Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6c4d8080-1626-47b4-b631-4521a1f69d06.roa
File:                     6c4d8080-1626-47b4-b631-4521a1f69d06.roa (raw, json)
Hash identifier:          KGbdBMHfPtmJkdkW7YDpLFnUruxDd/U60TJacRDtdzA=
Subject key identifier:   E3:24:1B:C6:C8:FE:4D:4B:51:03:47:64:FE:30:B2:F5:79:92:42:27
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       4F14BD51ACF5C3A4EE8CC1FB75646C2FFD65D5F6
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6c4d8080-1626-47b4-b631-4521a1f69d06.roa
Signing time:             Fri 31 Oct 2025 01:58:05 +0000
ROA not before:           Fri 31 Oct 2025 01:58:05 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3f1c::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Nov 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:14:bd:51:ac:f5:c3:a4:ee:8c:c1:fb:75:64:6c:2f:fd:65:d5:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 01:58:05 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=4b34fd6029ebe49e84b8cd0e425f1e5749d09b449f064f0f89a585f400d2fbfd, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:5f:ff:83:05:e0:02:fa:4c:c1:64:d5:3c:6d:
                    77:c6:92:2f:d2:74:75:9f:11:2e:86:dc:eb:9b:54:
                    8d:32:eb:b7:53:67:ea:68:d6:a1:65:29:4c:c3:03:
                    1c:03:8b:9b:0c:63:b8:e9:eb:29:4f:ca:85:1a:c4:
                    8a:f0:b0:6e:1e:db:4f:6d:7c:bd:b9:33:91:23:6f:
                    ee:84:5e:1b:96:8f:d3:ad:9b:e7:77:8a:b5:20:83:
                    52:0a:86:c5:3d:f3:da:5a:98:a2:98:d7:0e:34:d9:
                    69:c5:a4:4b:47:d7:69:f0:0b:27:27:9c:f5:de:f7:
                    b0:3f:80:02:be:31:ae:8c:f4:9d:32:e0:03:e9:85:
                    59:d0:8b:b2:2b:b1:49:82:b5:1d:d1:a5:3a:06:be:
                    38:55:15:00:5a:c7:8e:65:cd:4b:0e:2e:19:fc:da:
                    44:19:b7:10:8f:7b:d4:a4:b0:21:aa:25:7b:73:15:
                    de:b9:51:6f:cb:2e:b6:6f:fe:3b:da:59:27:54:6e:
                    a5:f8:3d:4a:01:a3:50:f1:4f:e7:9a:24:9a:4d:5b:
                    6c:65:90:12:fa:a9:14:56:5f:4a:08:96:cb:8d:25:
                    10:c6:d7:2a:ac:ca:b4:ca:c8:c0:fc:67:f9:38:b7:
                    34:09:55:bd:84:07:0a:d2:ac:6d:f8:5c:b5:dc:1e:
                    35:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:24:1B:C6:C8:FE:4D:4B:51:03:47:64:FE:30:B2:F5:79:92:42:27
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6c4d8080-1626-47b4-b631-4521a1f69d06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3f1c::/47

    Signature Algorithm: sha256WithRSAEncryption
         42:fb:ca:55:4f:64:af:12:dd:aa:52:49:d8:ad:93:08:62:1f:
         ef:66:ac:df:4a:14:9c:d7:7f:08:c0:9d:00:d3:60:38:cb:e1:
         5a:fa:6f:83:f5:f6:be:ea:6f:dd:12:0f:78:1a:05:18:eb:b4:
         d2:77:f2:7c:20:7a:72:ca:ea:60:4d:52:98:12:35:bb:88:bc:
         14:d7:5e:ec:81:cb:e2:64:09:47:31:8c:55:84:7e:af:dd:95:
         e0:ea:65:e9:7c:06:e0:74:af:91:e9:dd:1b:0d:53:21:b9:60:
         98:2b:cd:51:4d:41:31:ae:bf:b1:93:67:d9:56:27:90:e9:7b:
         81:ed:35:80:98:27:18:ce:ab:5b:fb:1d:55:37:63:1f:fc:71:
         50:1f:be:0e:dc:f5:b6:26:45:9e:a7:33:b4:b9:d1:18:c3:77:
         80:f7:21:80:f9:b2:d3:d8:45:de:d1:3d:c8:eb:73:4c:37:fc:
         c0:e4:05:d5:01:88:4c:2b:49:e6:98:af:da:cb:73:f4:f3:fd:
         88:cf:56:e7:62:97:3d:42:f3:95:bd:90:07:9a:a9:09:62:10:
         74:96:4e:8d:5b:c4:e7:94:77:2f:af:71:d0:d1:48:2a:b7:fa:
         e8:8d:b4:da:52:cd:07:7e:04:9e:76:68:d2:41:ee:6f:de:09:
         59:79:64:02
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUTxS9Uaz1w6TujMH7dWRsL/1l1fYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDE1ODA1WhcNMjUxMjA1MjM1OTU5
WjB6MUkwRwYDVQQFE0A0YjM0ZmQ2MDI5ZWJlNDllODRiOGNkMGU0MjVmMWU1NzQ5
ZDA5YjQ0OWYwNjRmMGY4OWE1ODVmNDAwZDJmYmZkMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDIX/+DBeAC+kzBZNU8bXfGki/SdHWfES6G3OubVI0y67dT
Z+po1qFlKUzDAxwDi5sMY7jp6ylPyoUaxIrwsG4e209tfL25M5Ejb+6EXhuWj9Ot
m+d3irUgg1IKhsU989pamKKY1w402WnFpEtH12nwCycnnPXe97A/gAK+Ma6M9J0y
4APphVnQi7IrsUmCtR3RpToGvjhVFQBax45lzUsOLhn82kQZtxCPe9SksCGqJXtz
Fd65UW/LLrZv/jvaWSdUbqX4PUoBo1DxT+eaJJpNW2xlkBL6qRRWX0oIlsuNJRDG
1yqsyrTKyMD8Z/k4tzQJVb2EBwrSrG34XLXcHjXlAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQU4yQbxsj+TUtRA0dk/jCy9XmSQicwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzZjNGQ4MDgwLTE2MjYtNDdiNC1iNjMxLTQ1MjFhMWY2OWQwNi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwEmAJAAPxwwDQYJKoZIhvcNAQELBQADggEBAEL7ylVPZK8S3apSSditkwhi
H+9mrN9KFJzXfwjAnQDTYDjL4Vr6b4P19r7qb90SD3gaBRjrtNJ38nwgenLK6mBN
UpgSNbuIvBTXXuyBy+JkCUcxjFWEfq/dleDqZel8BuB0r5Hp3RsNUyG5YJgrzVFN
QTGuv7GTZ9lWJ5Dpe4HtNYCYJxjOq1v7HVU3Yx/8cVAfvg7c9bYmRZ6nM7S50RjD
d4D3IYD5stPYRd7RPcjrc0w3/MDkBdUBiEwrSeaYr9rLc/Tz/YjPVudilz1C85W9
kAeaqQliEHSWTo1bxOeUdy+vcdDRSCq3+uiNtNpSzQd+BJ52aNJB7m/eCVl5ZAI=
-----END CERTIFICATE-----
Generated at Wed Nov 5 16:56:55 2025 by rpki-client