Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/22a31272-0949-4b5f-880c-96e7e44cb569.roa
File:                     22a31272-0949-4b5f-880c-96e7e44cb569.roa (raw, json)
Hash identifier:          PhLWvqquU8i6OtReexrJ42CCNwW4cw9uQRp7F8pL//Y=
Subject key identifier:   96:78:D2:FC:FB:8A:7E:40:F1:97:EC:19:3F:69:C7:3D:AF:22:9C:69
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       322E1EC0594D421BA5B8AC7D5A3A310A6FB014E2
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/22a31272-0949-4b5f-880c-96e7e44cb569.roa
Signing time:             Fri 31 Oct 2025 06:40:22 +0000
ROA not before:           Fri 31 Oct 2025 06:40:22 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1cb0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:2e:1e:c0:59:4d:42:1b:a5:b8:ac:7d:5a:3a:31:0a:6f:b0:14:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 06:40:22 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=829d5b5918a0cab8db4d74c3f83791b1af48d386ae3d5156c98ad76d2b7591fa, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:b0:70:79:0d:3c:aa:e2:a3:56:b7:93:8b:23:
                    18:49:6d:4c:31:e5:76:d1:98:17:25:ee:63:7f:98:
                    ee:d1:f9:c3:55:c6:bc:99:00:f1:55:70:2c:54:0b:
                    70:6a:84:28:73:f0:ea:99:ce:1b:46:9c:a6:9f:f5:
                    65:be:5a:a0:b5:d0:da:35:23:03:96:e7:8f:6b:25:
                    83:05:97:27:5f:e2:72:fd:36:43:ad:c7:37:9c:0d:
                    80:48:b1:bd:ec:53:c6:01:fa:66:19:27:80:90:c8:
                    d9:f3:bb:7b:7e:65:30:4b:1e:2e:60:c0:af:55:9b:
                    67:f3:e5:cf:ff:23:ba:10:11:75:22:c4:d6:82:c0:
                    0a:12:d3:aa:5d:3d:b8:c6:cb:2c:ed:8a:71:04:94:
                    7d:12:5d:22:e1:51:3c:1f:30:ac:1b:19:9a:e6:5b:
                    21:86:bb:c8:5d:f9:24:a5:c5:e8:7b:95:86:c4:85:
                    3d:e6:51:4a:29:18:df:08:36:61:4b:37:63:8f:2e:
                    11:5e:be:69:91:2d:d4:52:c3:84:39:e7:df:df:c9:
                    e4:5e:8d:67:0a:49:52:58:cf:5f:c3:5e:6f:b3:fa:
                    3d:10:63:c2:26:68:31:8c:a3:16:48:c1:d5:e4:79:
                    4b:81:d6:65:99:94:b2:82:08:d3:12:6e:70:85:01:
                    40:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:78:D2:FC:FB:8A:7E:40:F1:97:EC:19:3F:69:C7:3D:AF:22:9C:69
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/22a31272-0949-4b5f-880c-96e7e44cb569.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1cb0::/44

    Signature Algorithm: sha256WithRSAEncryption
         61:de:a6:19:23:9f:da:3c:79:15:3c:39:b0:a8:4b:f2:8f:ea:
         a2:7f:b6:4c:44:6e:a8:40:ee:8d:4e:23:bb:0b:b6:fd:59:22:
         47:0d:a9:8c:75:52:b1:01:c9:2f:a5:14:bc:47:54:e2:40:72:
         56:3c:21:af:e9:6d:d1:b1:81:e2:2a:f6:ff:19:86:51:e6:b6:
         ea:bf:0c:40:bb:52:62:78:55:84:1e:a7:53:e9:b4:b8:fd:af:
         25:3d:46:77:4a:3e:09:9c:10:06:ae:0c:b0:33:23:36:35:14:
         54:9b:bd:d0:61:67:ea:dc:51:9a:34:1d:f3:13:e8:60:4a:0f:
         e9:e9:8b:48:ac:cd:71:8a:eb:b9:83:ca:8e:7f:92:6d:9f:c0:
         eb:43:2c:e2:26:e9:a8:74:2a:23:20:27:bf:8f:c8:9b:de:20:
         e2:52:74:f6:b6:c3:c1:c6:9f:e0:32:64:fe:dc:96:8b:67:08:
         91:c1:e1:03:81:ed:4c:b7:85:c7:72:84:9f:cb:de:86:c3:34:
         84:62:3f:ce:66:05:43:27:bb:79:a6:d8:9f:63:08:08:c8:bb:
         51:34:90:4a:65:34:1a:d0:35:88:58:8d:d8:67:c6:d2:c5:5f:
         b9:36:f6:10:79:a6:c7:f0:5a:7e:ba:82:1a:d8:3d:bb:56:1a:
         a2:b4:73:c3
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUMi4ewFlNQhuluKx9WjoxCm+wFOIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDY0MDIyWhcNMjUxMjA1MjM1OTU5
WjB6MUkwRwYDVQQFE0A4MjlkNWI1OTE4YTBjYWI4ZGI0ZDc0YzNmODM3OTFiMWFm
NDhkMzg2YWUzZDUxNTZjOThhZDc2ZDJiNzU5MWZhMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDXsHB5DTyq4qNWt5OLIxhJbUwx5XbRmBcl7mN/mO7R+cNV
xryZAPFVcCxUC3BqhChz8OqZzhtGnKaf9WW+WqC10No1IwOW549rJYMFlydf4nL9
NkOtxzecDYBIsb3sU8YB+mYZJ4CQyNnzu3t+ZTBLHi5gwK9Vm2fz5c//I7oQEXUi
xNaCwAoS06pdPbjGyyztinEElH0SXSLhUTwfMKwbGZrmWyGGu8hd+SSlxeh7lYbE
hT3mUUopGN8INmFLN2OPLhFevmmRLdRSw4Q559/fyeRejWcKSVJYz1/DXm+z+j0Q
Y8ImaDGMoxZIwdXkeUuB1mWZlLKCCNMSbnCFAUAhAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUlnjS/PuKfkDxl+wZP2nHPa8inGkwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzIyYTMxMjcyLTA5NDktNGI1Zi04ODBjLTk2ZTdlNDRjYjU2OS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwQmAJAAHLAwDQYJKoZIhvcNAQELBQADggEBAGHephkjn9o8eRU8ObCoS/KP
6qJ/tkxEbqhA7o1OI7sLtv1ZIkcNqYx1UrEByS+lFLxHVOJAclY8Ia/pbdGxgeIq
9v8ZhlHmtuq/DEC7UmJ4VYQep1PptLj9ryU9RndKPgmcEAauDLAzIzY1FFSbvdBh
Z+rcUZo0HfMT6GBKD+npi0iszXGK67mDyo5/km2fwOtDLOIm6ah0KiMgJ7+PyJve
IOJSdPa2w8HGn+AyZP7clotnCJHB4QOB7Uy3hcdyhJ/L3obDNIRiP85mBUMnu3mm
2J9jCAjIu1E0kEplNBrQNYhYjdhnxtLFX7k29hB5psfwWn66ghrYPbtWGqK0c8M=
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:56:03 2025 by rpki-client