Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/70f0b44a-4d1b-40c0-afb0-93b030f12eb1.roa
File:                     70f0b44a-4d1b-40c0-afb0-93b030f12eb1.roa (raw, json)
Hash identifier:          9BFXjE5ksi/vdHYrBdc+aKkeFKz3UbYC91D4AuZcXXc=
Subject key identifier:   0A:93:24:28:68:CB:19:20:61:00:4F:1F:6F:E5:B5:B9:7D:B2:09:88
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       03687748BBC2A77762E569D1159A4699F8A64E3C
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/70f0b44a-4d1b-40c0-afb0-93b030f12eb1.roa
Signing time:             Fri 31 Oct 2025 07:12:57 +0000
ROA not before:           Fri 31 Oct 2025 07:12:57 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1aa0::/43 maxlen: 43
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:68:77:48:bb:c2:a7:77:62:e5:69:d1:15:9a:46:99:f8:a6:4e:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 07:12:57 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=765e94078ccf3c71ff9be7d2a96ee87fd0ab7c959bee47f54a66a9de6ae22666, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:3f:72:9c:7d:d4:bd:ac:fd:82:62:8e:5c:5b:
                    a5:ab:8d:45:81:2a:d9:7b:16:99:26:0d:76:72:23:
                    18:34:ee:9e:a1:5e:32:f5:f5:a6:20:a4:78:23:22:
                    8b:27:d0:1e:9f:cd:28:f1:03:05:30:57:d8:bd:d4:
                    73:cc:b4:ed:47:df:42:af:bb:2c:bb:e5:4c:31:75:
                    f5:70:94:7d:9c:51:4b:1b:2a:e2:fe:94:ae:f9:2c:
                    e7:d5:32:47:8e:93:a0:cd:8b:9d:88:4f:b9:b3:22:
                    14:2d:57:9d:4c:68:db:73:7a:8d:1d:26:b4:25:02:
                    9d:22:5a:0d:df:00:15:af:a6:bc:99:9f:7f:89:b3:
                    9f:25:96:d2:83:cb:99:e5:a8:35:c9:af:92:23:ba:
                    b0:10:f6:01:7e:ea:27:87:b1:5f:50:87:9c:47:39:
                    b6:db:56:a8:ae:81:8b:9a:0b:c5:c8:ad:36:76:a1:
                    2e:39:9d:07:95:1b:cd:41:d7:95:ee:7a:8d:25:a9:
                    10:80:8f:4c:f3:f4:70:78:54:54:d1:cf:df:f9:36:
                    a7:1c:b5:c5:51:68:51:84:fb:93:f2:4c:c1:0c:bd:
                    a9:f8:35:93:de:e5:2f:9d:c8:3e:32:9c:5e:70:bc:
                    7c:37:f8:f4:aa:2f:b7:84:95:80:ac:04:23:a5:6c:
                    2c:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:93:24:28:68:CB:19:20:61:00:4F:1F:6F:E5:B5:B9:7D:B2:09:88
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/70f0b44a-4d1b-40c0-afb0-93b030f12eb1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1aa0::/43

    Signature Algorithm: sha256WithRSAEncryption
         7b:30:c1:4b:23:fb:62:5a:d3:28:eb:29:0f:4b:79:17:e2:8c:
         36:63:f7:7e:e5:c2:e1:96:be:cf:39:9a:6b:ac:99:4d:b8:64:
         9f:89:13:ef:67:3a:e7:32:5c:d2:04:bd:01:2e:a5:25:12:21:
         ef:29:9b:d3:51:b7:23:18:e6:4c:6f:83:76:d8:0c:ae:47:26:
         ee:9e:bb:da:b7:b0:a3:80:f3:4e:60:18:9f:33:fa:94:81:4f:
         d9:ce:96:74:e2:26:b9:e2:3c:f0:1b:4d:40:5a:ea:d7:c7:88:
         14:12:68:b2:5f:3d:53:9d:c9:03:a2:ea:e9:74:b1:35:2e:6b:
         b9:05:af:4b:8e:7f:22:dd:ba:1e:78:5b:98:3d:25:0e:07:e8:
         6a:39:f2:91:30:ed:36:8a:bd:f7:4c:b1:0b:e8:00:40:03:b8:
         85:85:d3:b6:36:ab:2a:be:fe:3d:7e:36:f4:03:2d:a3:39:93:
         ef:e1:53:93:a5:86:77:fd:e2:3a:6c:bb:86:5f:d4:04:28:7d:
         4a:f5:77:ed:19:dd:ec:5a:64:cb:fa:0d:81:d1:aa:38:d9:84:
         9f:94:b5:0c:0b:11:7d:3d:01:4a:7d:23:c9:2f:35:6e:ad:80:
         77:1c:c2:5d:b1:66:4b:b5:f9:f3:61:9f:c8:d7:65:0f:51:34:
         6c:d3:19:bd
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUA2h3SLvCp3di5WnRFZpGmfimTjwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDcxMjU3WhcNMjUxMjA1MjM1OTU5
WjB6MUkwRwYDVQQFE0A3NjVlOTQwNzhjY2YzYzcxZmY5YmU3ZDJhOTZlZTg3ZmQw
YWI3Yzk1OWJlZTQ3ZjU0YTY2YTlkZTZhZTIyNjY2MS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDDP3KcfdS9rP2CYo5cW6WrjUWBKtl7FpkmDXZyIxg07p6h
XjL19aYgpHgjIosn0B6fzSjxAwUwV9i91HPMtO1H30Kvuyy75UwxdfVwlH2cUUsb
KuL+lK75LOfVMkeOk6DNi52IT7mzIhQtV51MaNtzeo0dJrQlAp0iWg3fABWvpryZ
n3+Js58lltKDy5nlqDXJr5IjurAQ9gF+6ieHsV9Qh5xHObbbVqiugYuaC8XIrTZ2
oS45nQeVG81B15Xueo0lqRCAj0zz9HB4VFTRz9/5NqcctcVRaFGE+5PyTMEMvan4
NZPe5S+dyD4ynF5wvHw3+PSqL7eElYCsBCOlbCybAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUCpMkKGjLGSBhAE8fb+W1uX2yCYgwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzcwZjBiNDRhLTRkMWItNDBjMC1hZmIwLTkzYjAzMGYxMmViMS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwUmAJAAGqAwDQYJKoZIhvcNAQELBQADggEBAHswwUsj+2Ja0yjrKQ9LeRfi
jDZj937lwuGWvs85mmusmU24ZJ+JE+9nOucyXNIEvQEupSUSIe8pm9NRtyMY5kxv
g3bYDK5HJu6eu9q3sKOA805gGJ8z+pSBT9nOlnTiJrniPPAbTUBa6tfHiBQSaLJf
PVOdyQOi6ul0sTUua7kFr0uOfyLduh54W5g9JQ4H6Go58pEw7TaKvfdMsQvoAEAD
uIWF07Y2qyq+/j1+NvQDLaM5k+/hU5Olhnf94jpsu4Zf1AQofUr1d+0Z3exaZMv6
DYHRqjjZhJ+UtQwLEX09AUp9I8kvNW6tgHccwl2xZku1+fNhn8jXZQ9RNGzTGb0=
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:38:24 2025 by rpki-client