Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/59117553-3a7e-4edb-aa2a-c592b206364d.roa
File:                     59117553-3a7e-4edb-aa2a-c592b206364d.roa (raw, json)
Hash identifier:          jUyUD9HhSO+SuLjZ9BqGN9S9U0eQo1r+l4EsscqpdmM=
Subject key identifier:   7A:40:7C:E0:5B:32:AC:6D:E2:E5:3C:51:18:8A:04:29:8F:AC:CF:4B
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       521A85E2FC461D4E5B98479F52C922612941D07C
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/59117553-3a7e-4edb-aa2a-c592b206364d.roa
Signing time:             Thu 30 Oct 2025 22:12:16 +0000
ROA not before:           Thu 30 Oct 2025 22:12:16 +0000
ROA not after:            Thu 04 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1bda::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:1a:85:e2:fc:46:1d:4e:5b:98:47:9f:52:c9:22:61:29:41:d0:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 30 22:12:16 2025 GMT
            Not After : Dec  4 23:59:59 2025 GMT
        Subject: serialNumber=1467d6dde32ebc6c42c1dd02dcf4deb9dd6d16d357f6ce44c81bee0ee57faf83, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:eb:8b:48:09:07:9f:57:b0:f0:4f:d3:72:18:
                    35:40:3e:ac:d3:f3:bc:86:b9:18:7b:58:d6:2a:f3:
                    a9:08:cb:ef:f2:0f:59:85:32:1a:af:d7:3a:9c:56:
                    5b:f5:18:48:05:19:ca:b1:a0:63:ba:bf:f1:88:84:
                    d5:a0:c6:5e:ff:2d:37:e8:8b:66:60:b5:e0:17:8f:
                    f7:44:a9:d3:b6:ac:be:6a:57:cb:00:2b:85:5b:5c:
                    af:ed:48:d8:82:ac:68:eb:e7:9e:bb:69:2f:1f:a2:
                    c2:1d:58:3f:57:fc:73:20:25:1a:22:e7:f6:ce:65:
                    26:75:84:2c:33:0e:fe:d9:63:e2:e8:29:49:f1:e1:
                    60:94:2b:50:fd:e8:6b:1a:f8:1e:ea:c2:7e:3d:b7:
                    0c:85:a6:25:46:3c:d9:f1:fd:3c:31:35:4e:e3:14:
                    74:a8:45:6f:7f:c2:3a:c5:54:8b:8b:e2:0a:83:47:
                    9b:c5:e1:11:d8:bd:72:b2:7f:d2:d4:44:29:50:44:
                    71:9f:f8:36:72:d0:21:36:e9:f9:7d:2a:f7:fc:13:
                    40:d8:f1:6c:33:72:1b:2b:c6:f9:35:82:aa:4a:96:
                    2d:c5:07:ff:14:f2:44:cd:81:e8:f5:42:83:3b:25:
                    ba:ea:34:65:3f:65:88:bd:85:a0:41:8e:b3:7e:3f:
                    1f:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:40:7C:E0:5B:32:AC:6D:E2:E5:3C:51:18:8A:04:29:8F:AC:CF:4B
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/59117553-3a7e-4edb-aa2a-c592b206364d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1bda::/47

    Signature Algorithm: sha256WithRSAEncryption
         7f:74:4f:c0:46:83:0f:57:28:08:3e:8e:69:cd:71:c1:0a:9b:
         b7:5d:fc:86:30:1b:63:80:a8:6a:49:14:6d:5b:b7:e3:6b:24:
         62:f6:04:4d:ec:17:1c:f9:a9:8e:5d:d4:8b:08:3c:63:bf:ff:
         49:fd:72:de:ac:60:4a:b9:e2:bd:28:97:1c:a5:34:a2:f7:6b:
         3b:7c:20:ac:59:e0:ce:89:d2:14:a8:c5:2e:b6:b6:93:c6:92:
         9d:35:44:a5:59:f9:0a:0b:bc:eb:f9:e5:85:99:81:cd:ae:0a:
         9b:ff:55:a7:47:c6:31:84:a9:1e:19:8d:e8:f7:7a:08:87:a5:
         7b:7a:cc:ff:dd:6b:53:46:b0:15:a9:4c:6d:09:68:ae:98:3f:
         de:e9:6d:1c:46:25:83:a9:49:af:e5:54:54:32:82:fb:80:55:
         03:27:c8:d1:6a:cc:ba:15:33:86:11:6a:75:63:fd:97:e0:d5:
         a2:a0:b8:e7:a8:57:06:a3:3b:d5:43:10:67:88:ea:20:97:82:
         06:3a:ba:98:ae:5a:26:b8:0e:a8:82:7c:19:5e:2e:e2:02:12:
         d0:70:7d:d1:de:58:2f:33:36:92:e0:9d:21:8b:ab:88:6f:09:
         07:56:4a:16:21:ac:53:f2:a8:53:77:d1:ae:65:05:57:2d:1e:
         62:bd:dd:84
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUUhqF4vxGHU5bmEefUskiYSlB0HwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMwMjIxMjE2WhcNMjUxMjA0MjM1OTU5
WjB6MUkwRwYDVQQFE0AxNDY3ZDZkZGUzMmViYzZjNDJjMWRkMDJkY2Y0ZGViOWRk
NmQxNmQzNTdmNmNlNDRjODFiZWUwZWU1N2ZhZjgzMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDi64tICQefV7DwT9NyGDVAPqzT87yGuRh7WNYq86kIy+/y
D1mFMhqv1zqcVlv1GEgFGcqxoGO6v/GIhNWgxl7/LTfoi2ZgteAXj/dEqdO2rL5q
V8sAK4VbXK/tSNiCrGjr5567aS8fosIdWD9X/HMgJRoi5/bOZSZ1hCwzDv7ZY+Lo
KUnx4WCUK1D96Gsa+B7qwn49twyFpiVGPNnx/TwxNU7jFHSoRW9/wjrFVIuL4gqD
R5vF4RHYvXKyf9LURClQRHGf+DZy0CE26fl9Kvf8E0DY8Wwzchsrxvk1gqpKli3F
B/8U8kTNgej1QoM7JbrqNGU/ZYi9haBBjrN+Px8zAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUekB84FsyrG3i5TxRGIoEKY+sz0swHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzU5MTE3NTUzLTNhN2UtNGVkYi1hYTJhLWM1OTJiMjA2MzY0ZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwEmAJAAG9owDQYJKoZIhvcNAQELBQADggEBAH90T8BGgw9XKAg+jmnNccEK
m7dd/IYwG2OAqGpJFG1bt+NrJGL2BE3sFxz5qY5d1IsIPGO//0n9ct6sYEq54r0o
lxylNKL3azt8IKxZ4M6J0hSoxS62tpPGkp01RKVZ+QoLvOv55YWZgc2uCpv/VadH
xjGEqR4Zjej3egiHpXt6zP/da1NGsBWpTG0JaK6YP97pbRxGJYOpSa/lVFQygvuA
VQMnyNFqzLoVM4YRanVj/Zfg1aKguOeoVwajO9VDEGeI6iCXggY6upiuWia4DqiC
fBleLuICEtBwfdHeWC8zNpLgnSGLq4hvCQdWShYhrFPyqFN30a5lBVctHmK93YQ=
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:32:39 2025 by rpki-client