Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7b51fd6b-25fb-47b3-bb5d-50c256f949bf.roa
File:                     7b51fd6b-25fb-47b3-bb5d-50c256f949bf.roa (raw, json)
Hash identifier:          LP61HkrwD6jdTVbRBguGh58kqSty08blPjeda7YONXM=
Subject key identifier:   36:51:11:5A:E9:A2:98:2F:3E:77:C6:81:B1:1A:86:D0:6C:CC:B4:45
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       41B2183817CB976C400FA2976CFA137BDED08A19
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7b51fd6b-25fb-47b3-bb5d-50c256f949bf.roa
Signing time:             Fri 31 Oct 2025 05:09:05 +0000
ROA not before:           Fri 31 Oct 2025 05:09:05 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1490::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:b2:18:38:17:cb:97:6c:40:0f:a2:97:6c:fa:13:7b:de:d0:8a:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 05:09:05 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=ee31fe409706292f80bd921bf64e7f4c10b202c68ddaec65f1b81a8ab3bf1a22, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:05:c4:8b:31:ea:60:d2:5e:d7:2a:8b:c9:fe:
                    3a:c6:e9:eb:53:d6:ea:87:2e:5e:14:8e:6c:65:b7:
                    0c:23:a0:87:39:fc:a5:e8:f8:d3:d9:82:73:db:94:
                    4e:99:4d:c5:a6:d1:0f:b8:98:45:9d:db:5d:95:d6:
                    8a:20:57:fe:0f:20:d4:67:fa:97:a8:87:75:ae:82:
                    05:5b:01:34:2a:5e:9e:74:d6:cf:6f:b6:9a:3a:4b:
                    f8:e4:d7:8b:5a:59:83:f4:3b:fb:03:fa:a8:6a:a3:
                    a9:ad:f9:ab:73:7f:d9:71:a2:fc:7d:11:84:2a:39:
                    e1:35:9f:e5:56:1c:81:61:a6:a6:d0:e7:35:b7:79:
                    41:3f:38:81:0b:71:30:d5:70:b6:8d:7e:62:c6:ee:
                    1c:b2:3f:40:ce:30:c7:77:78:42:fd:c7:d9:d2:69:
                    70:7e:1e:f5:fd:df:3c:5a:34:a1:95:68:49:87:c9:
                    9b:bb:ca:18:cc:77:f7:61:45:e5:59:eb:be:55:c9:
                    e0:37:1d:07:22:20:69:31:9f:20:68:3d:13:36:df:
                    87:cc:ce:94:79:90:58:fd:e5:bc:1c:23:1a:92:25:
                    6e:77:03:f3:5d:33:35:84:da:48:92:6a:de:b5:8b:
                    a9:4c:7a:9c:49:7e:85:6b:5f:5c:1c:d5:2b:1f:0f:
                    7e:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:51:11:5A:E9:A2:98:2F:3E:77:C6:81:B1:1A:86:D0:6C:CC:B4:45
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7b51fd6b-25fb-47b3-bb5d-50c256f949bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1490::/45

    Signature Algorithm: sha256WithRSAEncryption
         5b:ee:89:da:4b:54:09:1b:2b:56:c5:4f:d4:65:ab:06:51:52:
         13:db:d4:85:20:0a:d9:3c:e0:13:1c:8f:14:87:da:41:11:3a:
         56:a9:1e:ee:b7:49:d5:15:03:2a:13:0b:cb:72:a0:66:cf:f1:
         f1:03:c1:fd:7a:1a:9e:d5:ce:a8:0b:ea:99:d5:0a:e7:62:8a:
         74:6d:cd:de:2b:18:75:5d:b6:20:2b:4a:69:2e:82:7a:31:96:
         4b:8c:20:80:ce:51:e5:dc:43:7f:71:4c:6c:28:33:10:31:41:
         b9:cb:48:bd:0e:84:a1:21:4a:38:d8:5b:e0:df:8a:fb:11:eb:
         ae:e7:30:20:07:be:ce:5f:38:c8:d3:e6:c6:83:0f:ac:c6:bf:
         6b:e0:e3:e3:1f:39:6f:5f:61:ca:66:2d:86:a9:db:72:0d:7e:
         8e:3c:e8:70:ee:0d:a1:3c:fd:e5:82:89:6d:ae:a5:78:71:a3:
         09:dd:d9:91:bc:57:ed:d5:40:d1:54:e1:9e:df:46:24:7e:a6:
         b3:86:93:bf:f1:e6:d1:87:04:ec:4f:c2:b3:e6:17:79:bd:a8:
         aa:0e:b9:02:f3:70:9a:ca:67:28:88:97:45:59:d3:95:dd:7d:
         cb:bd:52:cf:a4:41:4e:29:8d:ab:65:64:74:20:de:ae:f4:5d:
         f0:d6:1d:92
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUQbIYOBfLl2xAD6KXbPoTe97QihkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDUwOTA1WhcNMjUxMjA1MjM1OTU5
WjB6MUkwRwYDVQQFE0BlZTMxZmU0MDk3MDYyOTJmODBiZDkyMWJmNjRlN2Y0YzEw
YjIwMmM2OGRkYWVjNjVmMWI4MWE4YWIzYmYxYTIyMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDQBcSLMepg0l7XKovJ/jrG6etT1uqHLl4UjmxltwwjoIc5
/KXo+NPZgnPblE6ZTcWm0Q+4mEWd212V1oogV/4PINRn+peoh3WuggVbATQqXp50
1s9vtpo6S/jk14taWYP0O/sD+qhqo6mt+atzf9lxovx9EYQqOeE1n+VWHIFhpqbQ
5zW3eUE/OIELcTDVcLaNfmLG7hyyP0DOMMd3eEL9x9nSaXB+HvX93zxaNKGVaEmH
yZu7yhjMd/dhReVZ675VyeA3HQciIGkxnyBoPRM234fMzpR5kFj95bwcIxqSJW53
A/NdMzWE2kiSat61i6lMepxJfoVrX1wc1SsfD34jAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUNlERWumimC8+d8aBsRqG0GzMtEUwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzdiNTFmZDZiLTI1ZmItNDdiMy1iYjVkLTUwYzI1NmY5NDliZi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwMmAJAAFJAwDQYJKoZIhvcNAQELBQADggEBAFvuidpLVAkbK1bFT9RlqwZR
UhPb1IUgCtk84BMcjxSH2kEROlapHu63SdUVAyoTC8tyoGbP8fEDwf16Gp7VzqgL
6pnVCudiinRtzd4rGHVdtiArSmkugnoxlkuMIIDOUeXcQ39xTGwoMxAxQbnLSL0O
hKEhSjjYW+DfivsR667nMCAHvs5fOMjT5saDD6zGv2vg4+MfOW9fYcpmLYap23IN
fo486HDuDaE8/eWCiW2upXhxownd2ZG8V+3VQNFU4Z7fRiR+prOGk7/x5tGHBOxP
wrPmF3m9qKoOuQLzcJrKZyiIl0VZ05Xdfcu9Us+kQU4pjatlZHQg3q70XfDWHZI=
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:43:53 2025 by rpki-client