Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4e8f43e4-79e6-4ff8-b332-2ee491965227.roa
File:                     4e8f43e4-79e6-4ff8-b332-2ee491965227.roa (raw, json)
Hash identifier:          U/Coo6EnxXVIOiMMbWGz9YTLWY6PSdrA+ZjfzPE/xfA=
Subject key identifier:   27:4B:F9:22:AE:C6:4F:8A:99:6A:D7:86:5B:86:7C:6C:22:6C:B7:C6
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       7F210A71202E88835D847F878E0B0D2C41888D0B
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4e8f43e4-79e6-4ff8-b332-2ee491965227.roa
Signing time:             Fri 31 Oct 2025 04:58:38 +0000
ROA not before:           Fri 31 Oct 2025 04:58:38 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3fb8::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:21:0a:71:20:2e:88:83:5d:84:7f:87:8e:0b:0d:2c:41:88:8d:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 04:58:38 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=1684efae0eb8af59cd8533d59cc8e0e664338001ef62f36c9df5c33fc7a67cb7, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:88:62:28:61:a2:78:b6:c8:eb:fb:5c:f6:62:
                    db:16:fd:c3:49:28:74:67:f1:84:71:cb:2a:42:76:
                    cd:6e:bf:34:b6:9c:c8:65:3a:d8:1b:55:c9:8e:65:
                    3e:40:8a:bd:63:75:25:d6:b2:d7:4a:e3:30:7a:ce:
                    0d:3c:e5:82:5b:ce:83:e9:c4:00:b4:e6:e5:70:84:
                    49:02:ec:2c:7b:1f:c2:9a:47:90:6b:7e:a9:ab:61:
                    6a:f4:36:17:5c:45:92:de:9a:fe:d6:e8:ae:a1:72:
                    61:84:cb:88:64:7e:21:f3:ac:00:a2:62:5a:33:08:
                    87:de:d5:db:75:e2:37:ed:a1:52:35:67:4c:4c:71:
                    da:a4:46:50:b1:89:58:a0:f6:90:73:0b:4f:d2:bb:
                    f3:0f:15:0e:c7:fd:47:c3:60:2d:33:5c:a6:20:c0:
                    c0:33:90:74:21:6b:38:1b:8d:fd:03:96:8f:a7:78:
                    95:d8:ef:b4:8f:e4:66:64:ed:11:a7:44:76:d8:45:
                    cd:83:c7:a5:af:66:3b:01:62:71:08:77:ab:d3:fe:
                    37:be:6e:bc:c6:eb:82:20:91:d5:ce:a9:ec:e0:90:
                    2e:96:a4:ff:c9:ae:18:50:41:82:b7:9e:30:62:eb:
                    61:04:a7:52:69:4e:1b:fa:43:ca:62:48:c4:ad:8b:
                    27:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:4B:F9:22:AE:C6:4F:8A:99:6A:D7:86:5B:86:7C:6C:22:6C:B7:C6
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4e8f43e4-79e6-4ff8-b332-2ee491965227.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3fb8::/46

    Signature Algorithm: sha256WithRSAEncryption
         69:77:5f:d4:d9:0d:bc:fd:c6:0f:ac:46:fd:4e:ca:3e:3c:25:
         fa:0b:15:cf:65:7b:98:a6:80:71:c2:02:f8:65:70:7e:a8:05:
         28:a7:fe:48:50:ab:42:75:c5:01:f0:21:8b:42:77:a7:29:d0:
         9a:e3:bb:1f:e0:37:02:64:7d:c0:e6:61:4a:48:3c:0e:0b:93:
         e9:50:d9:b5:a2:69:2a:2c:a7:ba:ba:e3:fe:37:80:9a:41:e0:
         46:30:52:e3:cb:eb:24:1a:de:de:65:da:f3:47:03:3c:87:b4:
         ec:89:6e:52:35:b9:53:26:5b:2d:cc:97:30:a0:5f:89:5c:da:
         7f:d2:c9:24:72:74:f8:c8:cb:d9:01:7a:2c:ce:8d:41:bb:fb:
         df:90:ee:e3:a5:56:31:60:cf:c8:6a:74:02:b7:cd:91:b7:a5:
         70:ee:16:1e:8b:85:5b:a2:ac:e2:e8:6f:77:07:56:3f:35:f4:
         f5:fc:5e:2c:37:d8:f6:49:61:40:d6:1c:05:1c:06:df:d0:81:
         66:dc:8d:38:e4:a8:03:a6:47:4a:e6:74:3b:c1:cd:26:08:aa:
         7d:14:b3:03:55:b8:eb:ba:a0:5b:5c:4b:9d:ec:e7:17:3d:29:
         fa:4f:a5:0c:e5:e1:1f:b9:c3:ab:01:47:a4:7f:ac:ad:ee:9f:
         f9:df:4a:7d
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUfyEKcSAuiINdhH+HjgsNLEGIjQswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDQ1ODM4WhcNMjUxMjA1MjM1OTU5
WjB6MUkwRwYDVQQFE0AxNjg0ZWZhZTBlYjhhZjU5Y2Q4NTMzZDU5Y2M4ZTBlNjY0
MzM4MDAxZWY2MmYzNmM5ZGY1YzMzZmM3YTY3Y2I3MS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCliGIoYaJ4tsjr+1z2YtsW/cNJKHRn8YRxyypCds1uvzS2
nMhlOtgbVcmOZT5Air1jdSXWstdK4zB6zg085YJbzoPpxAC05uVwhEkC7Cx7H8Ka
R5BrfqmrYWr0NhdcRZLemv7W6K6hcmGEy4hkfiHzrACiYlozCIfe1dt14jftoVI1
Z0xMcdqkRlCxiVig9pBzC0/Su/MPFQ7H/UfDYC0zXKYgwMAzkHQhazgbjf0Dlo+n
eJXY77SP5GZk7RGnRHbYRc2Dx6WvZjsBYnEId6vT/je+brzG64IgkdXOqezgkC6W
pP/JrhhQQYK3njBi62EEp1JpThv6Q8piSMStiyepAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUJ0v5Iq7GT4qZateGW4Z8bCJst8YwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzRlOGY0M2U0LTc5ZTYtNGZmOC1iMzMyLTJlZTQ5MTk2NTIyNy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwImAJAAP7gwDQYJKoZIhvcNAQELBQADggEBAGl3X9TZDbz9xg+sRv1Oyj48
JfoLFc9le5imgHHCAvhlcH6oBSin/khQq0J1xQHwIYtCd6cp0Jrjux/gNwJkfcDm
YUpIPA4Lk+lQ2bWiaSosp7q64/43gJpB4EYwUuPL6yQa3t5l2vNHAzyHtOyJblI1
uVMmWy3MlzCgX4lc2n/SySRydPjIy9kBeizOjUG7+9+Q7uOlVjFgz8hqdAK3zZG3
pXDuFh6LhVuirOLob3cHVj819PX8Xiw32PZJYUDWHAUcBt/QgWbcjTjkqAOmR0rm
dDvBzSYIqn0UswNVuOu6oFtcS53s5xc9KfpPpQzl4R+5w6sBR6R/rK3un/nfSn0=
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:27:50 2025 by rpki-client