Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/73bf04eb-4ecf-4939-aa9d-e6762d5b13c4.roa
File:                     73bf04eb-4ecf-4939-aa9d-e6762d5b13c4.roa (raw, json)
Hash identifier:          CDA4+QuN/GUrcS0BAcC5JZGzIP1jmolJuPO40228dDM=
Subject key identifier:   95:DF:31:DD:02:C4:B0:00:81:5B:7E:4A:D0:16:CF:67:3E:01:21:44
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       217066E8CC123645D0491E4584EA7F90278DB554
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/73bf04eb-4ecf-4939-aa9d-e6762d5b13c4.roa
Signing time:             Fri 31 Oct 2025 01:10:03 +0000
ROA not before:           Fri 31 Oct 2025 01:10:03 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:39d6::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:70:66:e8:cc:12:36:45:d0:49:1e:45:84:ea:7f:90:27:8d:b5:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 01:10:03 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=94371131ce1b95739cc42b0e6066c6f0fe92da5db897dec8f347409506dc7d10, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:01:f1:c8:fe:87:2c:0c:6b:50:e9:7f:5b:50:
                    c2:a3:e6:6a:70:35:14:ee:44:61:f2:b8:f7:bf:e8:
                    cb:ab:ce:39:6b:d1:27:e8:4e:8f:c4:4f:b0:36:89:
                    fc:5b:2f:8b:c7:3b:23:ed:77:86:e3:66:44:c3:b6:
                    99:5b:f9:a6:4b:40:a0:88:d3:1d:3d:52:d7:bd:63:
                    28:d7:55:67:13:94:d1:5b:ef:fb:10:a4:db:0d:73:
                    d4:53:8e:91:20:b4:28:2e:3c:02:91:61:6a:59:ca:
                    f9:dd:15:e8:3a:f6:62:1d:0d:a4:bd:92:be:22:09:
                    0a:c0:03:03:85:5e:19:79:ad:1f:e9:ec:04:2b:ad:
                    9f:ba:61:95:29:89:2c:38:0a:2e:fb:01:91:df:05:
                    97:a1:f4:6d:3d:98:69:fe:9a:6b:41:cc:e2:6a:72:
                    e0:3e:0d:6b:93:b2:c3:3e:71:12:7f:1e:85:35:bb:
                    26:7c:5d:74:b9:e3:30:ec:75:91:ad:cd:f2:76:af:
                    52:77:37:5e:50:5b:53:d1:cf:0a:c6:a4:ef:00:02:
                    77:35:5f:92:cc:34:da:63:97:4d:db:8a:ab:d2:64:
                    1d:a2:9f:28:19:a0:57:48:d0:6c:29:66:c6:8f:0c:
                    55:b9:d3:1a:b8:04:81:0f:0c:fc:af:71:29:90:c3:
                    bd:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:DF:31:DD:02:C4:B0:00:81:5B:7E:4A:D0:16:CF:67:3E:01:21:44
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/73bf04eb-4ecf-4939-aa9d-e6762d5b13c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:39d6::/47

    Signature Algorithm: sha256WithRSAEncryption
         ac:a4:00:8f:ae:c6:d3:1b:c8:10:e7:0c:eb:d5:0e:52:7c:1b:
         94:8d:6a:b3:02:cb:9e:a1:50:02:4f:8b:8e:dd:80:42:55:7c:
         e8:76:a5:5b:dc:3c:a6:db:31:ec:05:b8:49:51:1b:50:d4:e3:
         88:04:a5:73:99:d3:22:6c:3e:d1:f7:c8:8c:75:13:00:4c:3c:
         e0:d9:c2:a1:f5:41:19:33:87:66:d1:f5:4a:5e:73:9e:5e:2e:
         8b:db:14:01:15:8d:20:a3:33:2e:c8:ac:55:1e:5b:45:2f:03:
         bc:61:88:8c:2e:be:c4:7a:97:de:f1:8c:af:8b:2a:84:3b:82:
         c0:ee:33:11:f8:a4:f3:c8:4d:43:82:7e:56:bd:11:eb:6a:9e:
         6c:f6:86:3a:2b:f0:53:dd:e3:f2:63:e4:2e:65:3d:a5:95:96:
         48:70:31:4e:cf:21:32:ef:95:97:31:32:42:ad:2f:3a:95:38:
         92:6a:98:c4:8c:d6:6b:16:ce:b6:02:22:6d:61:76:04:16:eb:
         f3:2b:3d:59:51:ce:9a:87:28:80:99:8b:4b:51:81:98:03:f6:
         63:4b:95:15:f7:3a:77:56:59:ee:fe:83:74:b7:0c:86:08:bf:
         da:39:94:b4:d1:f7:91:82:f9:63:40:8c:2a:47:56:93:63:b0:
         f9:2b:59:95
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUIXBm6MwSNkXQSR5FhOp/kCeNtVQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDExMDAzWhcNMjUxMjA1MjM1OTU5
WjB6MUkwRwYDVQQFE0A5NDM3MTEzMWNlMWI5NTczOWNjNDJiMGU2MDY2YzZmMGZl
OTJkYTVkYjg5N2RlYzhmMzQ3NDA5NTA2ZGM3ZDEwMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDTAfHI/ocsDGtQ6X9bUMKj5mpwNRTuRGHyuPe/6Murzjlr
0SfoTo/ET7A2ifxbL4vHOyPtd4bjZkTDtplb+aZLQKCI0x09Ute9YyjXVWcTlNFb
7/sQpNsNc9RTjpEgtCguPAKRYWpZyvndFeg69mIdDaS9kr4iCQrAAwOFXhl5rR/p
7AQrrZ+6YZUpiSw4Ci77AZHfBZeh9G09mGn+mmtBzOJqcuA+DWuTssM+cRJ/HoU1
uyZ8XXS54zDsdZGtzfJ2r1J3N15QW1PRzwrGpO8AAnc1X5LMNNpjl03biqvSZB2i
nygZoFdI0GwpZsaPDFW50xq4BIEPDPyvcSmQw70VAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUld8x3QLEsACBW35K0BbPZz4BIUQwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzczYmYwNGViLTRlY2YtNDkzOS1hYTlkLWU2NzYyZDViMTNjNC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwEmAJAAOdYwDQYJKoZIhvcNAQELBQADggEBAKykAI+uxtMbyBDnDOvVDlJ8
G5SNarMCy56hUAJPi47dgEJVfOh2pVvcPKbbMewFuElRG1DU44gEpXOZ0yJsPtH3
yIx1EwBMPODZwqH1QRkzh2bR9Upec55eLovbFAEVjSCjMy7IrFUeW0UvA7xhiIwu
vsR6l97xjK+LKoQ7gsDuMxH4pPPITUOCfla9Eetqnmz2hjor8FPd4/Jj5C5lPaWV
lkhwMU7PITLvlZcxMkKtLzqVOJJqmMSM1msWzrYCIm1hdgQW6/MrPVlRzpqHKICZ
i0tRgZgD9mNLlRX3OndWWe7+g3S3DIYIv9o5lLTR95GC+WNAjCpHVpNjsPkrWZU=
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:34:06 2025 by rpki-client