Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/708dcbaf-bcc7-4cbf-9898-36b0c5074d3d.roa
File:                     708dcbaf-bcc7-4cbf-9898-36b0c5074d3d.roa (raw, json)
Hash identifier:          E/j+4FYItuF+hLYFu7EZ9KymtgqFJnUYq8hpgIfLmT4=
Subject key identifier:   EB:3C:5D:B6:25:A2:1F:F3:F0:D5:63:AB:58:97:EF:A2:72:EA:A0:27
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       483195197CBD3CCA7C1A3773F24FC7E308133A7B
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/708dcbaf-bcc7-4cbf-9898-36b0c5074d3d.roa
Signing time:             Fri 31 Oct 2025 02:52:10 +0000
ROA not before:           Fri 31 Oct 2025 02:52:10 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:18b8::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:31:95:19:7c:bd:3c:ca:7c:1a:37:73:f2:4f:c7:e3:08:13:3a:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 02:52:10 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=0002ce7e7aeca6c1dfac3276f4503c36c89f43c6bf1ce2ec4e67faac574b6838, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:55:fe:b9:a6:ab:06:92:72:be:c5:ed:cd:4e:
                    0f:b4:58:08:6b:5f:17:2d:0b:97:d8:12:7d:5b:45:
                    93:b6:63:9c:20:9e:c4:8b:0f:85:81:ce:df:90:9b:
                    36:c3:49:f2:5d:84:38:19:38:8e:bc:a9:14:53:cf:
                    44:3f:71:f1:bc:53:96:8d:6a:26:42:91:bb:b2:92:
                    f6:ce:65:01:f2:42:51:ef:39:4b:de:e8:5c:e8:35:
                    65:e2:fa:a0:f1:4c:b9:c6:db:17:48:56:a1:88:1e:
                    f0:29:81:d0:f5:21:d3:cd:26:77:87:e7:09:08:df:
                    87:a4:54:12:43:97:a3:a5:d0:88:74:6c:9a:ec:62:
                    ec:5b:57:d2:0d:e5:f3:a9:4f:ee:30:d9:95:6c:13:
                    3e:f7:8a:f7:ed:a9:c6:99:59:a1:3e:ad:73:bd:d8:
                    98:25:49:85:0a:be:a9:46:c3:f8:a7:5d:b2:58:ee:
                    1b:98:3d:30:5e:00:65:b1:66:2b:dd:2e:a9:a0:f7:
                    e8:9b:b0:79:11:cf:a3:c2:ad:cd:cb:cf:70:69:b0:
                    fc:7e:ec:f6:f9:86:e8:26:37:86:c7:bc:2b:89:42:
                    98:c4:d8:56:79:e8:a5:a2:14:71:ed:6a:0f:f3:e6:
                    9c:81:2a:4a:de:54:e5:3e:9f:ab:f5:7a:57:12:fa:
                    10:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:3C:5D:B6:25:A2:1F:F3:F0:D5:63:AB:58:97:EF:A2:72:EA:A0:27
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/708dcbaf-bcc7-4cbf-9898-36b0c5074d3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:18b8::/46

    Signature Algorithm: sha256WithRSAEncryption
         c0:69:19:51:c4:51:98:9b:e5:dc:48:0b:c0:4a:9e:16:15:bc:
         ea:2d:3c:4c:1b:c2:92:8d:db:ae:02:4e:cd:80:0e:d3:fc:f3:
         bc:66:08:0b:e3:9f:41:e4:2f:74:29:e3:de:46:ed:cc:9d:c5:
         99:28:97:27:fc:6d:2f:ca:a9:d3:86:4d:b5:52:b0:69:85:f0:
         94:76:fa:32:de:42:86:aa:67:4b:09:f2:a6:fd:be:fb:fa:d3:
         da:83:f2:07:b9:39:d0:a0:cc:e8:1c:25:f0:a1:7b:45:17:91:
         68:dc:1e:e5:ed:27:20:d7:db:59:e5:64:4e:2d:8d:a5:1b:be:
         ca:bf:c2:04:a4:f0:a0:36:df:51:b5:2d:68:4a:44:25:5b:58:
         83:63:cb:ef:0d:84:e8:60:11:03:62:a3:57:16:54:58:8e:41:
         1d:eb:54:88:a4:4c:bd:f2:6e:b0:2b:d8:f3:f9:68:5c:22:d2:
         14:ea:15:e8:12:66:85:bb:bb:a2:bc:cd:8c:37:6b:fc:f1:d4:
         8e:67:eb:db:09:98:90:e6:a5:16:3e:5d:93:43:10:81:0b:b3:
         a6:57:2b:6e:a8:e4:9f:a3:65:ef:73:6e:05:5a:a8:6a:25:4a:
         43:43:5d:0c:75:14:23:40:89:26:bd:dc:d7:52:3a:d6:30:b8:
         20:a3:f6:b2
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUSDGVGXy9PMp8Gjdz8k/H4wgTOnswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDI1MjEwWhcNMjUxMjA1MjM1OTU5
WjB6MUkwRwYDVQQFE0AwMDAyY2U3ZTdhZWNhNmMxZGZhYzMyNzZmNDUwM2MzNmM4
OWY0M2M2YmYxY2UyZWM0ZTY3ZmFhYzU3NGI2ODM4MS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCrVf65pqsGknK+xe3NTg+0WAhrXxctC5fYEn1bRZO2Y5wg
nsSLD4WBzt+QmzbDSfJdhDgZOI68qRRTz0Q/cfG8U5aNaiZCkbuykvbOZQHyQlHv
OUve6FzoNWXi+qDxTLnG2xdIVqGIHvApgdD1IdPNJneH5wkI34ekVBJDl6Ol0Ih0
bJrsYuxbV9IN5fOpT+4w2ZVsEz73ivftqcaZWaE+rXO92JglSYUKvqlGw/inXbJY
7huYPTBeAGWxZivdLqmg9+ibsHkRz6PCrc3Lz3BpsPx+7Pb5hugmN4bHvCuJQpjE
2FZ56KWiFHHtag/z5pyBKkreVOU+n6v1elcS+hBHAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQU6zxdtiWiH/Pw1WOrWJfvonLqoCcwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzcwOGRjYmFmLWJjYzctNGNiZi05ODk4LTM2YjBjNTA3NGQzZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwImAJAAGLgwDQYJKoZIhvcNAQELBQADggEBAMBpGVHEUZib5dxIC8BKnhYV
vOotPEwbwpKN264CTs2ADtP887xmCAvjn0HkL3Qp495G7cydxZkolyf8bS/KqdOG
TbVSsGmF8JR2+jLeQoaqZ0sJ8qb9vvv609qD8ge5OdCgzOgcJfChe0UXkWjcHuXt
JyDX21nlZE4tjaUbvsq/wgSk8KA231G1LWhKRCVbWINjy+8NhOhgEQNio1cWVFiO
QR3rVIikTL3ybrAr2PP5aFwi0hTqFegSZoW7u6K8zYw3a/zx1I5n69sJmJDmpRY+
XZNDEIELs6ZXK26o5J+jZe9zbgVaqGolSkNDXQx1FCNAiSa93NdSOtYwuCCj9rI=
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:39:06 2025 by rpki-client