Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/402c061c-20e7-4dd1-916a-1adee52dedae.roa
File:                     402c061c-20e7-4dd1-916a-1adee52dedae.roa (raw, json)
Hash identifier:          kMKt9desn/vi4crzq15uw2ks1dLkDa3Cu8+sZJTTn9s=
Subject key identifier:   E5:A8:FA:7C:D5:67:82:35:7E:79:A5:55:08:75:36:27:90:33:D4:8F
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       331E7406060A4D99954E220366B4DBD1801E5756
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/402c061c-20e7-4dd1-916a-1adee52dedae.roa
Signing time:             Fri 31 Oct 2025 03:08:31 +0000
ROA not before:           Fri 31 Oct 2025 03:08:31 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1c74::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:1e:74:06:06:0a:4d:99:95:4e:22:03:66:b4:db:d1:80:1e:57:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 03:08:31 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=b6c2e91939457642b2c4827afbf6e4bdd2312eebd81d4fad7a573f7702b55a2d, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:59:6f:ba:67:02:5f:b0:e2:7e:7a:10:4d:41:
                    54:6b:aa:d1:25:ed:f3:3c:0e:36:93:f2:5a:ce:a5:
                    19:d2:ba:5d:b1:f6:08:fd:c5:ad:3d:f7:ba:a6:ac:
                    41:43:5b:98:fa:48:a8:bf:eb:d5:3a:41:b0:8b:7e:
                    7e:77:b2:d7:34:a6:20:41:e3:02:bb:48:55:2d:07:
                    21:a1:30:65:c6:34:51:24:2c:69:0a:7e:12:85:3d:
                    3c:4b:f3:43:4d:c1:5a:b0:e2:b2:e6:0a:ff:7f:e3:
                    82:15:b3:6f:bb:fe:77:e9:9c:57:24:e1:ef:0d:d9:
                    58:54:35:b1:3b:56:04:fd:af:2b:e1:51:57:49:93:
                    f2:f1:58:af:97:7a:3d:8e:85:6a:87:63:28:c0:06:
                    3e:14:0f:22:71:a7:13:08:d5:d3:7f:58:92:4b:3f:
                    b2:8a:a8:30:b8:77:f2:d7:ad:8a:15:04:6d:93:57:
                    2c:3d:16:da:c5:5d:bd:6e:3b:1e:79:25:2b:1c:61:
                    92:ac:c5:33:61:7b:57:3f:cb:b6:f3:24:1e:41:5f:
                    e9:98:82:92:6c:6c:c8:bd:97:d5:04:fe:ce:41:a3:
                    fd:0e:96:5a:6d:33:44:a8:09:d8:39:d5:86:91:79:
                    39:d3:c5:39:4f:66:0a:a3:b0:98:cd:70:95:d6:fb:
                    ec:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:A8:FA:7C:D5:67:82:35:7E:79:A5:55:08:75:36:27:90:33:D4:8F
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/402c061c-20e7-4dd1-916a-1adee52dedae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1c74::/46

    Signature Algorithm: sha256WithRSAEncryption
         86:15:27:36:3d:2f:62:4b:93:41:d6:74:39:a1:d5:ce:b4:af:
         f2:00:25:81:68:f0:c7:1e:1a:1d:ae:72:ae:e8:86:06:e7:10:
         6a:c4:ea:18:e3:38:d2:e4:cb:07:25:23:7f:8d:57:32:0c:92:
         3f:49:b5:20:ac:c5:cb:2e:ed:bb:2f:c0:9a:8b:99:2c:81:ad:
         23:67:3f:ce:10:b6:26:9a:28:5f:03:9e:d4:98:c6:e6:94:52:
         18:d8:89:ef:67:f3:1f:cc:dc:c2:2a:92:46:0d:16:de:b5:7b:
         aa:13:28:f8:6b:86:54:15:8c:e8:51:3a:d4:cf:f2:e1:5b:3c:
         36:e2:3f:48:ea:a6:44:52:b4:15:af:e4:33:31:de:e2:3c:5b:
         b6:32:5b:24:92:6d:c5:c2:bc:93:bc:bf:51:61:16:78:c6:60:
         ee:09:38:22:c8:37:2b:5d:bf:fb:e1:cb:33:48:6c:8e:da:55:
         08:e5:b6:67:60:ff:3c:67:42:ec:35:77:b5:a7:c0:b9:ec:97:
         90:e7:6a:c9:14:1e:50:05:e5:b4:14:a9:26:95:0d:9b:9b:60:
         10:6c:37:c1:c9:27:5b:03:10:74:59:b0:b2:92:80:46:bf:32:
         8a:06:bf:34:2c:c5:d5:ff:44:5a:bb:36:a8:c4:91:a9:2b:f2:
         8a:ee:2a:12
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUMx50BgYKTZmVTiIDZrTb0YAeV1YwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDMwODMxWhcNMjUxMjA1MjM1OTU5
WjB6MUkwRwYDVQQFE0BiNmMyZTkxOTM5NDU3NjQyYjJjNDgyN2FmYmY2ZTRiZGQy
MzEyZWViZDgxZDRmYWQ3YTU3M2Y3NzAyYjU1YTJkMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDqWW+6ZwJfsOJ+ehBNQVRrqtEl7fM8DjaT8lrOpRnSul2x
9gj9xa0997qmrEFDW5j6SKi/69U6QbCLfn53stc0piBB4wK7SFUtByGhMGXGNFEk
LGkKfhKFPTxL80NNwVqw4rLmCv9/44IVs2+7/nfpnFck4e8N2VhUNbE7VgT9ryvh
UVdJk/LxWK+Xej2OhWqHYyjABj4UDyJxpxMI1dN/WJJLP7KKqDC4d/LXrYoVBG2T
Vyw9FtrFXb1uOx55JSscYZKsxTNhe1c/y7bzJB5BX+mYgpJsbMi9l9UE/s5Bo/0O
llptM0SoCdg51YaReTnTxTlPZgqjsJjNcJXW++w9AgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQU5aj6fNVngjV+eaVVCHU2J5Az1I8wHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzQwMmMwNjFjLTIwZTctNGRkMS05MTZhLTFhZGVlNTJkZWRhZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwImAJAAHHQwDQYJKoZIhvcNAQELBQADggEBAIYVJzY9L2JLk0HWdDmh1c60
r/IAJYFo8MceGh2ucq7ohgbnEGrE6hjjONLkywclI3+NVzIMkj9JtSCsxcsu7bsv
wJqLmSyBrSNnP84QtiaaKF8DntSYxuaUUhjYie9n8x/M3MIqkkYNFt61e6oTKPhr
hlQVjOhROtTP8uFbPDbiP0jqpkRStBWv5DMx3uI8W7YyWySSbcXCvJO8v1FhFnjG
YO4JOCLINytdv/vhyzNIbI7aVQjltmdg/zxnQuw1d7WnwLnsl5DnaskUHlAF5bQU
qSaVDZubYBBsN8HJJ1sDEHRZsLKSgEa/MooGvzQsxdX/RFq7NqjEkakr8oruKhI=
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:56:08 2025 by rpki-client