Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3f780b8c-343f-4a35-866c-2ea4d2a9c3ed.roa
File:                     3f780b8c-343f-4a35-866c-2ea4d2a9c3ed.roa (raw, json)
Hash identifier:          +Y1iRd9+um6YoZQnpSEeC5xS9zAgI3vtRFXhplGJOlw=
Subject key identifier:   9E:7B:90:2A:33:EB:0A:BE:51:08:5A:53:BB:D5:E4:EA:93:F7:D0:A3
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       4808F130EFC237904917219F0D971379339319B7
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3f780b8c-343f-4a35-866c-2ea4d2a9c3ed.roa
Signing time:             Fri 31 Oct 2025 06:37:03 +0000
ROA not before:           Fri 31 Oct 2025 06:37:03 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1890::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:08:f1:30:ef:c2:37:90:49:17:21:9f:0d:97:13:79:33:93:19:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 06:37:03 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=1ec777556331a91085fa02a76a7bfe39162ca102b57620affbac4f7f064da42d, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ed:20:da:5b:03:ed:a8:96:0b:8a:1a:9b:3e:
                    31:d1:15:be:57:cd:a4:b0:b3:22:8f:23:d9:3b:63:
                    40:a0:71:f0:47:f4:72:76:f3:50:e2:bb:09:9c:c0:
                    1b:bc:04:cb:a6:e3:71:d9:6b:53:8b:e4:2e:08:1f:
                    b2:fb:5a:7a:57:01:71:a6:cd:c2:b4:d2:7e:56:e6:
                    0a:7b:b3:76:af:a0:ce:60:f8:3b:de:cb:da:50:1a:
                    22:3a:c8:74:06:b3:27:01:95:3d:54:fc:02:3c:9b:
                    7d:47:d9:7e:58:e3:f1:7c:ec:f7:85:93:03:57:8a:
                    ae:91:bc:58:ce:95:a8:ae:9b:a9:92:ef:4b:9d:1a:
                    82:6f:a6:58:33:52:87:9e:54:8d:26:f8:c1:44:ca:
                    d1:f0:07:51:b7:85:ad:d0:6e:ee:4e:ef:2d:8f:81:
                    92:44:95:08:01:e6:2e:66:a5:79:0e:4f:67:37:62:
                    48:9d:65:31:8a:0a:4e:2b:38:3e:5b:36:53:50:27:
                    16:b0:b4:30:8f:81:92:52:d3:20:97:e7:0d:a7:e5:
                    a2:10:3c:08:c0:99:0b:c2:c9:83:b4:70:32:1b:d0:
                    18:f6:aa:65:b0:f4:72:25:81:0e:4c:99:30:fe:48:
                    54:9c:49:e1:00:9b:f0:d1:14:b3:cd:4c:14:e7:30:
                    45:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:7B:90:2A:33:EB:0A:BE:51:08:5A:53:BB:D5:E4:EA:93:F7:D0:A3
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3f780b8c-343f-4a35-866c-2ea4d2a9c3ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1890::/44

    Signature Algorithm: sha256WithRSAEncryption
         4a:28:21:2d:2b:db:22:e4:79:0b:5d:65:1d:d6:20:92:d1:2f:
         3f:47:94:c9:62:09:39:26:5e:f5:1d:da:25:f3:67:7e:d4:75:
         3c:23:5b:4e:6b:d2:7a:68:ab:73:0a:e3:8e:bf:2d:06:d6:56:
         2f:26:ca:c1:54:82:0f:83:40:95:9d:5c:d7:5f:62:f4:96:17:
         7c:e6:80:54:1f:da:5b:05:d7:1f:fc:53:6c:6c:c9:c9:82:1b:
         c2:10:2a:cd:95:03:32:d4:85:60:6e:23:3e:d5:d0:95:47:5d:
         f3:93:ea:d7:29:41:bd:8e:18:94:30:aa:f6:ca:93:14:25:2e:
         e8:b8:2d:d0:48:5e:77:ee:71:f5:12:d2:57:42:83:ba:7f:62:
         04:ca:64:44:4f:b5:e0:48:1a:10:59:c2:f9:ad:f6:7c:ae:77:
         da:d9:1e:3a:aa:75:35:45:48:f6:6d:79:eb:75:1c:ca:2e:a2:
         bd:58:17:15:68:c1:77:22:90:1b:3c:25:aa:c7:d2:1e:17:c5:
         02:db:43:79:2c:f3:cd:77:78:de:c1:99:ca:34:09:37:f7:94:
         c2:dd:11:ba:24:5f:ed:8a:cf:2f:04:7b:64:d7:45:e4:7c:e2:
         fd:9c:d5:77:ee:b5:0e:41:1b:8f:3b:ea:62:2b:9a:9f:49:6e:
         9d:b0:8c:2d
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUSAjxMO/CN5BJFyGfDZcTeTOTGbcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDYzNzAzWhcNMjUxMjA1MjM1OTU5
WjB6MUkwRwYDVQQFE0AxZWM3Nzc1NTYzMzFhOTEwODVmYTAyYTc2YTdiZmUzOTE2
MmNhMTAyYjU3NjIwYWZmYmFjNGY3ZjA2NGRhNDJkMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDD7SDaWwPtqJYLihqbPjHRFb5XzaSwsyKPI9k7Y0CgcfBH
9HJ281DiuwmcwBu8BMum43HZa1OL5C4IH7L7WnpXAXGmzcK00n5W5gp7s3avoM5g
+Dvey9pQGiI6yHQGsycBlT1U/AI8m31H2X5Y4/F87PeFkwNXiq6RvFjOlaium6mS
70udGoJvplgzUoeeVI0m+MFEytHwB1G3ha3Qbu5O7y2PgZJElQgB5i5mpXkOT2c3
YkidZTGKCk4rOD5bNlNQJxawtDCPgZJS0yCX5w2n5aIQPAjAmQvCyYO0cDIb0Bj2
qmWw9HIlgQ5MmTD+SFScSeEAm/DRFLPNTBTnMEXXAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUnnuQKjPrCr5RCFpTu9Xk6pP30KMwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzNmNzgwYjhjLTM0M2YtNGEzNS04NjZjLTJlYTRkMmE5YzNlZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwQmAJAAGJAwDQYJKoZIhvcNAQELBQADggEBAEooIS0r2yLkeQtdZR3WIJLR
Lz9HlMliCTkmXvUd2iXzZ37UdTwjW05r0npoq3MK446/LQbWVi8mysFUgg+DQJWd
XNdfYvSWF3zmgFQf2lsF1x/8U2xsycmCG8IQKs2VAzLUhWBuIz7V0JVHXfOT6tcp
Qb2OGJQwqvbKkxQlLui4LdBIXnfucfUS0ldCg7p/YgTKZERPteBIGhBZwvmt9nyu
d9rZHjqqdTVFSPZteet1HMouor1YFxVowXcikBs8JarH0h4XxQLbQ3ks8813eN7B
mco0CTf3lMLdEbokX+2Kzy8Ee2TXReR84v2c1XfutQ5BG4876mIrmp9Jbp2wjC0=
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:46:28 2025 by rpki-client