Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/02cb875e-722b-4211-9bd1-5429805bb87e.roa
File:                     02cb875e-722b-4211-9bd1-5429805bb87e.roa (raw, json)
Hash identifier:          HH0p9a3GogTYvXlZB2SpQLlFsAARIQP9JUGucWsvlM4=
Subject key identifier:   D8:53:76:AE:F0:63:9C:0D:8A:BD:00:FA:0B:3B:68:73:A1:2B:3E:C8
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       434627B1668107ACA679F28C351505B97036D609
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/02cb875e-722b-4211-9bd1-5429805bb87e.roa
Signing time:             Fri 31 Oct 2025 00:43:10 +0000
ROA not before:           Fri 31 Oct 2025 00:43:10 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3772::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:46:27:b1:66:81:07:ac:a6:79:f2:8c:35:15:05:b9:70:36:d6:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 00:43:10 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=46d491c03df2a495053aea19bc5ad3f299f2f12e88cba14670081696b02b72df, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d6:ec:e1:47:80:b2:4e:94:4a:67:d0:4c:94:
                    bd:81:d2:1b:5c:0a:05:88:ed:c3:e3:32:59:8a:2d:
                    2d:32:fe:bf:87:96:66:ba:d7:e0:bf:8d:35:d3:1f:
                    79:1f:32:d7:b5:c1:4b:5d:61:6c:9f:3d:42:a2:59:
                    12:12:a1:61:89:67:97:b4:0b:42:8a:51:2c:12:d8:
                    61:ca:09:fb:eb:ea:4e:7f:64:74:8c:fa:a1:fb:43:
                    62:3b:8b:31:12:03:85:74:ca:e9:be:d8:3f:82:9f:
                    f3:48:52:b3:cc:dc:c2:a0:5b:b0:44:dd:b1:1c:3f:
                    65:ef:04:cf:c1:a3:06:8a:70:2d:fc:08:95:75:e2:
                    e4:40:87:c2:a0:3f:6f:40:2b:ed:8c:47:de:12:84:
                    54:c3:ec:30:f9:bc:15:b9:19:e6:67:86:90:eb:5a:
                    59:de:d5:d7:d2:e9:04:d3:8a:fb:26:41:21:d1:c4:
                    6f:6f:38:6d:9d:f7:d2:3d:95:89:6f:67:40:17:b2:
                    cb:aa:b9:78:be:df:fa:6d:b6:d2:03:08:be:be:5d:
                    07:15:3e:3f:e8:1e:ac:56:9b:30:22:c6:0f:7b:50:
                    b8:e6:d2:8f:d6:78:a0:4d:3f:71:fe:0e:02:79:f0:
                    37:0f:8e:59:51:89:5b:ea:3f:83:66:ac:7a:c2:cb:
                    ba:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:53:76:AE:F0:63:9C:0D:8A:BD:00:FA:0B:3B:68:73:A1:2B:3E:C8
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/02cb875e-722b-4211-9bd1-5429805bb87e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3772::/47

    Signature Algorithm: sha256WithRSAEncryption
         44:17:a7:a8:43:14:ea:7f:3c:ec:1c:82:bf:8a:d4:82:be:63:
         79:e3:34:0d:a1:2c:f9:80:fe:76:60:22:32:e6:f2:fb:13:27:
         6d:d9:6c:b3:b8:13:68:9c:9a:21:80:d3:01:65:bb:ec:88:52:
         90:4a:de:a2:74:69:af:2f:5b:f3:bd:a6:71:11:0b:74:5c:b6:
         84:c7:12:d6:30:1c:d9:3c:c7:59:74:b4:61:e1:bf:17:1c:81:
         dc:be:ea:ce:bd:e5:d5:ad:d4:da:e8:86:8e:51:ac:3b:55:26:
         4e:80:b6:17:4d:a4:6e:44:e2:ae:45:d9:28:50:51:76:7e:a1:
         81:a0:72:c3:bc:3e:57:a8:dc:c1:4b:67:e5:0a:29:0a:13:ce:
         db:04:89:80:b4:62:5a:ea:5a:8e:f4:5d:5a:88:84:cc:a8:6a:
         37:42:8b:2a:56:9e:11:74:45:2b:93:c2:75:2a:10:f1:0b:60:
         73:17:62:68:fb:10:17:50:e4:2f:65:02:b2:c5:94:41:d9:f0:
         ba:d4:d7:df:ca:a4:11:ab:a8:ac:b8:41:5e:b6:4d:5f:a1:42:
         94:70:2a:0b:ea:f5:5e:ac:8f:48:d3:1e:78:2a:17:6b:1e:1a:
         eb:bf:f3:6a:e9:c8:74:1d:70:9c:45:8a:f6:1e:6d:28:c7:e3:
         57:59:40:b1
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUQ0YnsWaBB6ymefKMNRUFuXA21gkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDA0MzEwWhcNMjUxMjA1MjM1OTU5
WjB6MUkwRwYDVQQFE0A0NmQ0OTFjMDNkZjJhNDk1MDUzYWVhMTliYzVhZDNmMjk5
ZjJmMTJlODhjYmExNDY3MDA4MTY5NmIwMmI3MmRmMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCe1uzhR4CyTpRKZ9BMlL2B0htcCgWI7cPjMlmKLS0y/r+H
lma61+C/jTXTH3kfMte1wUtdYWyfPUKiWRISoWGJZ5e0C0KKUSwS2GHKCfvr6k5/
ZHSM+qH7Q2I7izESA4V0yum+2D+Cn/NIUrPM3MKgW7BE3bEcP2XvBM/BowaKcC38
CJV14uRAh8KgP29AK+2MR94ShFTD7DD5vBW5GeZnhpDrWlne1dfS6QTTivsmQSHR
xG9vOG2d99I9lYlvZ0AXssuquXi+3/ptttIDCL6+XQcVPj/oHqxWmzAixg97ULjm
0o/WeKBNP3H+DgJ58DcPjllRiVvqP4NmrHrCy7rNAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQU2FN2rvBjnA2KvQD6Cztoc6ErPsgwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzAyY2I4NzVlLTcyMmItNDIxMS05YmQxLTU0Mjk4MDViYjg3ZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwEmAJAAN3IwDQYJKoZIhvcNAQELBQADggEBAEQXp6hDFOp/POwcgr+K1IK+
Y3njNA2hLPmA/nZgIjLm8vsTJ23ZbLO4E2icmiGA0wFlu+yIUpBK3qJ0aa8vW/O9
pnERC3RctoTHEtYwHNk8x1l0tGHhvxccgdy+6s695dWt1Nroho5RrDtVJk6AthdN
pG5E4q5F2ShQUXZ+oYGgcsO8Pleo3MFLZ+UKKQoTztsEiYC0YlrqWo70XVqIhMyo
ajdCiypWnhF0RSuTwnUqEPELYHMXYmj7EBdQ5C9lArLFlEHZ8LrU19/KpBGrqKy4
QV62TV+hQpRwKgvq9V6sj0jTHngqF2seGuu/82rpyHQdcJxFivYebSjH41dZQLE=
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:27:22 2025 by rpki-client