Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/34643e6c-b354-4a9e-a381-4ba8d1435d65.roa
File:                     34643e6c-b354-4a9e-a381-4ba8d1435d65.roa (raw, json)
Hash identifier:          r9Yp39d2IgqtjITZqguAUk0OlbOseGe5JIE57GVzqmo=
Subject key identifier:   E4:AB:A2:E2:A3:32:6D:F1:73:89:D9:A5:D7:D3:C9:6D:54:FD:60:2A
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       7C8014BB25C25B4F5C20B5F0A100A85A227C0B4B
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/34643e6c-b354-4a9e-a381-4ba8d1435d65.roa
Signing time:             Fri 31 Oct 2025 01:21:54 +0000
ROA not before:           Fri 31 Oct 2025 01:21:54 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3ada::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:80:14:bb:25:c2:5b:4f:5c:20:b5:f0:a1:00:a8:5a:22:7c:0b:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 01:21:54 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=8b68a3f2e3946095b6b822e3c33c06c0e7f22d85a7c0c9ee25ad11d783945e22, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d6:32:1a:61:a3:b5:e7:2a:55:ba:74:ad:46:
                    c3:b7:67:54:3a:67:47:26:76:8c:5f:21:ef:cc:01:
                    19:b3:66:29:a5:c8:1c:b7:14:4b:37:92:33:a9:7c:
                    10:e3:da:28:da:df:ac:40:ae:f3:db:4b:9e:9a:c5:
                    99:b2:a7:28:8b:28:42:e5:8b:4b:af:f9:50:e9:3a:
                    82:dc:48:01:aa:3f:97:d7:bc:23:76:30:0e:fa:93:
                    0f:36:35:9d:63:7c:ce:f6:78:2d:cf:75:35:31:a9:
                    60:67:23:03:d5:ff:1b:76:da:50:9b:f5:19:20:79:
                    17:7c:42:c6:ae:f1:d2:44:c7:00:e0:d0:a8:36:a1:
                    e7:b9:06:90:b3:70:41:b4:f5:ce:d4:27:72:39:2a:
                    6d:30:64:6c:5a:11:2a:50:e2:a1:5a:0b:28:34:1a:
                    0c:13:08:f2:09:36:c4:58:89:3c:ad:bc:84:03:71:
                    8a:39:3a:8a:2c:c9:d2:3b:61:70:61:5f:b7:e6:07:
                    1c:b6:fe:fc:93:4d:8a:86:07:4e:1b:8c:dc:9d:99:
                    db:4b:e3:8f:a7:a9:12:3d:9f:ef:11:30:37:35:b4:
                    4f:c9:82:bb:ef:e2:7c:73:ce:de:48:52:05:3a:74:
                    8f:71:65:6d:61:54:34:1e:78:e3:45:8c:e3:5d:ff:
                    24:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:AB:A2:E2:A3:32:6D:F1:73:89:D9:A5:D7:D3:C9:6D:54:FD:60:2A
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/34643e6c-b354-4a9e-a381-4ba8d1435d65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3ada::/47

    Signature Algorithm: sha256WithRSAEncryption
         1e:be:21:4b:36:68:ee:a4:aa:53:70:c5:3a:d5:2b:3d:e6:e5:
         c8:3f:81:ed:0f:9b:6c:7a:94:0b:f3:a5:a6:f9:05:6a:83:11:
         1b:63:cf:71:c9:18:16:b4:71:42:12:f0:67:28:8e:c6:df:51:
         47:50:c8:d8:66:46:6d:0b:82:50:26:47:fe:71:01:60:51:3b:
         51:fa:09:3a:03:4a:8b:c0:8d:eb:3b:4b:71:1c:20:09:eb:b7:
         ec:51:9c:49:b1:87:52:8d:10:57:b8:5a:b7:51:77:ce:9d:11:
         9c:e1:c9:07:8a:58:1f:4d:7b:df:f9:0b:6f:86:60:28:80:96:
         05:48:4b:bd:7e:6b:29:c5:49:9a:2b:d5:e5:d5:27:d3:a4:08:
         1a:96:9d:df:8b:b5:5c:b0:7b:d0:45:4f:aa:5a:1a:ac:db:ef:
         fd:27:39:32:d2:00:f5:95:59:b1:26:ee:c0:f3:37:4a:9e:9c:
         df:b1:30:ad:5a:82:1b:bb:22:0d:48:1e:e1:48:10:39:2a:4e:
         21:ad:f2:48:54:f1:60:76:11:a7:6b:ee:8c:32:da:03:37:54:
         d1:16:a5:81:7f:4e:7b:48:f1:68:51:02:dc:44:42:64:b2:14:
         59:ee:64:44:3c:34:d6:bb:aa:4e:71:fe:d4:30:70:ec:94:9b:
         35:89:a7:14
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUfIAUuyXCW09cILXwoQCoWiJ8C0swDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDEyMTU0WhcNMjUxMjA1MjM1OTU5
WjB6MUkwRwYDVQQFE0A4YjY4YTNmMmUzOTQ2MDk1YjZiODIyZTNjMzNjMDZjMGU3
ZjIyZDg1YTdjMGM5ZWUyNWFkMTFkNzgzOTQ1ZTIyMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC51jIaYaO15ypVunStRsO3Z1Q6Z0cmdoxfIe/MARmzZiml
yBy3FEs3kjOpfBDj2ija36xArvPbS56axZmypyiLKELli0uv+VDpOoLcSAGqP5fX
vCN2MA76kw82NZ1jfM72eC3PdTUxqWBnIwPV/xt22lCb9RkgeRd8Qsau8dJExwDg
0Kg2oee5BpCzcEG09c7UJ3I5Km0wZGxaESpQ4qFaCyg0GgwTCPIJNsRYiTytvIQD
cYo5OoosydI7YXBhX7fmBxy2/vyTTYqGB04bjNydmdtL44+nqRI9n+8RMDc1tE/J
grvv4nxzzt5IUgU6dI9xZW1hVDQeeONFjONd/ySzAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQU5Kui4qMybfFzidml19PJbVT9YCowHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzM0NjQzZTZjLWIzNTQtNGE5ZS1hMzgxLTRiYThkMTQzNWQ2NS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwEmAJAAOtowDQYJKoZIhvcNAQELBQADggEBAB6+IUs2aO6kqlNwxTrVKz3m
5cg/ge0Pm2x6lAvzpab5BWqDERtjz3HJGBa0cUIS8GcojsbfUUdQyNhmRm0LglAm
R/5xAWBRO1H6CToDSovAjes7S3EcIAnrt+xRnEmxh1KNEFe4WrdRd86dEZzhyQeK
WB9Ne9/5C2+GYCiAlgVIS71+aynFSZor1eXVJ9OkCBqWnd+LtVywe9BFT6paGqzb
7/0nOTLSAPWVWbEm7sDzN0qenN+xMK1aghu7Ig1IHuFIEDkqTiGt8khU8WB2Eadr
7owy2gM3VNEWpYF/TntI8WhRAtxEQmSyFFnuZEQ8NNa7qk5x/tQwcOyUmzWJpxQ=
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:38:53 2025 by rpki-client