Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1a30e636-6b82-41cc-a7fe-a0e861b3cde7.roa
File:                     1a30e636-6b82-41cc-a7fe-a0e861b3cde7.roa (raw, json)
Hash identifier:          rMv/PtKOhfrHFVmbABKQ9unmENRxL2TB0nEovzb5QxU=
Subject key identifier:   6D:90:2E:62:EE:5F:46:53:FA:BF:4C:75:11:AE:B8:19:F4:33:1A:F7
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       7B48489FEB7C8E8AE54B41FCFA27A09D954631AD
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1a30e636-6b82-41cc-a7fe-a0e861b3cde7.roa
Signing time:             Fri 31 Oct 2025 06:22:17 +0000
ROA not before:           Fri 31 Oct 2025 06:22:17 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3d98::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:48:48:9f:eb:7c:8e:8a:e5:4b:41:fc:fa:27:a0:9d:95:46:31:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 06:22:17 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=180cf1cd63943090f77bd33645931e46a11a1578cb764e476817149d029265b9, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e4:a6:78:74:a8:76:d9:d0:2c:25:71:04:65:
                    17:7c:be:a1:ff:b8:55:53:09:ca:4d:e2:92:e4:45:
                    17:ad:dd:d8:c6:37:3d:28:90:d1:e4:a5:25:88:53:
                    5e:7a:96:b4:ae:43:89:73:4d:3d:dd:c6:1f:1c:71:
                    96:31:26:02:17:55:5b:c3:d1:ba:66:44:60:35:19:
                    a9:e4:f4:b4:b7:85:83:4f:8d:00:e4:8b:e2:74:30:
                    18:56:93:86:ca:ea:f6:1c:d1:65:bd:8d:6d:a9:c4:
                    61:65:6a:32:cb:cc:11:f5:2e:42:09:25:26:25:f5:
                    34:2e:f2:17:5a:e8:40:38:06:6c:16:3b:cc:b4:36:
                    8e:40:05:18:3a:a1:48:9d:83:8c:b4:d0:2a:43:01:
                    75:c5:76:e5:3b:be:a6:e5:6f:e4:8e:80:b5:fb:2d:
                    09:24:21:90:2e:23:d5:fe:59:32:ec:c7:5b:40:d3:
                    5a:6d:06:3f:b2:9c:8c:7f:54:c7:28:48:9b:62:03:
                    32:66:f3:36:6c:9e:cf:e1:2b:2d:1e:da:74:01:e5:
                    4e:8b:5e:6d:81:f8:8e:2e:3d:7e:c8:88:2a:c3:07:
                    3b:0e:e0:6b:32:6d:b4:04:85:0b:41:b9:15:d8:28:
                    8c:a0:24:3b:b2:b5:85:21:31:9a:0f:52:db:af:9d:
                    1e:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:90:2E:62:EE:5F:46:53:FA:BF:4C:75:11:AE:B8:19:F4:33:1A:F7
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1a30e636-6b82-41cc-a7fe-a0e861b3cde7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3d98::/45

    Signature Algorithm: sha256WithRSAEncryption
         8c:c7:60:0a:1d:c6:bc:af:5c:66:87:b1:ad:28:20:cc:8a:2a:
         23:99:83:ea:3b:44:eb:ae:e4:15:bb:e7:1f:71:4a:d4:22:0b:
         f4:88:0a:41:3c:f5:ab:5a:be:17:18:50:2a:ef:a6:59:6e:0b:
         54:af:7d:59:4d:4e:b0:4f:39:41:ae:d5:0f:3d:5c:ca:26:9d:
         49:3d:20:64:11:0d:a5:0f:13:76:10:42:61:1b:d4:b1:b9:67:
         c5:4d:38:35:55:67:9f:04:80:ae:ef:d6:fe:51:d6:1c:fc:cb:
         23:bf:e8:2e:98:1f:31:4b:7a:7e:1d:82:86:b9:d7:b8:cf:dd:
         c7:56:cb:0b:42:57:02:da:eb:e2:37:a1:e6:30:22:fe:ff:1a:
         6c:b2:72:86:e6:36:03:84:a8:3d:26:34:ee:d3:87:9e:38:10:
         a3:36:bd:a4:97:90:82:10:04:f9:08:51:d5:11:ca:56:7b:29:
         66:cf:0d:16:5d:b8:99:c7:ec:1d:ad:a7:87:76:33:de:d5:a3:
         91:24:45:50:fa:1a:21:13:06:0d:3e:87:b4:cb:1b:a2:12:93:
         7f:38:39:f3:6a:0e:c0:b0:0f:9d:55:6b:55:9e:18:30:83:a0:
         3b:c3:4a:38:88:59:74:50:02:85:a3:e9:88:bb:dd:35:8a:36:
         78:c3:09:23
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUe0hIn+t8jorlS0H8+iegnZVGMa0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDYyMjE3WhcNMjUxMjA1MjM1OTU5
WjB6MUkwRwYDVQQFE0AxODBjZjFjZDYzOTQzMDkwZjc3YmQzMzY0NTkzMWU0NmEx
MWExNTc4Y2I3NjRlNDc2ODE3MTQ5ZDAyOTI2NWI5MS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC75KZ4dKh22dAsJXEEZRd8vqH/uFVTCcpN4pLkRRet3djG
Nz0okNHkpSWIU156lrSuQ4lzTT3dxh8ccZYxJgIXVVvD0bpmRGA1Gank9LS3hYNP
jQDki+J0MBhWk4bK6vYc0WW9jW2pxGFlajLLzBH1LkIJJSYl9TQu8hda6EA4BmwW
O8y0No5ABRg6oUidg4y00CpDAXXFduU7vqblb+SOgLX7LQkkIZAuI9X+WTLsx1tA
01ptBj+ynIx/VMcoSJtiAzJm8zZsns/hKy0e2nQB5U6LXm2B+I4uPX7IiCrDBzsO
4GsybbQEhQtBuRXYKIygJDuytYUhMZoPUtuvnR6nAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUbZAuYu5fRlP6v0x1Ea64GfQzGvcwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzFhMzBlNjM2LTZiODItNDFjYy1hN2ZlLWEwZTg2MWIzY2RlNy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwMmAJAAPZgwDQYJKoZIhvcNAQELBQADggEBAIzHYAodxryvXGaHsa0oIMyK
KiOZg+o7ROuu5BW75x9xStQiC/SICkE89atavhcYUCrvplluC1SvfVlNTrBPOUGu
1Q89XMomnUk9IGQRDaUPE3YQQmEb1LG5Z8VNODVVZ58EgK7v1v5R1hz8yyO/6C6Y
HzFLen4dgoa517jP3cdWywtCVwLa6+I3oeYwIv7/GmyycobmNgOEqD0mNO7Th544
EKM2vaSXkIIQBPkIUdURylZ7KWbPDRZduJnH7B2tp4d2M97Vo5EkRVD6GiETBg0+
h7TLG6ISk384OfNqDsCwD51Va1WeGDCDoDvDSjiIWXRQAoWj6Yi73TWKNnjDCSM=
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:43:36 2025 by rpki-client