Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4d63c04a-33b5-4dd0-8327-f52d2cefdf9a.roa
File:                     4d63c04a-33b5-4dd0-8327-f52d2cefdf9a.roa (raw, json)
Hash identifier:          4MJwRldWq25vsLaMR6Gk77/MwlCT7ufTf7kgDglQ8po=
Subject key identifier:   EF:A2:EF:A6:E9:05:5C:95:1D:78:74:35:76:D6:FB:7D:6D:FF:00:E2
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       4A0DC468AC1DCE39E0615C808BD384EF926E8EE0
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4d63c04a-33b5-4dd0-8327-f52d2cefdf9a.roa
Signing time:             Thu 30 Oct 2025 21:57:19 +0000
ROA not before:           Thu 30 Oct 2025 21:57:19 +0000
ROA not after:            Thu 04 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1a4a::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:0d:c4:68:ac:1d:ce:39:e0:61:5c:80:8b:d3:84:ef:92:6e:8e:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 30 21:57:19 2025 GMT
            Not After : Dec  4 23:59:59 2025 GMT
        Subject: serialNumber=0ac2de738b42dca68af2fe3f7d51c325c9f6334b9ebef2ff68af6efabefcae96, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:74:f6:f2:7a:c9:2e:eb:90:ce:5f:16:de:5a:
                    32:c6:a3:37:8d:a3:d5:84:27:a6:b7:83:74:31:de:
                    24:60:4c:c7:f5:75:23:8d:25:d0:ff:74:d7:06:aa:
                    32:ff:c7:ae:63:ab:cf:ae:0e:03:6a:9d:d3:60:24:
                    dc:e0:24:10:57:1f:0a:bc:e9:78:5f:19:ef:bb:cb:
                    94:ac:64:88:fd:47:49:86:ee:be:23:b4:9f:1d:c1:
                    28:55:0f:20:dd:ca:fd:8c:e1:9f:1c:14:2c:cf:dc:
                    e5:3c:b6:6b:05:3d:6d:89:78:60:cc:79:1e:8e:cf:
                    93:72:a3:fc:b5:06:a1:f0:1d:c9:5d:59:15:c2:2b:
                    b1:db:1c:0c:1a:b9:fd:e9:d6:58:7d:2e:fc:e9:41:
                    4a:54:98:3a:e6:f3:48:bc:14:9c:a9:9f:7e:c2:12:
                    92:24:dd:07:e8:6d:5d:d6:5a:26:5b:3e:d9:fa:42:
                    cf:0d:45:0c:2c:72:86:65:bb:80:8e:99:c8:9e:59:
                    2f:33:90:fe:d1:6c:aa:43:7b:5e:88:6d:59:75:a5:
                    c1:03:fd:45:7b:86:ea:55:4e:9f:cb:2b:ea:65:13:
                    0d:50:e8:f9:5c:bd:03:f3:c4:17:e3:9c:21:23:77:
                    c3:ac:34:5e:c1:19:01:6d:7d:8d:1f:d5:3d:cb:2d:
                    ba:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:A2:EF:A6:E9:05:5C:95:1D:78:74:35:76:D6:FB:7D:6D:FF:00:E2
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4d63c04a-33b5-4dd0-8327-f52d2cefdf9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1a4a::/47

    Signature Algorithm: sha256WithRSAEncryption
         c0:f9:21:fd:6e:bf:59:6f:d3:2f:bb:50:09:0e:de:f1:14:5b:
         e2:21:36:7d:42:7b:3d:7e:2a:35:e7:8a:08:46:23:2c:07:be:
         46:67:63:ea:a4:25:04:63:e1:f4:09:78:ca:3f:c2:59:e5:dc:
         2e:89:fc:c9:6e:2b:af:9f:5b:3f:21:e6:d6:c6:15:86:f4:f9:
         45:a9:0e:d9:05:46:c2:ff:ba:ef:93:2f:6e:eb:8c:e2:91:7f:
         9c:78:5a:0d:98:00:62:98:d6:04:75:f0:3b:ce:c5:50:77:17:
         12:48:7c:3d:e4:36:0b:2a:39:6b:c3:b9:26:fb:5f:e8:cc:d6:
         f5:41:1a:4b:f6:61:90:65:e4:26:c2:16:2d:18:f6:90:a4:bd:
         f4:40:73:4e:49:9e:2e:78:77:ee:cd:d8:a5:94:47:d1:b6:f1:
         06:76:73:09:ec:24:b1:de:f9:0c:c7:e8:f1:74:05:db:d2:67:
         3b:fb:64:6e:8a:d8:65:bb:13:8e:92:f6:90:42:bc:95:2b:e4:
         93:8d:d8:da:f1:80:d8:e7:d5:a4:d3:e7:69:c6:bd:ca:a2:89:
         91:e9:16:81:9e:1d:bf:38:87:04:63:41:d4:08:80:3d:8d:38:
         58:46:39:27:b2:b4:f0:5e:6f:03:94:5b:ed:d1:17:de:12:04:
         64:ac:f9:89
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUSg3EaKwdzjngYVyAi9OE75JujuAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMwMjE1NzE5WhcNMjUxMjA0MjM1OTU5
WjB6MUkwRwYDVQQFE0AwYWMyZGU3MzhiNDJkY2E2OGFmMmZlM2Y3ZDUxYzMyNWM5
ZjYzMzRiOWViZWYyZmY2OGFmNmVmYWJlZmNhZTk2MS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCsdPbyesku65DOXxbeWjLGozeNo9WEJ6a3g3Qx3iRgTMf1
dSONJdD/dNcGqjL/x65jq8+uDgNqndNgJNzgJBBXHwq86XhfGe+7y5SsZIj9R0mG
7r4jtJ8dwShVDyDdyv2M4Z8cFCzP3OU8tmsFPW2JeGDMeR6Oz5Nyo/y1BqHwHcld
WRXCK7HbHAwauf3p1lh9LvzpQUpUmDrm80i8FJypn37CEpIk3QfobV3WWiZbPtn6
Qs8NRQwscoZlu4COmcieWS8zkP7RbKpDe16IbVl1pcED/UV7hupVTp/LK+plEw1Q
6PlcvQPzxBfjnCEjd8OsNF7BGQFtfY0f1T3LLbqrAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQU76LvpukFXJUdeHQ1dtb7fW3/AOIwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzRkNjNjMDRhLTMzYjUtNGRkMC04MzI3LWY1MmQyY2VmZGY5YS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwEmAJAAGkowDQYJKoZIhvcNAQELBQADggEBAMD5If1uv1lv0y+7UAkO3vEU
W+IhNn1Cez1+KjXnighGIywHvkZnY+qkJQRj4fQJeMo/wlnl3C6J/MluK6+fWz8h
5tbGFYb0+UWpDtkFRsL/uu+TL27rjOKRf5x4Wg2YAGKY1gR18DvOxVB3FxJIfD3k
NgsqOWvDuSb7X+jM1vVBGkv2YZBl5CbCFi0Y9pCkvfRAc05Jni54d+7N2KWUR9G2
8QZ2cwnsJLHe+QzH6PF0BdvSZzv7ZG6K2GW7E46S9pBCvJUr5JON2NrxgNjn1aTT
52nGvcqiiZHpFoGeHb84hwRjQdQIgD2NOFhGOSeytPBebwOUW+3RF94SBGSs+Yk=
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:28:16 2025 by rpki-client