Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/050e1652-1ab7-4ac7-b6b4-3844ab47596e.roa
File:                     050e1652-1ab7-4ac7-b6b4-3844ab47596e.roa (raw, json)
Hash identifier:          x+Apx5PaIHkWNOAy823lzmnWqp4tg7Z6MjgpDMfQvjE=
Subject key identifier:   33:01:21:C0:4F:59:BE:EB:46:8D:C3:15:58:13:AE:4A:21:D9:7D:BA
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       4E874C757020D936FC0A5F39B850E840C8D4B2E5
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/050e1652-1ab7-4ac7-b6b4-3844ab47596e.roa
Signing time:             Thu 30 Oct 2025 20:55:11 +0000
ROA not before:           Thu 30 Oct 2025 20:55:11 +0000
ROA not after:            Thu 04 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:13e8::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:87:4c:75:70:20:d9:36:fc:0a:5f:39:b8:50:e8:40:c8:d4:b2:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 30 20:55:11 2025 GMT
            Not After : Dec  4 23:59:59 2025 GMT
        Subject: serialNumber=fd2b55f9b75665637eafaac86518504174f81326f995cbcc663ec4164747b606, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:7f:48:ad:3d:39:3e:cb:49:71:5c:07:32:d2:
                    de:0a:70:c1:43:f0:7b:ab:f1:bc:c5:b4:67:47:a6:
                    ad:d6:7f:8d:fa:20:69:3c:38:e1:1c:5a:6e:d6:fb:
                    0c:14:e2:0d:e1:87:d0:a8:ac:d2:ec:e3:dd:d3:c7:
                    2a:ea:fc:66:3b:4b:a2:d6:63:ea:6b:18:fc:c7:6f:
                    15:6e:14:18:3c:69:df:05:71:49:06:b9:a1:e2:c4:
                    71:4b:1a:01:50:b7:5e:5b:f9:e1:b6:35:5d:4f:73:
                    0b:86:9e:12:58:64:14:3a:c8:51:c9:b1:84:3c:1a:
                    e9:6a:83:65:b4:3b:ef:7e:6d:65:4c:fb:ae:59:fa:
                    cc:05:82:28:c0:16:f0:6d:1e:45:4a:25:a9:2b:5c:
                    3a:0a:ff:b1:86:be:98:15:99:8d:cf:b4:c7:15:8c:
                    8a:8b:cb:33:0c:04:59:1f:48:3d:a7:0c:ca:ec:6b:
                    71:72:fb:c3:f2:df:d5:3c:38:8f:4b:b6:12:d5:74:
                    5c:a7:47:af:67:9b:65:ae:29:37:eb:27:2a:fa:08:
                    6f:4a:2e:2c:66:07:3e:83:83:5c:11:41:e5:4e:3d:
                    ba:70:86:02:58:75:a1:88:bd:bd:88:bc:38:1e:5c:
                    3d:f8:f0:1f:c7:5b:65:fc:b8:ff:f6:dc:a7:bb:ac:
                    bc:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:01:21:C0:4F:59:BE:EB:46:8D:C3:15:58:13:AE:4A:21:D9:7D:BA
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/050e1652-1ab7-4ac7-b6b4-3844ab47596e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:13e8::/47

    Signature Algorithm: sha256WithRSAEncryption
         16:a9:68:21:a8:51:f7:bb:4e:5d:dc:be:37:62:67:83:77:ee:
         c7:02:aa:64:65:0a:0f:51:94:e9:d5:94:10:8d:23:ad:b2:67:
         dd:c1:81:08:90:bc:33:29:13:36:d6:b3:77:4d:b2:8f:84:42:
         fc:fe:7b:58:93:62:01:46:3b:32:dd:22:d6:6f:8e:f3:1d:38:
         5e:a3:42:2a:94:01:60:51:ad:e9:27:3e:14:5c:5d:da:7b:eb:
         fc:68:a2:17:54:8b:c1:15:ec:ab:52:5a:58:79:6c:69:57:62:
         07:16:b2:f5:0e:b7:55:b5:2a:5c:31:40:d3:50:64:80:46:7c:
         05:07:8f:ba:58:7c:82:f4:f3:c2:04:87:ee:77:b0:54:e4:c7:
         53:ac:3a:d9:b1:d4:1f:40:5f:b6:1f:01:83:e9:14:21:80:21:
         f9:83:e5:e6:cc:60:4d:1e:8e:2a:c5:8f:20:26:84:ed:97:70:
         07:0a:11:fc:dc:3d:db:27:cd:3e:4b:8b:9e:a5:d6:15:c4:d6:
         20:fd:8f:b4:ff:ef:a3:d5:2d:27:7a:25:16:df:66:d2:b9:b9:
         2f:f4:60:bb:76:8a:af:3a:96:d4:35:6d:dd:e7:47:fa:2c:ba:
         1c:2e:73:a3:45:0c:5e:87:16:81:05:fe:c0:d5:9a:89:83:3a:
         79:02:7c:5c
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUTodMdXAg2Tb8Cl85uFDoQMjUsuUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMwMjA1NTExWhcNMjUxMjA0MjM1OTU5
WjB6MUkwRwYDVQQFE0BmZDJiNTVmOWI3NTY2NTYzN2VhZmFhYzg2NTE4NTA0MTc0
ZjgxMzI2Zjk5NWNiY2M2NjNlYzQxNjQ3NDdiNjA2MS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCzf0itPTk+y0lxXAcy0t4KcMFD8Hur8bzFtGdHpq3Wf436
IGk8OOEcWm7W+wwU4g3hh9CorNLs493Txyrq/GY7S6LWY+prGPzHbxVuFBg8ad8F
cUkGuaHixHFLGgFQt15b+eG2NV1PcwuGnhJYZBQ6yFHJsYQ8Gulqg2W0O+9+bWVM
+65Z+swFgijAFvBtHkVKJakrXDoK/7GGvpgVmY3PtMcVjIqLyzMMBFkfSD2nDMrs
a3Fy+8Py39U8OI9LthLVdFynR69nm2WuKTfrJyr6CG9KLixmBz6Dg1wRQeVOPbpw
hgJYdaGIvb2IvDgeXD348B/HW2X8uP/23Ke7rLyNAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUMwEhwE9ZvutGjcMVWBOuSiHZfbowHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzA1MGUxNjUyLTFhYjctNGFjNy1iNmI0LTM4NDRhYjQ3NTk2ZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwEmAJAAE+gwDQYJKoZIhvcNAQELBQADggEBABapaCGoUfe7Tl3cvjdiZ4N3
7scCqmRlCg9RlOnVlBCNI62yZ93BgQiQvDMpEzbWs3dNso+EQvz+e1iTYgFGOzLd
ItZvjvMdOF6jQiqUAWBRreknPhRcXdp76/xoohdUi8EV7KtSWlh5bGlXYgcWsvUO
t1W1KlwxQNNQZIBGfAUHj7pYfIL088IEh+53sFTkx1OsOtmx1B9AX7YfAYPpFCGA
IfmD5ebMYE0ejirFjyAmhO2XcAcKEfzcPdsnzT5Li56l1hXE1iD9j7T/76PVLSd6
JRbfZtK5uS/0YLt2iq86ltQ1bd3nR/osuhwuc6NFDF6HFoEF/sDVmomDOnkCfFw=
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:34:44 2025 by rpki-client