Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/7d94148f-ccad-4cfd-b33c-2c3dae0a8716.roa
File:                     7d94148f-ccad-4cfd-b33c-2c3dae0a8716.roa (raw, json)
Hash identifier:          JbEwaAIOXY0WnuVBEMRRId91v050MCU6ZaclYQmO8u0=
Subject key identifier:   A5:72:E6:73:C8:CE:BC:2D:20:F1:04:16:37:8F:D8:88:4B:7A:17:4D
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       2874F39E6A57FB27FF079A5744DB4B4CD5364936
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/7d94148f-ccad-4cfd-b33c-2c3dae0a8716.roa
Signing time:             Fri 26 Sep 2025 17:53:30 +0000
ROA not before:           Fri 26 Sep 2025 17:53:30 +0000
ROA not after:            Fri 31 Oct 2025 23:59:59 +0000
asID:                     8987
IP address blocks:        2605:9cc0:629::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:74:f3:9e:6a:57:fb:27:ff:07:9a:57:44:db:4b:4c:d5:36:49:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Sep 26 17:53:30 2025 GMT
            Not After : Oct 31 23:59:59 2025 GMT
        Subject: serialNumber=0b3075e3e3260dece042f00e6f62589cb88f2c23a5fbcc5c60d04d4f5ed2fd8f, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:9d:d2:0e:bc:1b:f0:0e:8b:eb:22:61:50:3c:
                    12:00:cc:00:a4:6a:84:f1:7b:46:c2:bd:aa:9d:6e:
                    1c:6b:ee:c4:8d:a9:ed:5a:fc:be:13:7e:6f:22:0a:
                    d9:dc:c8:f7:91:e1:e9:c9:c2:60:10:a4:ee:d8:22:
                    e7:1b:39:f5:c9:02:fe:d8:cb:58:4e:3d:2c:02:d0:
                    a5:82:49:e6:49:dc:14:c7:e1:e6:81:2b:bc:60:48:
                    85:d8:e1:6b:48:00:48:c2:df:bd:bd:d4:39:b0:20:
                    9b:9e:75:3d:11:8a:65:fc:0b:c8:35:e0:02:77:d1:
                    4d:ed:50:f0:12:8e:56:4a:0b:86:7b:be:9d:a7:d8:
                    56:24:c3:c2:63:25:6d:95:12:17:4b:26:cd:80:7a:
                    3a:ab:d0:b4:18:bc:ad:0e:55:e6:20:47:4c:29:3d:
                    6d:90:74:ef:ba:92:6e:b3:6b:c4:41:0d:a5:06:73:
                    47:9b:13:89:c8:9b:31:f8:89:bf:cc:48:65:8e:86:
                    6f:47:6f:88:7b:6b:b3:16:47:aa:57:83:95:f6:f7:
                    77:19:c7:a1:56:7f:1a:45:4e:38:e7:c9:22:3e:5f:
                    27:c1:ef:81:dd:a1:3c:00:b2:85:c5:a8:14:28:23:
                    5b:cc:13:e0:fa:78:e8:ec:63:4d:46:2f:91:2f:13:
                    11:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:72:E6:73:C8:CE:BC:2D:20:F1:04:16:37:8F:D8:88:4B:7A:17:4D
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/7d94148f-ccad-4cfd-b33c-2c3dae0a8716.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:629::/48

    Signature Algorithm: sha256WithRSAEncryption
         71:c7:c9:39:52:f4:7f:8c:10:25:0f:d3:3f:7f:7a:5d:12:ab:
         f8:6b:a1:af:5c:bf:90:dd:49:e3:d4:3d:23:3e:af:b1:cc:78:
         b8:56:dd:2f:8b:aa:67:31:20:0e:9e:ee:53:b0:4d:12:b8:4f:
         41:28:8d:f3:7e:44:d2:a8:11:35:af:c0:ac:89:06:3e:12:38:
         b2:73:81:a3:84:cc:0b:23:0a:34:f7:ad:00:ea:df:97:e5:d6:
         e6:f0:cf:6c:0c:49:ea:ab:78:56:36:e1:25:3f:50:9f:20:76:
         19:1b:00:dd:26:3c:dd:0e:bb:04:3e:e6:21:fe:e0:87:85:17:
         3e:c4:91:d3:44:c5:eb:a6:5e:7a:41:9f:ab:aa:b5:74:85:67:
         7c:f0:4c:55:a5:78:ff:ed:c8:3a:f2:0d:8d:9f:ab:33:b3:7a:
         91:de:05:4c:90:dc:45:4b:c4:2b:01:b7:b0:e6:96:ed:1b:21:
         44:6f:9e:bf:2a:84:3d:37:22:36:87:ee:28:34:a1:0a:d8:42:
         8b:a8:38:16:0f:8f:0a:ea:a6:dd:0a:35:93:14:00:58:08:a3:
         6a:33:a6:b2:b0:71:dd:ab:06:28:0f:86:9a:3f:c8:13:a1:df:
         8c:e4:b4:a4:9d:3d:80:9f:9c:57:6c:51:17:d3:da:eb:b4:de:
         3d:a3:06:6b
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUKHTznmpX+yf/B5pXRNtLTNU2STYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw
MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwOTI2MTc1MzMwWhcNMjUxMDMxMjM1OTU5
WjB6MUkwRwYDVQQFE0AwYjMwNzVlM2UzMjYwZGVjZTA0MmYwMGU2ZjYyNTg5Y2I4
OGYyYzIzYTVmYmNjNWM2MGQwNGQ0ZjVlZDJmZDhmMS0wKwYDVQQDEyRmNzI0Mzc4
NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDNndIOvBvwDovrImFQPBIAzACkaoTxe0bCvaqdbhxr7sSN
qe1a/L4Tfm8iCtncyPeR4enJwmAQpO7YIucbOfXJAv7Yy1hOPSwC0KWCSeZJ3BTH
4eaBK7xgSIXY4WtIAEjC37291DmwIJuedT0RimX8C8g14AJ30U3tUPASjlZKC4Z7
vp2n2FYkw8JjJW2VEhdLJs2Aejqr0LQYvK0OVeYgR0wpPW2QdO+6km6za8RBDaUG
c0ebE4nImzH4ib/MSGWOhm9Hb4h7a7MWR6pXg5X293cZx6FWfxpFTjjnySI+XyfB
74HdoTwAsoXFqBQoI1vME+D6eOjsY01GL5EvExEvAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUpXLmc8jOvC0g8QQWN4/YiEt6F00wHwYDVR0jBBgwFoAUugzhfiM/vHHU
MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m
NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5
YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy
YTEzOWVhOTJiLzdkOTQxNDhmLWNjYWQtNGNmZC1iMzNjLTJjM2RhZTBhODcxNi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh
LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmBZzABikwDQYJKoZIhvcNAQELBQADggEBAHHHyTlS9H+MECUP0z9/el0S
q/hroa9cv5DdSePUPSM+r7HMeLhW3S+LqmcxIA6e7lOwTRK4T0EojfN+RNKoETWv
wKyJBj4SOLJzgaOEzAsjCjT3rQDq35fl1ubwz2wMSeqreFY24SU/UJ8gdhkbAN0m
PN0OuwQ+5iH+4IeFFz7EkdNExeumXnpBn6uqtXSFZ3zwTFWleP/tyDryDY2fqzOz
epHeBUyQ3EVLxCsBt7Dmlu0bIURvnr8qhD03IjaH7ig0oQrYQouoOBYPjwrqpt0K
NZMUAFgIo2ozprKwcd2rBigPhpo/yBOh34zktKSdPYCfnFdsURfT2uu03j2jBms=
-----END CERTIFICATE-----
Generated at Mon Oct 20 04:54:36 2025 by rpki-client