Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6e4a1cbc-660e-4368-a37f-f85712c4e3ea.roa
File:                     6e4a1cbc-660e-4368-a37f-f85712c4e3ea.roa (raw, json)
Hash identifier:          jH6PQ9GUYVW1qpJFpLqWD75vOJOqDCCF/0V6LM9F858=
Subject key identifier:   44:55:E3:00:80:8B:2A:C6:26:E6:8B:7A:FF:FB:2D:4E:B2:DB:C0:B5
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       0D313584A159ADDEE98994A7C6847066A2BFAE86
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6e4a1cbc-660e-4368-a37f-f85712c4e3ea.roa
Signing time:             Fri 31 Oct 2025 05:21:58 +0000
ROA not before:           Fri 31 Oct 2025 05:21:58 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:18d0::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:31:35:84:a1:59:ad:de:e9:89:94:a7:c6:84:70:66:a2:bf:ae:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 05:21:58 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=c9e4bfd835d9eff0308c8468d1e169d981dca6da6d8a4fb0af6c87d5c65a6216, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b4:27:52:0b:8a:6e:5f:47:c0:fe:dc:7b:ed:
                    64:6d:af:21:59:fc:43:12:11:ef:cf:05:bb:14:21:
                    a1:24:0c:82:25:f5:b8:46:ee:35:41:0a:88:c5:64:
                    7a:3f:c4:43:0a:43:02:77:06:49:9e:a4:df:c1:b8:
                    bb:e6:fb:e1:f8:0f:e4:8f:ee:5f:1d:aa:e9:5b:ee:
                    c3:f1:00:75:70:03:d3:1c:ed:d5:f0:59:1f:35:eb:
                    7d:8d:1d:cf:d3:c6:01:16:96:91:f9:a8:3e:a3:db:
                    f5:44:b4:66:d0:81:9d:82:59:db:99:e4:24:c4:8b:
                    f7:8c:42:b4:63:ed:0b:d6:6a:69:ba:97:0c:1f:27:
                    62:24:90:b2:07:79:23:09:64:35:1d:26:7d:2c:b1:
                    e8:0e:24:5e:61:78:ae:b6:fa:b5:e6:c0:5d:02:a1:
                    ef:f8:3e:f0:ca:c1:7f:e4:b0:be:ea:16:b5:6f:c9:
                    24:e8:3d:04:02:8a:4e:c1:5e:33:e2:23:5c:6e:47:
                    fa:e7:be:bb:8f:69:ca:51:12:32:d3:8a:99:b2:79:
                    46:4f:68:7d:ad:8c:9d:34:45:73:d3:5e:b3:0b:bb:
                    5b:be:6f:cc:5a:0b:7b:d9:a5:76:5c:1c:64:0c:c4:
                    0b:5b:67:67:a4:d5:12:57:30:0e:6a:63:64:5c:ba:
                    ce:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:55:E3:00:80:8B:2A:C6:26:E6:8B:7A:FF:FB:2D:4E:B2:DB:C0:B5
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6e4a1cbc-660e-4368-a37f-f85712c4e3ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:18d0::/45

    Signature Algorithm: sha256WithRSAEncryption
         76:fd:d7:8c:57:55:33:18:f7:9d:e6:b9:a7:62:f2:28:bf:f7:
         21:9c:f8:4a:12:a2:d3:1c:ba:d3:a1:a9:51:97:b1:9c:fe:5f:
         57:9e:2c:61:a6:dd:e4:09:eb:1e:f0:a0:9e:ec:e5:52:ae:25:
         bf:47:8a:c8:52:9e:4f:39:eb:17:02:8d:04:25:41:44:ad:66:
         24:f8:a3:ff:d7:b5:33:46:d0:3c:f3:40:12:94:3d:6a:ec:0e:
         c4:47:ae:71:ed:b7:14:35:1e:db:f8:41:24:2d:61:86:f4:1e:
         b5:2f:18:9e:6c:d1:6e:47:ca:ca:60:51:85:99:9b:c1:1f:3c:
         07:43:bf:b1:ff:3a:c4:59:43:4a:cc:0f:db:e9:ee:37:ae:cd:
         1f:32:b5:2b:e3:e1:bd:51:d9:60:3a:57:eb:d1:43:d5:22:fc:
         b4:0d:8a:2d:ba:25:e5:d4:71:e5:47:38:89:c0:4f:10:ee:9b:
         c1:9f:56:2c:04:46:33:b3:3b:ca:5d:72:61:79:23:f4:7f:4c:
         c3:df:ab:05:4a:50:2f:a4:01:da:69:12:e2:c1:99:d2:75:b3:
         80:bd:26:3a:41:20:7f:58:4d:4f:f4:a7:37:11:91:51:22:e9:
         c7:45:65:4c:56:28:99:53:08:47:66:3e:ee:24:84:9c:d1:20:
         ba:25:10:4c
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUDTE1hKFZrd7piZSnxoRwZqK/roYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDUyMTU4WhcNMjUxMjA1MjM1OTU5
WjB6MUkwRwYDVQQFE0BjOWU0YmZkODM1ZDllZmYwMzA4Yzg0NjhkMWUxNjlkOTgx
ZGNhNmRhNmQ4YTRmYjBhZjZjODdkNWM2NWE2MjE2MS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC4tCdSC4puX0fA/tx77WRtryFZ/EMSEe/PBbsUIaEkDIIl
9bhG7jVBCojFZHo/xEMKQwJ3BkmepN/BuLvm++H4D+SP7l8dqulb7sPxAHVwA9Mc
7dXwWR81632NHc/TxgEWlpH5qD6j2/VEtGbQgZ2CWduZ5CTEi/eMQrRj7QvWamm6
lwwfJ2IkkLIHeSMJZDUdJn0ssegOJF5heK62+rXmwF0Coe/4PvDKwX/ksL7qFrVv
ySToPQQCik7BXjPiI1xuR/rnvruPacpREjLTipmyeUZPaH2tjJ00RXPTXrMLu1u+
b8xaC3vZpXZcHGQMxAtbZ2ek1RJXMA5qY2Rcus4/AgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQURFXjAICLKsYm5ot6//stTrLbwLUwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzZlNGExY2JjLTY2MGUtNDM2OC1hMzdmLWY4NTcxMmM0ZTNlYS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwMmAJAAGNAwDQYJKoZIhvcNAQELBQADggEBAHb914xXVTMY953muadi8ii/
9yGc+EoSotMcutOhqVGXsZz+X1eeLGGm3eQJ6x7woJ7s5VKuJb9HishSnk856xcC
jQQlQUStZiT4o//XtTNG0DzzQBKUPWrsDsRHrnHttxQ1Htv4QSQtYYb0HrUvGJ5s
0W5HyspgUYWZm8EfPAdDv7H/OsRZQ0rMD9vp7jeuzR8ytSvj4b1R2WA6V+vRQ9Ui
/LQNii26JeXUceVHOInATxDum8GfViwERjOzO8pdcmF5I/R/TMPfqwVKUC+kAdpp
EuLBmdJ1s4C9JjpBIH9YTU/0pzcRkVEi6cdFZUxWKJlTCEdmPu4khJzRILolEEw=
-----END CERTIFICATE-----
Generated at Wed Nov 5 11:07:53 2025 by rpki-client