Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3ec3ffe6-6a83-427c-a3ee-8668670c2903.roa
File:                     3ec3ffe6-6a83-427c-a3ee-8668670c2903.roa (raw, json)
Hash identifier:          xe6++NcQkS9ASsV9O4JmbFDnndd2RRQHQRP5VfjPbEk=
Subject key identifier:   81:66:C1:C7:6C:4F:10:AE:C1:47:F2:8C:12:EE:9D:89:46:2A:8A:58
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       663AD99871F69BB7E800605A8ADC0DCD305BC44A
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3ec3ffe6-6a83-427c-a3ee-8668670c2903.roa
Signing time:             Fri 31 Oct 2025 02:22:01 +0000
ROA not before:           Fri 31 Oct 2025 02:22:01 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1284::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:3a:d9:98:71:f6:9b:b7:e8:00:60:5a:8a:dc:0d:cd:30:5b:c4:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 02:22:01 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=bb815ed805915bc45c3512db008a54efb867f5725e8c1f4bce7480d5e1763ec1, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:9a:41:bb:7b:e8:cf:ff:7c:c9:90:54:a7:b7:
                    56:86:b9:01:dd:eb:5d:39:c4:d2:67:26:8d:f6:6c:
                    18:fb:35:92:69:04:06:99:eb:b7:e9:58:6e:ad:b0:
                    8f:6a:d6:b4:5b:46:d0:8e:3d:e6:85:e8:e3:24:99:
                    f7:54:ff:47:2a:6a:28:36:b0:b1:e7:47:f2:be:f3:
                    0a:8d:df:e6:c3:f2:64:ac:28:7f:e0:b6:2b:7a:7c:
                    b5:95:9a:e3:4d:ba:f8:61:c3:65:3c:2e:2c:8d:25:
                    4c:bb:15:b2:5f:a6:35:1d:51:21:aa:cd:31:c1:69:
                    ac:5b:cb:f4:ad:3f:d2:96:3a:e4:25:be:e5:50:59:
                    3a:40:66:d6:ad:18:b2:dc:58:46:06:8a:91:64:4e:
                    3c:55:b2:41:fd:15:7c:8e:02:a6:98:df:17:66:ca:
                    b2:f5:b8:7d:8d:3f:c2:19:da:63:4f:96:49:a8:cb:
                    d0:f9:7a:22:42:95:4d:6a:7e:f1:c6:35:2d:82:91:
                    2d:9e:58:01:2f:d0:a5:85:a4:66:98:b6:7f:b4:22:
                    a2:ea:39:ce:8c:30:1c:34:49:89:8c:bb:4f:5a:53:
                    b5:55:ef:25:76:0c:41:dc:75:3d:8f:fe:b0:e0:71:
                    df:ec:17:0a:dc:75:5f:06:95:fc:25:78:82:38:2e:
                    0d:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:66:C1:C7:6C:4F:10:AE:C1:47:F2:8C:12:EE:9D:89:46:2A:8A:58
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3ec3ffe6-6a83-427c-a3ee-8668670c2903.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1284::/46

    Signature Algorithm: sha256WithRSAEncryption
         4d:a5:62:e5:1b:c1:8d:52:fb:68:a2:90:2e:b5:60:95:a4:f2:
         55:1f:4b:61:f7:5d:d8:67:f7:b8:70:9c:f6:fd:19:11:ce:78:
         3b:b1:f9:85:58:84:b0:4f:67:2b:97:84:21:89:97:74:14:d8:
         58:78:cf:60:43:ad:f8:61:eb:20:a0:d8:db:3e:79:a1:27:ea:
         ea:55:b4:fe:1d:cb:f9:69:d9:b1:91:ac:44:09:2e:3a:e7:88:
         56:af:e9:41:70:9c:b8:0a:ab:8d:3d:07:70:45:24:0c:a5:cd:
         7d:a7:25:a7:55:80:fb:e1:d0:86:a2:d1:99:85:ca:68:1a:d1:
         b2:76:50:47:7f:d0:8e:b0:a4:6e:2e:db:80:da:cb:03:b0:ff:
         7b:d1:52:df:f5:8f:3e:27:28:03:8d:f8:64:d9:d4:05:aa:39:
         95:c3:8a:42:bc:9e:3f:b9:9a:5c:85:23:3c:2d:56:75:1b:94:
         91:4c:a5:be:ad:ba:4e:b9:20:cd:05:04:46:d5:4d:8e:d0:f3:
         72:38:25:68:a7:e8:3b:08:26:80:66:c4:49:a0:55:cb:e8:15:
         4d:21:1c:1b:e9:c6:ac:2d:39:92:b5:48:67:6c:e7:6d:0f:fc:
         be:1b:d0:9f:69:ad:2b:9f:44:8c:cd:3e:e1:d4:44:15:0d:9b:
         fe:7f:b0:62
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUZjrZmHH2m7foAGBaitwNzTBbxEowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDIyMjAxWhcNMjUxMjA1MjM1OTU5
WjB6MUkwRwYDVQQFE0BiYjgxNWVkODA1OTE1YmM0NWMzNTEyZGIwMDhhNTRlZmI4
NjdmNTcyNWU4YzFmNGJjZTc0ODBkNWUxNzYzZWMxMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCkmkG7e+jP/3zJkFSnt1aGuQHd6105xNJnJo32bBj7NZJp
BAaZ67fpWG6tsI9q1rRbRtCOPeaF6OMkmfdU/0cqaig2sLHnR/K+8wqN3+bD8mSs
KH/gtit6fLWVmuNNuvhhw2U8LiyNJUy7FbJfpjUdUSGqzTHBaaxby/StP9KWOuQl
vuVQWTpAZtatGLLcWEYGipFkTjxVskH9FXyOAqaY3xdmyrL1uH2NP8IZ2mNPlkmo
y9D5eiJClU1qfvHGNS2CkS2eWAEv0KWFpGaYtn+0IqLqOc6MMBw0SYmMu09aU7VV
7yV2DEHcdT2P/rDgcd/sFwrcdV8GlfwleII4Lg1vAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUgWbBx2xPEK7BR/KMEu6diUYqilgwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzNlYzNmZmU2LTZhODMtNDI3Yy1hM2VlLTg2Njg2NzBjMjkwMy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwImAJAAEoQwDQYJKoZIhvcNAQELBQADggEBAE2lYuUbwY1S+2iikC61YJWk
8lUfS2H3Xdhn97hwnPb9GRHOeDux+YVYhLBPZyuXhCGJl3QU2Fh4z2BDrfhh6yCg
2Ns+eaEn6upVtP4dy/lp2bGRrEQJLjrniFav6UFwnLgKq409B3BFJAylzX2nJadV
gPvh0Iai0ZmFymga0bJ2UEd/0I6wpG4u24DaywOw/3vRUt/1jz4nKAON+GTZ1AWq
OZXDikK8nj+5mlyFIzwtVnUblJFMpb6tuk65IM0FBEbVTY7Q83I4JWin6DsIJoBm
xEmgVcvoFU0hHBvpxqwtOZK1SGds520P/L4b0J9prSufRIzNPuHURBUNm/5/sGI=
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:34:44 2025 by rpki-client