Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/74ee40b5-e01d-4498-8112-6b41948193a7.roa
File:                     74ee40b5-e01d-4498-8112-6b41948193a7.roa (raw, json)
Hash identifier:          90Bsv9avpey9wtOUsiEUY31954JTuHpio9FQt3lo7GA=
Subject key identifier:   EE:76:85:B1:AB:61:D4:8C:4F:93:A3:5F:3B:94:24:EF:11:69:C0:B8
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       0A20FCE4CB021CF87393AF54A0D8DF4E18D40399
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/74ee40b5-e01d-4498-8112-6b41948193a7.roa
Signing time:             Fri 31 Oct 2025 03:40:27 +0000
ROA not before:           Fri 31 Oct 2025 03:40:27 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2cd8::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:20:fc:e4:cb:02:1c:f8:73:93:af:54:a0:d8:df:4e:18:d4:03:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 03:40:27 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=4269867d36ed71c943844f6e68dd171d38217a13e22d1963c448388213591b8c, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:c6:cf:06:00:61:b0:0f:c0:9f:db:a1:27:3b:
                    d3:9a:07:ca:f1:3a:4c:83:f2:d6:b2:83:1f:dd:88:
                    7f:1c:2d:d8:34:39:f9:c2:98:f4:d7:e3:b4:8e:eb:
                    8f:bb:1f:b5:f5:aa:5b:cb:9e:92:55:b2:08:eb:1f:
                    ea:4d:e2:54:d1:2d:46:d5:87:11:34:01:26:5e:64:
                    1a:c5:f2:37:4a:7f:bb:a3:75:f5:2c:e8:c6:73:78:
                    50:91:ab:95:ad:b3:c2:e8:19:7b:91:d9:0f:c9:ed:
                    ee:06:cc:15:c6:51:25:8e:47:ae:8d:cc:b6:0b:98:
                    35:8d:21:3e:21:0d:f0:79:43:45:df:83:77:5d:e9:
                    c2:47:03:2c:bf:ad:8d:8d:f3:bd:c1:f3:0e:2d:d6:
                    df:f8:54:7d:f8:a3:37:11:5a:99:cc:5b:0d:04:45:
                    50:ea:65:6c:1b:75:57:5a:68:fd:39:98:ec:f8:7d:
                    4f:44:35:b9:13:04:0d:75:c8:1b:42:78:65:93:cf:
                    fa:ab:c6:79:4a:63:53:43:78:eb:3d:da:e9:2a:09:
                    b5:db:e3:f1:e0:18:cd:5e:0b:c0:1c:32:31:98:ee:
                    f5:99:15:80:d4:59:00:1b:5f:ec:4a:37:43:32:52:
                    09:de:7d:c0:c2:79:4a:ed:e9:21:dd:85:0a:b4:08:
                    63:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:76:85:B1:AB:61:D4:8C:4F:93:A3:5F:3B:94:24:EF:11:69:C0:B8
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/74ee40b5-e01d-4498-8112-6b41948193a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2cd8::/46

    Signature Algorithm: sha256WithRSAEncryption
         69:63:a3:80:f2:2f:62:6d:92:0f:f9:50:b5:d7:bd:9c:21:28:
         53:0f:9a:18:b5:a3:88:ba:18:84:99:49:40:d9:80:fa:fa:d6:
         5b:18:56:e1:01:72:1e:36:2b:b8:2f:cd:a5:0d:03:0b:54:a4:
         2f:27:a3:98:95:a5:d9:02:e0:14:0a:de:dc:dc:5b:ab:92:91:
         52:80:57:ff:9a:23:c4:b4:f8:b1:99:25:fa:ba:89:ae:5b:a1:
         69:c6:fd:86:ba:c9:7e:08:65:b7:78:c9:25:c7:49:0c:25:56:
         97:48:2f:cd:72:67:12:11:ca:2a:06:ef:a7:c2:e1:c0:99:a1:
         fc:ce:79:62:31:02:8e:73:2a:c2:33:8b:cc:19:3d:2c:31:61:
         96:48:a3:a5:c8:92:18:06:40:da:22:e7:f8:da:30:ff:2f:99:
         72:b0:c2:1e:e1:d1:41:be:06:3e:e0:f1:05:26:7a:e7:c4:71:
         af:9c:4f:ea:ae:02:e9:bb:3d:96:16:ff:55:f1:02:bd:83:16:
         50:0e:a8:eb:94:b0:c1:df:3e:eb:5b:33:26:c4:48:10:43:8d:
         06:89:aa:90:e3:c1:31:d5:75:7b:03:c7:74:d0:9a:d1:c2:b2:
         09:de:0d:96:d3:79:cd:46:0f:cb:25:f9:ae:16:5a:6e:80:f3:
         d3:6b:ed:ce
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUCiD85MsCHPhzk69UoNjfThjUA5kwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDM0MDI3WhcNMjUxMjA1MjM1OTU5
WjB6MUkwRwYDVQQFE0A0MjY5ODY3ZDM2ZWQ3MWM5NDM4NDRmNmU2OGRkMTcxZDM4
MjE3YTEzZTIyZDE5NjNjNDQ4Mzg4MjEzNTkxYjhjMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCQxs8GAGGwD8Cf26EnO9OaB8rxOkyD8taygx/diH8cLdg0
OfnCmPTX47SO64+7H7X1qlvLnpJVsgjrH+pN4lTRLUbVhxE0ASZeZBrF8jdKf7uj
dfUs6MZzeFCRq5Wts8LoGXuR2Q/J7e4GzBXGUSWOR66NzLYLmDWNIT4hDfB5Q0Xf
g3dd6cJHAyy/rY2N873B8w4t1t/4VH34ozcRWpnMWw0ERVDqZWwbdVdaaP05mOz4
fU9ENbkTBA11yBtCeGWTz/qrxnlKY1NDeOs92ukqCbXb4/HgGM1eC8AcMjGY7vWZ
FYDUWQAbX+xKN0MyUgnefcDCeUrt6SHdhQq0CGPRAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQU7naFsath1IxPk6NfO5Qk7xFpwLgwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1Lzc0ZWU0MGI1LWUwMWQtNDQ5OC04MTEyLTZiNDE5NDgxOTNhNy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwImAJAALNgwDQYJKoZIhvcNAQELBQADggEBAGljo4DyL2Jtkg/5ULXXvZwh
KFMPmhi1o4i6GISZSUDZgPr61lsYVuEBch42K7gvzaUNAwtUpC8no5iVpdkC4BQK
3tzcW6uSkVKAV/+aI8S0+LGZJfq6ia5boWnG/Ya6yX4IZbd4ySXHSQwlVpdIL81y
ZxIRyioG76fC4cCZofzOeWIxAo5zKsIzi8wZPSwxYZZIo6XIkhgGQNoi5/jaMP8v
mXKwwh7h0UG+Bj7g8QUmeufEca+cT+quAum7PZYW/1XxAr2DFlAOqOuUsMHfPutb
MybESBBDjQaJqpDjwTHVdXsDx3TQmtHCsgneDZbTec1GD8sl+a4WWm6A89Nr7c4=
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:53:52 2025 by rpki-client