Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5b74c981-a2ec-4b4e-89b7-a4a745b4f2d1.roa
File:                     5b74c981-a2ec-4b4e-89b7-a4a745b4f2d1.roa (raw, json)
Hash identifier:          wRe0gWzOlHc5aoHMG8v4gbLYKtGc6i+AtbucDueI8Zo=
Subject key identifier:   52:53:4C:54:82:26:4B:17:AB:6F:80:E7:7C:E9:A9:D8:DF:9D:CF:78
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       7F39C10A6C2719B91D423EAE07056107ED652158
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5b74c981-a2ec-4b4e-89b7-a4a745b4f2d1.roa
Signing time:             Fri 31 Oct 2025 00:23:33 +0000
ROA not before:           Fri 31 Oct 2025 00:23:33 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:34da::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:39:c1:0a:6c:27:19:b9:1d:42:3e:ae:07:05:61:07:ed:65:21:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 00:23:33 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=6788a0153ff54e9c21f3d8b170916902d4887c4a6aad0322114227961bc193c3, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:7d:bb:95:ed:7b:33:20:a1:eb:1b:fd:a0:b4:
                    cb:c0:4d:f9:8d:f4:93:fa:bc:0f:48:a4:2d:94:64:
                    0b:a3:15:72:7e:72:78:ed:43:4f:a2:38:e4:7c:8c:
                    2d:ca:4a:db:f8:e6:88:2e:79:0b:80:4e:ca:59:50:
                    bf:45:7a:0e:87:6b:6e:b3:9d:ca:37:1f:81:a5:51:
                    6e:9c:c1:46:40:33:b6:73:aa:7b:9a:3d:85:08:85:
                    b2:af:0f:9a:d7:5a:41:71:00:e6:ff:c5:6e:3d:09:
                    80:0c:89:48:5b:2f:80:c3:76:4c:0f:fd:b3:ff:1c:
                    55:84:63:da:35:5b:37:71:3b:83:0e:60:35:68:87:
                    b9:f8:b2:5c:87:e5:25:43:8e:aa:0d:9c:b8:69:e0:
                    c5:59:c1:8d:00:e8:95:e0:2d:b3:db:41:c6:f0:ad:
                    26:ae:71:54:cc:f5:c0:a2:f9:81:f9:c1:26:82:ae:
                    28:20:5a:f3:04:7e:48:8f:28:0d:90:07:10:96:bb:
                    66:ad:21:41:ee:46:11:e0:c3:e4:33:b7:37:d6:05:
                    90:c7:f4:8a:c3:b8:b0:dd:55:37:b2:5e:27:19:32:
                    ff:7c:92:0e:6f:ff:0a:f1:55:c2:a9:99:8a:46:e4:
                    58:5d:ba:1d:43:4b:81:c9:b7:3c:70:bb:8b:54:9f:
                    40:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:53:4C:54:82:26:4B:17:AB:6F:80:E7:7C:E9:A9:D8:DF:9D:CF:78
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5b74c981-a2ec-4b4e-89b7-a4a745b4f2d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:34da::/47

    Signature Algorithm: sha256WithRSAEncryption
         07:6a:14:01:9e:43:9d:eb:19:f1:ff:93:72:ab:fa:c4:f7:dc:
         b6:fd:bb:6c:f3:06:51:f0:dd:9a:cb:62:f4:d5:bb:9d:c7:c7:
         55:ad:13:0c:d6:25:20:1e:54:47:93:d7:12:c7:f2:b8:c9:ce:
         ec:1e:d5:0b:3f:fe:be:5d:69:0d:9d:c7:ad:f6:b3:ed:e0:82:
         43:21:41:a7:5d:37:95:57:95:3b:e5:43:0b:94:e9:54:07:8b:
         51:65:40:07:40:f4:ad:f4:01:84:33:f5:96:32:40:4f:77:df:
         18:76:51:2f:92:5c:a7:fe:86:e2:ec:cb:9f:ce:02:75:66:62:
         a9:81:db:c4:3b:69:2f:84:79:f0:6d:84:1f:f5:0a:20:04:02:
         b6:29:9a:e0:a3:43:e8:08:7a:a2:bf:13:6f:74:85:27:8a:54:
         15:96:4e:5f:d9:d0:53:e7:49:6e:0c:86:7d:e5:ad:a7:d4:ce:
         5b:3b:f3:fa:df:93:1f:04:64:d3:c8:25:12:3c:6e:4d:5d:49:
         8d:d9:dd:37:98:90:de:f0:e7:59:b8:6a:79:90:51:52:40:cb:
         c9:83:6a:8a:88:84:1e:69:1d:b7:d2:83:23:2d:ac:99:c0:02:
         31:95:2a:73:a4:7c:1a:5a:a7:60:0e:82:c3:bc:2f:27:29:58:
         51:f4:29:5e
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUfznBCmwnGbkdQj6uBwVhB+1lIVgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDAyMzMzWhcNMjUxMjA1MjM1OTU5
WjB6MUkwRwYDVQQFE0A2Nzg4YTAxNTNmZjU0ZTljMjFmM2Q4YjE3MDkxNjkwMmQ0
ODg3YzRhNmFhZDAzMjIxMTQyMjc5NjFiYzE5M2MzMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDJfbuV7XszIKHrG/2gtMvATfmN9JP6vA9IpC2UZAujFXJ+
cnjtQ0+iOOR8jC3KStv45ogueQuATspZUL9Feg6Ha26znco3H4GlUW6cwUZAM7Zz
qnuaPYUIhbKvD5rXWkFxAOb/xW49CYAMiUhbL4DDdkwP/bP/HFWEY9o1WzdxO4MO
YDVoh7n4slyH5SVDjqoNnLhp4MVZwY0A6JXgLbPbQcbwrSaucVTM9cCi+YH5wSaC
riggWvMEfkiPKA2QBxCWu2atIUHuRhHgw+QztzfWBZDH9IrDuLDdVTeyXicZMv98
kg5v/wrxVcKpmYpG5Fhduh1DS4HJtzxwu4tUn0BlAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUUlNMVIImSxerb4DnfOmp2N+dz3gwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzViNzRjOTgxLWEyZWMtNGI0ZS04OWI3LWE0YTc0NWI0ZjJkMS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwEmAJAANNowDQYJKoZIhvcNAQELBQADggEBAAdqFAGeQ53rGfH/k3Kr+sT3
3Lb9u2zzBlHw3ZrLYvTVu53Hx1WtEwzWJSAeVEeT1xLH8rjJzuwe1Qs//r5daQ2d
x632s+3ggkMhQaddN5VXlTvlQwuU6VQHi1FlQAdA9K30AYQz9ZYyQE933xh2US+S
XKf+huLsy5/OAnVmYqmB28Q7aS+EefBthB/1CiAEArYpmuCjQ+gIeqK/E290hSeK
VBWWTl/Z0FPnSW4Mhn3lrafUzls78/rfkx8EZNPIJRI8bk1dSY3Z3TeYkN7w51m4
anmQUVJAy8mDaoqIhB5pHbfSgyMtrJnAAjGVKnOkfBpap2AOgsO8LycpWFH0KV4=
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:42:33 2025 by rpki-client