOWE2M2YxZDkwNTBm
NGY0MGJlNjI5ZTUwODM5ZWJlNjBkNTZmZTFhZDQwMS0wKwYDVQQDEyRmNzI0Mzc4
NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC1I1LzkwkeqV8abyf4r85DzVQQB4N24P9kZx9gcDxfs0aj
UHwM/c3DVvpmPVAiXvfnrTpQwF6X0OvcKkcOKKXXQ98FTIDXumkPPq0E4AJay2ND
M0RcR+QIYJTaBvIDxa/4UIpasRXqs40LhDuhoCxqjRMesyUqWfg5iGrZrZ9U/gi6
cCy4z+OSwpTinZufgWnK1iIY2wRdXAztWqlMobaFiHgHt43VYGNfDz0Yn2CNagJi
/Du/L4yXlS4QR0/9DrDeZmP22tDdvJR/jCjvPoA/eJN7N/GYhQgyZOLdDnZaHi3Z
wIS2j4Hc0yfVBzNgYsN5TNu2cHNc285BKRo19JiJAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQU7hhqQgWczbMkEUZBkRFP2FaMc7MwHwYDVR0jBBgwFoAUugzhfiM/vHHU
MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m
NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5
YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy
YTEzOWVhOTJiLzAyZGQwY2YxLWZkYmUtNDc2Ni1hZDZmLTMxMDI3OTFlNjI1Ni5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh
LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmBZzADAUwDQYJKoZIhvcNAQELBQADggEBAG5nQ23FPI+JtEyfESFdEBSy
mAYrogub0HJrn4Dtxp19dg2MW/XEDKpb6bdVpxUpCXpkSSFz2Xn4sPojtTsho+NE
Slztahfpcjl6sZOXDw8bjSsGfcqE3kBb4y+83NI12nZYi+2uwvqK8+8IXiDufcam
Tt2TRgIT5F34+oXtIv3LAbk7ymSkjAbRkdkWdYwY6Xd2qpg7SMbUeZGZkPkJrKIP
d+cMXi4GsZbBgCeBR04vRJNDrOuJPhpfIfUSZ6O6rTR6KPgIdSWEhZKk8tOLs+2k
7YHmzkMuWRsI1xj4rKooqG4RK8zGXlOzlRF0oid/Fkfo/ot/qziIzXlTCJ4ahcE=
-----END CERTIFICATE-----
Generated at Mon Oct 20 18:04:55 2025 by rpki-client