Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5ddf5858-82b2-4de4-a06c-d7abf15f1786.roa
File:                     5ddf5858-82b2-4de4-a06c-d7abf15f1786.roa (raw, json)
Hash identifier:          fMj5IbvwKCPAdw9TYIYR7QZdYJxS4eqymjcNK6J+XuI=
Subject key identifier:   9D:D2:D4:81:58:70:E6:F0:ED:17:1D:74:50:DB:E9:0A:4E:87:3F:AF
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       6E3AB9A104A47F34987F5DCC44A6BBA780CA99FC
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5ddf5858-82b2-4de4-a06c-d7abf15f1786.roa
Signing time:             Thu 30 Oct 2025 22:25:21 +0000
ROA not before:           Thu 30 Oct 2025 22:25:21 +0000
ROA not after:            Thu 04 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1ce2::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:3a:b9:a1:04:a4:7f:34:98:7f:5d:cc:44:a6:bb:a7:80:ca:99:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 30 22:25:21 2025 GMT
            Not After : Dec  4 23:59:59 2025 GMT
        Subject: serialNumber=1e13629a5dbebd49be21d92d63ac4b683fa0a071396789435df93f472aa92c4a, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ba:cb:b5:cb:21:e0:bc:48:5f:dd:03:4b:c8:
                    33:bf:37:69:9f:41:c5:bc:07:51:1f:78:ed:f8:bc:
                    e7:c5:14:a2:73:00:91:50:45:f3:d6:41:4d:a0:84:
                    c7:28:19:8a:93:64:78:50:eb:79:02:3c:3a:22:e0:
                    ff:7a:cb:e3:6f:d7:6a:d3:8e:b1:70:cf:97:9e:0f:
                    a1:fb:21:af:ff:67:00:0a:84:11:9b:14:55:b8:2c:
                    69:f7:99:0e:56:8a:ef:10:df:54:36:f2:96:ad:6c:
                    83:07:e4:b7:a3:db:6c:a8:2b:56:03:57:6f:b7:e4:
                    13:25:9e:59:04:e1:c2:81:1c:39:a2:46:19:1e:34:
                    59:f0:4f:ef:b4:f3:6c:c9:1f:af:d9:ff:1e:d8:2e:
                    39:2e:32:19:dc:e3:4f:79:c1:f3:5c:e8:d7:a7:de:
                    5d:fc:84:a3:32:b9:f2:d7:5b:50:70:63:7a:28:69:
                    b0:40:50:e1:ca:93:33:ff:d6:1a:7d:ee:fc:7f:1f:
                    07:d8:88:64:a2:5e:fc:42:c3:c8:31:94:76:4f:3a:
                    db:ca:0c:e7:d9:34:ef:98:27:a6:00:00:db:4f:54:
                    21:c5:69:3d:0d:57:a1:6d:a3:40:b2:fb:10:14:c7:
                    8a:2c:78:58:88:cc:1b:d1:a5:91:ea:c9:e7:8a:e0:
                    6d:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:D2:D4:81:58:70:E6:F0:ED:17:1D:74:50:DB:E9:0A:4E:87:3F:AF
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5ddf5858-82b2-4de4-a06c-d7abf15f1786.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1ce2::/47

    Signature Algorithm: sha256WithRSAEncryption
         80:53:3b:4f:a1:d9:fa:9e:99:eb:d7:c2:7b:16:47:0f:d0:cb:
         74:61:22:6a:58:cd:ca:fa:f4:23:90:4c:8c:76:1d:15:8a:4f:
         77:3b:cf:80:5c:fa:01:ba:b3:93:6f:35:6c:f3:6b:1c:35:34:
         a6:00:b1:e7:18:ec:4b:10:72:d4:83:26:bc:a9:6b:59:fc:ea:
         df:3e:ee:b1:bd:36:71:c5:73:2c:5b:92:dd:11:70:56:24:29:
         cd:7a:1c:60:ad:66:fa:b7:53:1b:37:04:c0:a1:42:f0:33:48:
         3d:1b:a4:99:fe:17:ce:59:90:73:ab:9f:12:ed:40:85:ef:a2:
         f9:d9:bc:2d:85:74:91:09:8e:c3:71:f4:a2:b1:3c:07:50:fa:
         6a:c3:3e:85:ed:87:d8:69:5b:e3:2d:16:f2:74:bf:40:cc:d6:
         6a:27:95:b1:b4:ee:03:93:31:66:f8:f0:00:85:9e:c4:ca:c8:
         3d:ca:2c:83:64:c4:5e:00:98:04:3f:0e:84:11:77:1b:0e:87:
         4d:eb:0c:98:19:8a:1b:26:ec:81:d8:e3:fa:ed:bb:5c:46:ba:
         04:bd:b6:86:d2:2f:8f:a9:8d:3f:87:7c:a7:2a:65:eb:09:0b:
         f4:fb:71:b9:b6:40:16:be:a4:d9:21:7d:4e:f7:e5:f2:fa:df:
         cb:8f:ca:fa
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUbjq5oQSkfzSYf13MRKa7p4DKmfwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMwMjIyNTIxWhcNMjUxMjA0MjM1OTU5
WjB6MUkwRwYDVQQFE0AxZTEzNjI5YTVkYmViZDQ5YmUyMWQ5MmQ2M2FjNGI2ODNm
YTBhMDcxMzk2Nzg5NDM1ZGY5M2Y0NzJhYTkyYzRhMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCousu1yyHgvEhf3QNLyDO/N2mfQcW8B1EfeO34vOfFFKJz
AJFQRfPWQU2ghMcoGYqTZHhQ63kCPDoi4P96y+Nv12rTjrFwz5eeD6H7Ia//ZwAK
hBGbFFW4LGn3mQ5Wiu8Q31Q28patbIMH5Lej22yoK1YDV2+35BMlnlkE4cKBHDmi
RhkeNFnwT++082zJH6/Z/x7YLjkuMhnc4095wfNc6Nen3l38hKMyufLXW1BwY3oo
abBAUOHKkzP/1hp97vx/HwfYiGSiXvxCw8gxlHZPOtvKDOfZNO+YJ6YAANtPVCHF
aT0NV6Fto0Cy+xAUx4oseFiIzBvRpZHqyeeK4G1lAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUndLUgVhw5vDtFx10UNvpCk6HP68wHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzVkZGY1ODU4LTgyYjItNGRlNC1hMDZjLWQ3YWJmMTVmMTc4Ni5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwEmAJAAHOIwDQYJKoZIhvcNAQELBQADggEBAIBTO0+h2fqemevXwnsWRw/Q
y3RhImpYzcr69COQTIx2HRWKT3c7z4Bc+gG6s5NvNWzzaxw1NKYAsecY7EsQctSD
Jrypa1n86t8+7rG9NnHFcyxbkt0RcFYkKc16HGCtZvq3Uxs3BMChQvAzSD0bpJn+
F85ZkHOrnxLtQIXvovnZvC2FdJEJjsNx9KKxPAdQ+mrDPoXth9hpW+MtFvJ0v0DM
1monlbG07gOTMWb48ACFnsTKyD3KLINkxF4AmAQ/DoQRdxsOh03rDJgZihsm7IHY
4/rtu1xGugS9tobSL4+pjT+HfKcqZesJC/T7cbm2QBa+pNkhfU735fL638uPyvo=
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:34:16 2025 by rpki-client