Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4f6cc3a6-5ce4-47b7-b225-ccb6179bac79.roa
File:                     4f6cc3a6-5ce4-47b7-b225-ccb6179bac79.roa (raw, json)
Hash identifier:          cD86LVclnrK7+S5RaL0zfp49CPt/6urOT+DRhPd+now=
Subject key identifier:   DC:98:BA:DD:02:24:37:E4:AB:CB:C8:60:DF:02:2B:FA:B9:CF:26:C5
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       1AECAB9C77C71B0E93DEB1C1E79A5ECC970DD8AE
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4f6cc3a6-5ce4-47b7-b225-ccb6179bac79.roa
Signing time:             Fri 31 Oct 2025 06:56:35 +0000
ROA not before:           Fri 31 Oct 2025 06:56:35 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3640::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:ec:ab:9c:77:c7:1b:0e:93:de:b1:c1:e7:9a:5e:cc:97:0d:d8:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 06:56:35 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=9584a048f3464415884678110556d16ca79d1c6bce59396942aab82a2686f23b, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:59:97:d7:2d:57:e8:a6:43:bb:6b:d2:b3:97:
                    02:a4:0d:22:41:f8:d0:f9:4c:e7:c1:15:4e:e5:8b:
                    34:a7:ad:d0:1e:91:02:63:8e:25:87:da:5b:39:ca:
                    fe:a1:bb:1f:54:77:50:05:b3:60:e2:06:9e:75:bb:
                    0c:44:4b:89:1b:8c:6d:1b:1d:37:be:9a:ed:8b:14:
                    c3:77:3c:6a:1a:86:bb:4a:36:28:c1:50:c7:7d:40:
                    f5:9e:93:77:c5:e5:47:49:71:9e:e9:67:da:eb:02:
                    4c:b7:83:40:a4:63:6d:16:07:46:1a:c4:c0:6d:80:
                    3c:0a:66:f5:9f:9a:5b:4a:0f:4f:8f:fa:0e:f0:d6:
                    eb:2a:d8:8d:69:41:6f:4d:ae:11:4b:3a:db:e3:30:
                    d1:9a:80:cf:2d:6e:02:51:20:4b:b9:bf:28:ff:63:
                    71:e8:77:3e:f0:f0:18:b5:ef:f0:45:d9:ca:77:af:
                    75:94:f6:81:cd:b9:37:70:79:d8:bc:6f:a1:db:20:
                    49:b2:7a:6a:9a:30:12:11:c3:0a:b8:a5:78:02:88:
                    6a:57:7f:90:72:e7:4b:1e:a5:df:71:d2:59:59:a4:
                    a2:b8:68:07:d3:74:95:e5:37:23:e6:7b:d0:d8:fb:
                    1c:9f:45:d7:0b:ec:75:16:db:28:95:38:00:b9:2c:
                    62:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:98:BA:DD:02:24:37:E4:AB:CB:C8:60:DF:02:2B:FA:B9:CF:26:C5
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4f6cc3a6-5ce4-47b7-b225-ccb6179bac79.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3640::/44

    Signature Algorithm: sha256WithRSAEncryption
         8e:5a:c0:9c:11:67:30:48:43:f1:61:0a:75:97:fd:12:11:0e:
         76:ab:dc:75:dc:3e:e6:6f:8c:79:39:dc:d4:ae:a5:c4:69:84:
         02:9a:a8:e8:6a:7a:f0:66:4d:bd:b2:ae:3e:ca:ff:6d:cd:ae:
         ad:92:4b:f1:0e:92:45:fb:7b:d0:fa:6f:72:4f:9f:0a:2f:0c:
         8a:ff:54:3f:8a:49:13:a2:88:5d:b6:0a:0f:a2:08:e2:87:20:
         12:1c:da:c0:78:76:8a:72:9e:ac:e1:29:93:12:44:bd:23:1b:
         28:b7:34:f8:5e:86:39:1e:5f:e0:af:c2:b3:4b:e1:6a:ed:42:
         ab:46:29:99:b8:39:7d:30:39:54:7b:cb:af:8c:b5:83:40:46:
         30:93:44:e0:ed:38:06:3a:55:89:34:77:b6:f7:f3:23:28:40:
         2c:39:1f:a0:6c:38:ec:0f:5f:bf:58:45:37:8e:63:8d:47:c7:
         bd:10:b9:87:52:9b:fb:67:6a:2f:10:d4:9c:dd:34:8b:bf:99:
         03:29:79:70:0c:0c:de:d1:61:b2:e5:a7:96:9a:c7:da:b5:cb:
         d0:df:1f:91:66:13:c6:f2:b3:46:ca:a3:e1:11:da:6a:4d:cb:
         bd:3b:05:f1:cb:40:ca:36:ee:1f:7e:c6:0d:9a:11:a7:dc:b5:
         2e:97:d9:44
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUGuyrnHfHGw6T3rHB55pezJcN2K4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDY1NjM1WhcNMjUxMjA1MjM1OTU5
WjB6MUkwRwYDVQQFE0A5NTg0YTA0OGYzNDY0NDE1ODg0Njc4MTEwNTU2ZDE2Y2E3
OWQxYzZiY2U1OTM5Njk0MmFhYjgyYTI2ODZmMjNiMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDoWZfXLVfopkO7a9KzlwKkDSJB+ND5TOfBFU7lizSnrdAe
kQJjjiWH2ls5yv6hux9Ud1AFs2DiBp51uwxES4kbjG0bHTe+mu2LFMN3PGoahrtK
NijBUMd9QPWek3fF5UdJcZ7pZ9rrAky3g0CkY20WB0YaxMBtgDwKZvWfmltKD0+P
+g7w1usq2I1pQW9NrhFLOtvjMNGagM8tbgJRIEu5vyj/Y3Hodz7w8Bi17/BF2cp3
r3WU9oHNuTdwedi8b6HbIEmyemqaMBIRwwq4pXgCiGpXf5By50sepd9x0llZpKK4
aAfTdJXlNyPme9DY+xyfRdcL7HUW2yiVOAC5LGLxAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQU3Ji63QIkN+Sry8hg3wIr+rnPJsUwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzRmNmNjM2E2LTVjZTQtNDdiNy1iMjI1LWNjYjYxNzliYWM3OS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwQmAJAANkAwDQYJKoZIhvcNAQELBQADggEBAI5awJwRZzBIQ/FhCnWX/RIR
Dnar3HXcPuZvjHk53NSupcRphAKaqOhqevBmTb2yrj7K/23Nrq2SS/EOkkX7e9D6
b3JPnwovDIr/VD+KSROiiF22Cg+iCOKHIBIc2sB4dopynqzhKZMSRL0jGyi3NPhe
hjkeX+CvwrNL4WrtQqtGKZm4OX0wOVR7y6+MtYNARjCTRODtOAY6VYk0d7b38yMo
QCw5H6BsOOwPX79YRTeOY41Hx70QuYdSm/tnai8Q1JzdNIu/mQMpeXAMDN7RYbLl
p5aax9q1y9DfH5FmE8bys0bKo+ER2mpNy707BfHLQMo27h9+xg2aEafctS6X2UQ=
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:35:01 2025 by rpki-client