Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/d904f993-5ca9-4bad-8c47-2d2c6ef58b2e.roa
File:                     d904f993-5ca9-4bad-8c47-2d2c6ef58b2e.roa (raw, json)
Hash identifier:          VEqBqGeRuPXP2z9s6n0TYZrl3uWrzy+hRFMTSQDmaKI=
Subject key identifier:   1B:41:5E:97:64:7C:71:00:0B:3E:6C:09:40:57:10:CF:9D:E6:21:4D
Certificate issuer:       /CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2
Certificate serial:       1D2F10824885385CC55657B0E03BE743EDD4B907
Authority key identifier: 1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/d904f993-5ca9-4bad-8c47-2d2c6ef58b2e.roa
Signing time:             Tue 04 Nov 2025 00:00:39 +0000
ROA not before:           Tue 04 Nov 2025 00:00:39 +0000
ROA not after:            Tue 09 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2606:f40::/39 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:2f:10:82:48:85:38:5c:c5:56:57:b0:e0:3b:e7:43:ed:d4:b9:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2
        Validity
            Not Before: Nov  4 00:00:39 2025 GMT
            Not After : Dec  9 23:59:59 2025 GMT
        Subject: serialNumber=02508ed5245c79b9857fdf7f7ebc98642794bb271562936e9bb7d4a74bc2de55, CN=8f95e4d1-f14f-4d61-ae00-67e047d2f102
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:32:1d:df:37:7b:75:52:f6:c3:d1:17:09:e9:
                    fc:55:1f:5d:ac:cf:60:12:60:fb:b8:57:10:ec:0f:
                    36:8d:29:31:b7:d1:f7:ed:bf:86:f6:ec:f1:07:a2:
                    aa:23:36:d0:25:57:ba:f3:74:08:91:b2:c3:23:d5:
                    ff:6d:68:4a:8c:40:7f:96:c6:c1:e6:d2:63:40:e1:
                    dd:f6:45:22:1a:e3:32:82:2d:cf:53:97:fa:82:5e:
                    57:a8:eb:e2:9a:c6:6a:5f:06:cb:81:9b:d4:b1:c6:
                    67:12:e4:ae:d4:7c:77:58:7c:12:35:8c:fa:5f:ac:
                    cf:0f:27:92:af:7f:f0:4a:fb:53:b8:48:93:ca:7e:
                    a4:92:e7:dc:d8:14:ff:bc:e4:6e:78:f3:8f:02:96:
                    4f:1d:ae:7b:b6:db:b6:e0:1f:71:4e:39:d5:bb:49:
                    97:bb:fe:9e:df:bd:19:b6:b6:4c:41:a8:b4:58:24:
                    97:ac:b0:2a:3c:ec:0a:2c:f5:fe:0a:8d:cb:82:c5:
                    8b:e1:b0:48:c1:a3:69:85:fd:3f:4e:6b:d0:52:42:
                    ba:97:54:37:63:54:2a:89:c4:a9:07:a8:7d:d3:8e:
                    3e:18:8f:96:8f:b6:df:71:1d:df:c7:c1:42:4c:04:
                    d1:b7:52:e2:1b:b4:80:dc:f7:39:b9:ae:c3:b5:f9:
                    1c:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:41:5E:97:64:7C:71:00:0B:3E:6C:09:40:57:10:CF:9D:E6:21:4D
            X509v3 Authority Key Identifier:
                keyid:1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/d904f993-5ca9-4bad-8c47-2d2c6ef58b2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:f40::/39

    Signature Algorithm: sha256WithRSAEncryption
         97:7c:79:62:48:c8:70:d2:4d:75:98:f1:1d:4d:dd:c7:2d:17:
         18:79:f4:6f:5a:51:86:a7:20:8c:00:a5:47:51:97:76:2c:d3:
         88:a4:64:9d:37:e1:09:46:03:3b:af:cc:df:f5:4f:9f:e8:90:
         ab:0b:c9:56:bd:d5:7a:b9:08:5d:55:c4:f3:d2:cf:01:73:11:
         02:6b:4e:73:40:ca:c5:43:ab:4a:60:15:a7:84:d4:46:28:66:
         f2:0d:3f:ed:af:2c:18:4c:94:35:b1:0f:88:fd:ea:6f:11:e2:
         f8:c5:01:6d:1b:f6:5c:01:58:81:45:6f:79:a4:65:35:eb:39:
         84:0e:73:75:9f:67:e2:49:ed:27:ee:44:e3:3a:e9:7a:5a:18:
         ea:96:04:64:00:a8:9a:49:ad:4d:ec:af:52:a4:ca:2b:ee:0d:
         9c:26:a7:6a:ab:6c:3e:dc:1a:f8:4e:e5:99:c9:a6:14:9f:9b:
         fb:2d:f6:a5:a8:f1:5b:c1:5a:55:aa:3b:dc:23:f2:86:ab:28:
         78:59:61:04:1d:d7:55:a1:8f:cf:2e:aa:82:65:12:36:b9:e9:
         04:69:23:cd:5a:5f:da:dc:04:78:56:99:c6:f1:72:fa:43:a8:
         43:5e:03:e5:34:9b:0b:37:a2:3f:0a:b1:0c:56:d1:d4:e8:23:
         8e:9c:8b:33
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUHS8QgkiFOFzFVlew4DvnQ+3UuQcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYzE2N2E4YjNhMDFmMDY3MTdkMmFmNjJlMzgwOTA3MjA4
NGMzYWY4ZjQ4OTQ4ZTQwZTIwHhcNMjUxMTA0MDAwMDM5WhcNMjUxMjA5MjM1OTU5
WjB6MUkwRwYDVQQFE0AwMjUwOGVkNTI0NWM3OWI5ODU3ZmRmN2Y3ZWJjOTg2NDI3
OTRiYjI3MTU2MjkzNmU5YmI3ZDRhNzRiYzJkZTU1MS0wKwYDVQQDEyQ4Zjk1ZTRk
MS1mMTRmLTRkNjEtYWUwMC02N2UwNDdkMmYxMDIwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDCMh3fN3t1UvbD0RcJ6fxVH12sz2ASYPu4VxDsDzaNKTG3
0fftv4b27PEHoqojNtAlV7rzdAiRssMj1f9taEqMQH+WxsHm0mNA4d32RSIa4zKC
Lc9Tl/qCXleo6+KaxmpfBsuBm9SxxmcS5K7UfHdYfBI1jPpfrM8PJ5Kvf/BK+1O4
SJPKfqSS59zYFP+85G54848Clk8drnu227bgH3FOOdW7SZe7/p7fvRm2tkxBqLRY
JJessCo87Aos9f4KjcuCxYvhsEjBo2mF/T9Oa9BSQrqXVDdjVCqJxKkHqH3Tjj4Y
j5aPtt9xHd/HwUJMBNG3UuIbtIDc9zm5rsO1+RwrAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUG0Fel2R8cQALPmwJQFcQz53mIU0wHwYDVR0jBBgwFoAUHl8tYvha0oTU
0Ykla4hp6OkRKDgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
Lzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wYTNkYjRmZi05
Y2Q4LTRkMDItYTAyNy02ZmE5MDQ5NGEzYTEvYzE2N2E4YjNhMDFmMDY3MTdkMmFm
NjJlMzgwOTA3MjA4NGMzYWY4ZjQ4OTQ4ZTQwZTIuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMmYwNTlhMjEtZDQxYi00ODQ2LWI3YWUtN2Vh
MzhjMzJmZDRjL2Q5MDRmOTkzLTVjYTktNGJhZC04YzQ3LTJkMmM2ZWY1OGIyZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzJmMDU5YTIxLWQ0MWItNDg0Ni1iN2Fl
LTdlYTM4YzMyZmQ0Yy9Id1p4ZlNyMkxqZ0pCeUNFdzYtUFNKU09RT0kuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgEmBg9AADANBgkqhkiG9w0BAQsFAAOCAQEAl3x5YkjIcNJNdZjxHU3dxy0X
GHn0b1pRhqcgjAClR1GXdizTiKRknTfhCUYDO6/M3/VPn+iQqwvJVr3VerkIXVXE
89LPAXMRAmtOc0DKxUOrSmAVp4TURihm8g0/7a8sGEyUNbEPiP3qbxHi+MUBbRv2
XAFYgUVveaRlNes5hA5zdZ9n4kntJ+5E4zrpeloY6pYEZAComkmtTeyvUqTKK+4N
nCanaqtsPtwa+E7lmcmmFJ+b+y32pajxW8FaVao73CPyhqsoeFlhBB3XVaGPzy6q
gmUSNrnpBGkjzVpf2twEeFaZxvFy+kOoQ14D5TSbCzeiPwqxDFbR1OgjjpyLMw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:44:33 2025 by rpki-client