Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/104cb9a0-eb9b-492e-a7b5-7dd51e4ea13a.roa
File:                     104cb9a0-eb9b-492e-a7b5-7dd51e4ea13a.roa (raw, json)
Hash identifier:          OAcMMx+FUYlfOC7y2UCVshtb0yXZG0+S5pgJfvCShsE=
Subject key identifier:   B5:79:F7:8E:82:64:2F:AF:11:CE:FC:63:AF:48:25:9D:57:7E:EA:5D
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       7F0A38B5AFBCAC6921C476134AA0DD003380A136
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/104cb9a0-eb9b-492e-a7b5-7dd51e4ea13a.roa
Signing time:             Fri 31 Oct 2025 06:42:05 +0000
ROA not before:           Fri 31 Oct 2025 06:42:05 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1fa0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:0a:38:b5:af:bc:ac:69:21:c4:76:13:4a:a0:dd:00:33:80:a1:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 06:42:05 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=7c2206efeb903b1825349a4585c918a7d56156c265771e6e7b5899c9fe7f096c, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ab:03:14:79:4d:a9:3d:41:12:07:1c:ce:9f:
                    89:b5:31:78:0c:11:78:0c:7d:07:ae:a8:58:aa:11:
                    ab:5d:52:7f:34:e9:1f:71:41:d4:da:81:b3:47:80:
                    7b:11:b3:19:82:4b:84:0c:d7:0d:dc:94:32:85:a7:
                    cb:3a:15:da:1b:76:de:35:5f:72:70:65:b6:2a:17:
                    7c:8b:08:40:bb:a0:09:53:d3:d8:9b:94:f0:8a:28:
                    1d:34:f6:fe:e5:62:33:e0:89:24:66:d2:71:e0:22:
                    f2:07:71:98:d8:78:a5:fe:dc:4a:11:ac:77:80:fe:
                    2b:0f:41:a2:d2:70:40:0b:1e:58:4a:76:07:cd:fa:
                    85:47:bd:87:4c:93:b2:86:c3:31:4c:02:d5:7b:52:
                    ce:f1:28:87:95:62:8b:b8:29:bc:d8:75:21:85:76:
                    1d:4f:d8:fe:04:77:bc:ea:fd:ff:7f:36:5e:2b:f0:
                    1a:cf:18:10:f2:4e:b9:04:5d:6a:49:f9:25:c1:db:
                    73:03:24:c3:51:c3:e5:4d:f7:90:e5:11:d4:f8:7d:
                    1d:72:37:a5:03:f1:15:c3:06:25:c5:10:c7:2e:45:
                    85:db:8d:e5:11:86:8c:25:44:08:6a:19:1c:a0:12:
                    55:de:6a:e8:81:ac:d2:88:5c:e0:a0:d4:b5:da:73:
                    9c:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:79:F7:8E:82:64:2F:AF:11:CE:FC:63:AF:48:25:9D:57:7E:EA:5D
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/104cb9a0-eb9b-492e-a7b5-7dd51e4ea13a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1fa0::/44

    Signature Algorithm: sha256WithRSAEncryption
         21:0b:50:12:0d:19:9c:6b:37:7d:26:65:04:5b:eb:e9:9e:30:
         aa:d9:d4:ef:25:30:65:f8:17:80:23:99:99:48:2b:a3:fb:55:
         74:b6:d4:01:39:f9:60:39:53:4d:2c:92:95:79:bd:ee:53:26:
         25:12:27:fc:f0:01:26:c6:fe:5b:22:1c:ed:0a:31:57:ae:d2:
         52:ca:17:68:d2:53:6a:73:7e:bd:53:09:e4:14:71:01:d2:05:
         35:e8:15:55:90:7d:b4:45:7e:18:75:a3:66:c4:48:6a:6f:13:
         a8:05:0b:bd:ac:3a:ed:31:b1:69:d8:8c:cf:6b:56:45:53:55:
         b5:66:06:fe:44:b9:e5:90:89:96:a7:b3:bd:b9:f0:02:40:15:
         da:22:93:d0:cd:23:48:ca:51:e3:f1:e6:cc:53:da:23:73:28:
         be:96:56:d8:86:3f:c0:d2:34:9a:30:fd:84:b2:cd:6d:4b:cb:
         1d:21:e4:65:16:b0:f5:4d:71:bf:12:33:18:17:55:1a:22:92:
         66:53:87:63:61:d1:a1:d2:34:26:ff:69:ec:51:a9:68:d1:99:
         9e:e3:df:54:6f:90:2b:28:40:1d:c5:0c:70:23:7d:7c:fb:2c:
         61:98:43:16:dd:76:f0:54:e1:f1:5b:53:46:3a:a2:d0:35:ca:
         09:04:e6:56
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUfwo4ta+8rGkhxHYTSqDdADOAoTYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDY0MjA1WhcNMjUxMjA1MjM1OTU5
WjB6MUkwRwYDVQQFE0A3YzIyMDZlZmViOTAzYjE4MjUzNDlhNDU4NWM5MThhN2Q1
NjE1NmMyNjU3NzFlNmU3YjU4OTljOWZlN2YwOTZjMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDHqwMUeU2pPUESBxzOn4m1MXgMEXgMfQeuqFiqEatdUn80
6R9xQdTagbNHgHsRsxmCS4QM1w3clDKFp8s6Fdobdt41X3JwZbYqF3yLCEC7oAlT
09iblPCKKB009v7lYjPgiSRm0nHgIvIHcZjYeKX+3EoRrHeA/isPQaLScEALHlhK
dgfN+oVHvYdMk7KGwzFMAtV7Us7xKIeVYou4KbzYdSGFdh1P2P4Ed7zq/f9/Nl4r
8BrPGBDyTrkEXWpJ+SXB23MDJMNRw+VN95DlEdT4fR1yN6UD8RXDBiXFEMcuRYXb
jeURhowlRAhqGRygElXeauiBrNKIXOCg1LXac5yzAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUtXn3joJkL68Rzvxjr0glnVd+6l0wHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzEwNGNiOWEwLWViOWItNDkyZS1hN2I1LTdkZDUxZTRlYTEzYS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwQmAJAAH6AwDQYJKoZIhvcNAQELBQADggEBACELUBINGZxrN30mZQRb6+me
MKrZ1O8lMGX4F4AjmZlIK6P7VXS21AE5+WA5U00skpV5ve5TJiUSJ/zwASbG/lsi
HO0KMVeu0lLKF2jSU2pzfr1TCeQUcQHSBTXoFVWQfbRFfhh1o2bESGpvE6gFC72s
Ou0xsWnYjM9rVkVTVbVmBv5EueWQiZans7258AJAFdoik9DNI0jKUePx5sxT2iNz
KL6WVtiGP8DSNJow/YSyzW1Lyx0h5GUWsPVNcb8SMxgXVRoikmZTh2Nh0aHSNCb/
aexRqWjRmZ7j31RvkCsoQB3FDHAjfXz7LGGYQxbddvBU4fFbU0Y6otA1ygkE5lY=
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:45:52 2025 by rpki-client