Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/66f01be3-62cc-4bca-94fa-a48a5f45f2ff.roa
File:                     66f01be3-62cc-4bca-94fa-a48a5f45f2ff.roa (raw, json)
Hash identifier:          MMop733ZmOR5qsW/JAxp49mxaCc8rrOGw4NUNTHU9dI=
Subject key identifier:   52:F6:2C:13:95:FB:BF:8E:5A:2C:69:E5:6C:2C:58:3D:68:DA:06:8B
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       21D661DA53C8E038BA058F5F7FC40FDD64D35123
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/66f01be3-62cc-4bca-94fa-a48a5f45f2ff.roa
Signing time:             Tue 05 Aug 2025 18:00:19 +0000
ROA not before:           Tue 05 Aug 2025 18:00:19 +0000
ROA not after:            Tue 09 Sep 2025 23:59:59 +0000
asID:                     8987
IP address blocks:        2605:9cc0:310::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:d6:61:da:53:c8:e0:38:ba:05:8f:5f:7f:c4:0f:dd:64:d3:51:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Aug  5 18:00:19 2025 GMT
            Not After : Sep  9 23:59:59 2025 GMT
        Subject: serialNumber=bb362de8ca7f205c0841586729e862978ea384f8a90af69f0e1cc223a6472617, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:74:28:54:f8:71:84:8c:e8:74:06:72:43:7e:
                    fe:eb:40:62:40:03:bb:4c:2b:35:c8:98:22:36:a8:
                    23:c4:90:c2:ec:e5:95:5b:af:9c:42:95:0d:ea:72:
                    5c:d8:32:f1:8f:bc:dc:2b:1c:64:4f:fc:ca:38:e2:
                    77:20:11:ba:90:a0:8b:eb:8e:3e:75:cb:db:c9:90:
                    4f:b6:81:9f:cd:17:fa:66:c5:b1:40:26:cb:32:f3:
                    c1:6e:4c:7c:52:7f:05:9f:32:b0:c0:25:3b:35:64:
                    45:33:52:2a:f5:b3:af:ed:fe:93:90:45:ee:db:b0:
                    c1:f1:63:a7:6c:12:67:13:4b:ac:ab:ab:4a:df:86:
                    85:9f:2b:ac:01:2c:2d:81:e2:bd:c8:a6:d6:e7:4e:
                    7e:81:7f:a7:b7:71:8f:e1:99:a2:62:9a:6a:13:64:
                    5a:2c:ac:7b:9f:8f:74:69:e0:56:03:18:34:3f:65:
                    54:37:21:89:43:40:49:6a:5c:7a:73:e2:4e:31:d1:
                    7b:9f:55:a6:4c:97:0c:ee:96:6a:85:9d:cf:b6:d2:
                    be:04:7c:65:c5:ef:0f:1b:b3:6f:31:52:b0:bd:4f:
                    a4:27:de:b4:9e:06:9d:9f:f7:14:e0:fd:f2:37:08:
                    7f:bb:aa:f2:f3:ba:67:37:94:da:6c:08:5f:43:fc:
                    20:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:F6:2C:13:95:FB:BF:8E:5A:2C:69:E5:6C:2C:58:3D:68:DA:06:8B
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/66f01be3-62cc-4bca-94fa-a48a5f45f2ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:310::/48

    Signature Algorithm: sha256WithRSAEncryption
         63:2b:4c:2a:6d:3c:3c:95:84:52:04:00:cd:42:4b:77:5c:6f:
         9c:8f:2a:1a:43:ce:f2:5a:73:6f:42:44:f8:e5:2e:9f:14:c6:
         84:f9:97:cb:a3:bb:c1:37:57:79:44:1c:7a:a5:eb:7f:f1:ae:
         8f:71:a1:4c:a5:a1:74:9f:3e:8e:59:fd:2a:fd:ff:c3:99:27:
         92:ec:1d:ac:7d:47:61:72:3d:ed:c4:50:6d:94:23:fe:d6:76:
         e7:0b:74:1f:7c:8a:cd:29:24:1c:94:a9:6b:eb:9d:82:83:30:
         72:fc:f6:91:fc:88:79:71:d6:92:b0:58:0f:d7:42:cd:c4:73:
         8f:eb:c9:2e:f9:ec:de:f1:20:f8:30:b3:b4:3c:6c:a6:dc:67:
         f2:c6:b0:96:a2:70:6f:a7:30:e2:0d:a7:2c:0b:27:a5:7d:ba:
         a1:32:03:e4:9e:19:f8:fa:eb:8a:b2:0d:ae:62:82:91:dc:3c:
         24:2b:fa:cf:74:10:f0:df:a4:16:18:df:ed:b2:8c:42:2c:3d:
         4f:9e:09:3c:3e:7d:f4:5a:ad:0a:56:fc:d2:f6:19:c9:19:98:
         52:49:d5:80:b1:17:a8:c7:9a:52:85:cc:ee:dc:2f:5e:b9:4d:
         bf:a8:57:0c:0b:e6:74:72:48:da:e9:5b:81:ee:6e:c2:ec:f0:
         3d:a5:3a:11
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUIdZh2lPI4Di6BY9ff8QP3WTTUSMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw
MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwODA1MTgwMDE5WhcNMjUwOTA5MjM1OTU5
WjB6MUkwRwYDVQQFE0BiYjM2MmRlOGNhN2YyMDVjMDg0MTU4NjcyOWU4NjI5Nzhl
YTM4NGY4YTkwYWY2OWYwZTFjYzIyM2E2NDcyNjE3MS0wKwYDVQQDEyRmNzI0Mzc4
NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDldChU+HGEjOh0BnJDfv7rQGJAA7tMKzXImCI2qCPEkMLs
5ZVbr5xClQ3qclzYMvGPvNwrHGRP/Mo44ncgEbqQoIvrjj51y9vJkE+2gZ/NF/pm
xbFAJssy88FuTHxSfwWfMrDAJTs1ZEUzUir1s6/t/pOQRe7bsMHxY6dsEmcTS6yr
q0rfhoWfK6wBLC2B4r3IptbnTn6Bf6e3cY/hmaJimmoTZFosrHufj3Rp4FYDGDQ/
ZVQ3IYlDQElqXHpz4k4x0XufVaZMlwzulmqFnc+20r4EfGXF7w8bs28xUrC9T6Qn
3rSeBp2f9xTg/fI3CH+7qvLzumc3lNpsCF9D/CAhAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUUvYsE5X7v45aLGnlbCxYPWjaBoswHwYDVR0jBBgwFoAUugzhfiM/vHHU
MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m
NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5
YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy
YTEzOWVhOTJiLzY2ZjAxYmUzLTYyY2MtNGJjYS05NGZhLWE0OGE1ZjQ1ZjJmZi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh
LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmBZzAAxAwDQYJKoZIhvcNAQELBQADggEBAGMrTCptPDyVhFIEAM1CS3dc
b5yPKhpDzvJac29CRPjlLp8UxoT5l8uju8E3V3lEHHql63/xro9xoUyloXSfPo5Z
/Sr9/8OZJ5LsHax9R2FyPe3EUG2UI/7WducLdB98is0pJByUqWvrnYKDMHL89pH8
iHlx1pKwWA/XQs3Ec4/ryS757N7xIPgws7Q8bKbcZ/LGsJaicG+nMOINpywLJ6V9
uqEyA+SeGfj664qyDa5igpHcPCQr+s90EPDfpBYY3+2yjEIsPU+eCTw+ffRarQpW
/NL2GckZmFJJ1YCxF6jHmlKFzO7cL165Tb+oVwwL5nRySNrpW4HubsLs8D2lOhE=
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:41:16 2025 by rpki-client