Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/11b9f52f-0ff0-48e1-8a5b-cf320c66a626.roa
File:                     11b9f52f-0ff0-48e1-8a5b-cf320c66a626.roa (raw, json)
Hash identifier:          fNzGmtziMQCvkJfehHCrvS/bsCTqo/k3jY6Yc6+eItk=
Subject key identifier:   B7:81:D9:14:A1:5E:DF:64:9D:95:B3:52:98:1D:EB:DA:20:4A:BE:D8
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       0C1BDEF6B461801C246F7B7871D033CDDD2C7694
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/11b9f52f-0ff0-48e1-8a5b-cf320c66a626.roa
Signing time:             Thu 30 Oct 2025 23:42:17 +0000
ROA not before:           Thu 30 Oct 2025 23:42:17 +0000
ROA not after:            Thu 04 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2ef6::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:1b:de:f6:b4:61:80:1c:24:6f:7b:78:71:d0:33:cd:dd:2c:76:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 30 23:42:17 2025 GMT
            Not After : Dec  4 23:59:59 2025 GMT
        Subject: serialNumber=9ad119daedcc587058fef53791b2a6f2eb1c341d4bcf390a7ee80f06e8f5338d, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:77:3f:5f:15:d9:73:d8:e4:e9:c8:a3:d8:00:
                    44:af:53:1d:81:0d:9d:d5:07:96:90:0d:b5:7f:78:
                    ba:fd:c6:86:d2:d2:b5:53:d2:2a:19:74:13:11:7e:
                    29:14:44:f7:26:7c:d8:53:b4:33:f2:ae:1e:1c:b8:
                    44:de:67:a2:26:5e:9f:04:13:fc:df:7c:44:f8:af:
                    15:12:60:52:f7:ff:ed:64:2a:79:65:0d:20:1d:b2:
                    7c:2d:52:58:a6:99:33:ee:80:ae:f5:6e:6c:a2:26:
                    8a:8d:57:63:5e:39:fe:ec:eb:cd:10:e3:17:45:4c:
                    16:96:cb:b0:ba:ce:ae:80:62:6e:68:54:6b:67:81:
                    95:6b:31:8a:a8:43:14:73:4a:4d:02:b0:1d:4b:30:
                    d9:e3:ba:5b:e6:c1:a1:9d:b4:47:b2:7d:24:e1:3a:
                    ed:39:a0:89:a4:d2:5a:1d:11:3f:16:92:03:f4:f4:
                    e7:90:dd:ac:a6:6f:7d:fd:be:74:f9:b2:ee:72:db:
                    eb:33:09:a6:bc:11:fe:ee:f5:08:dc:f0:21:5b:d6:
                    20:02:3d:05:52:2e:17:91:ef:3a:7e:11:61:27:c4:
                    b9:06:f0:1c:7b:3a:31:39:dc:97:cf:68:4f:34:01:
                    c6:78:66:ee:a6:64:29:b8:fc:46:e6:83:ef:e0:8c:
                    a2:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:81:D9:14:A1:5E:DF:64:9D:95:B3:52:98:1D:EB:DA:20:4A:BE:D8
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/11b9f52f-0ff0-48e1-8a5b-cf320c66a626.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2ef6::/47

    Signature Algorithm: sha256WithRSAEncryption
         bd:79:bf:0c:9a:f4:38:75:2c:bf:4a:1f:b2:f8:7a:2e:e6:d5:
         5c:00:51:bd:8c:ee:d1:f8:0e:f4:81:cd:e2:a0:d4:f1:6d:f2:
         c7:d5:45:87:bf:85:bc:46:23:87:cc:e5:91:05:f6:1b:26:5b:
         86:f3:8e:78:4a:b7:c0:c8:11:8a:43:71:80:72:56:bf:da:ea:
         4a:43:3d:97:cc:93:b1:44:27:8e:3b:59:4b:d4:ed:5f:57:c5:
         91:66:99:f1:ab:75:fc:3a:5b:95:85:15:87:f1:df:80:e8:a9:
         58:d0:07:0b:33:86:59:94:a1:c5:08:31:46:81:22:41:55:07:
         c2:25:72:c8:74:c2:5c:fa:1b:ca:e8:67:9c:aa:16:42:f5:45:
         fc:64:55:73:b8:83:f2:a0:ee:23:3b:8e:01:b9:34:05:ca:67:
         ef:f0:59:89:7d:45:f4:1a:fa:b6:26:42:12:cd:25:cc:6f:36:
         47:b5:92:d6:0c:1d:1e:de:2d:0f:b3:da:6e:21:43:ff:57:02:
         6e:72:7a:c7:e3:cd:b2:60:1a:ea:c0:80:32:fc:40:da:66:2d:
         3f:b0:51:35:a3:ab:1c:92:d4:a1:32:96:bf:48:87:ed:8f:0f:
         fa:f6:d2:6c:5b:ef:d0:9e:4f:7f:98:22:56:fa:28:fb:84:7c:
         1c:0d:a8:cc
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUDBve9rRhgBwkb3t4cdAzzd0sdpQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMwMjM0MjE3WhcNMjUxMjA0MjM1OTU5
WjB6MUkwRwYDVQQFE0A5YWQxMTlkYWVkY2M1ODcwNThmZWY1Mzc5MWIyYTZmMmVi
MWMzNDFkNGJjZjM5MGE3ZWU4MGYwNmU4ZjUzMzhkMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC6dz9fFdlz2OTpyKPYAESvUx2BDZ3VB5aQDbV/eLr9xobS
0rVT0ioZdBMRfikURPcmfNhTtDPyrh4cuETeZ6ImXp8EE/zffET4rxUSYFL3/+1k
KnllDSAdsnwtUlimmTPugK71bmyiJoqNV2NeOf7s680Q4xdFTBaWy7C6zq6AYm5o
VGtngZVrMYqoQxRzSk0CsB1LMNnjulvmwaGdtEeyfSThOu05oImk0lodET8WkgP0
9OeQ3aymb339vnT5su5y2+szCaa8Ef7u9Qjc8CFb1iACPQVSLheR7zp+EWEnxLkG
8Bx7OjE53JfPaE80AcZ4Zu6mZCm4/Ebmg+/gjKLdAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUt4HZFKFe32SdlbNSmB3r2iBKvtgwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzExYjlmNTJmLTBmZjAtNDhlMS04YTViLWNmMzIwYzY2YTYyNi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwEmAJAALvYwDQYJKoZIhvcNAQELBQADggEBAL15vwya9Dh1LL9KH7L4ei7m
1VwAUb2M7tH4DvSBzeKg1PFt8sfVRYe/hbxGI4fM5ZEF9hsmW4bzjnhKt8DIEYpD
cYByVr/a6kpDPZfMk7FEJ447WUvU7V9XxZFmmfGrdfw6W5WFFYfx34DoqVjQBwsz
hlmUocUIMUaBIkFVB8Ilcsh0wlz6G8roZ5yqFkL1RfxkVXO4g/Kg7iM7jgG5NAXK
Z+/wWYl9RfQa+rYmQhLNJcxvNke1ktYMHR7eLQ+z2m4hQ/9XAm5yesfjzbJgGurA
gDL8QNpmLT+wUTWjqxyS1KEylr9Ih+2PD/r20mxb79CeT3+YIlb6KPuEfBwNqMw=
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:43:50 2025 by rpki-client