Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7c7f70bb-dd5b-405a-9bed-25e7e9bd3fd8.roa
File:                     7c7f70bb-dd5b-405a-9bed-25e7e9bd3fd8.roa (raw, json)
Hash identifier:          eFBxvESVqgwbIwJnopcb1JnYZYic5778XwTeQ6JraCw=
Subject key identifier:   B3:EB:A1:3D:A8:AF:04:63:3F:D0:8B:8E:E9:2A:68:0D:81:E7:AF:9A
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       5F3F5726514279FA89CB5138168F6E47949A07D3
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7c7f70bb-dd5b-405a-9bed-25e7e9bd3fd8.roa
Signing time:             Fri 31 Oct 2025 00:10:20 +0000
ROA not before:           Fri 31 Oct 2025 00:10:20 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3376::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:3f:57:26:51:42:79:fa:89:cb:51:38:16:8f:6e:47:94:9a:07:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 00:10:20 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=2791aab46c4f6acff9f72bdf7de65b70089f50f74b4fafa636ba446c575a5e42, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:5c:6c:78:12:22:6d:08:ed:fa:86:37:59:ee:
                    2a:db:da:09:a0:89:28:68:35:b1:46:26:4d:f7:be:
                    01:54:79:80:c4:0b:0d:fb:01:45:dc:1c:c6:62:8a:
                    56:54:eb:04:2c:8f:b0:c2:b4:0f:72:23:8f:51:e6:
                    77:a7:73:bd:73:d5:c2:b3:30:af:63:95:76:2b:36:
                    cc:a4:b7:43:a2:23:c2:b1:de:eb:74:48:28:05:c0:
                    2e:dd:6b:64:aa:50:89:e6:4d:9d:d0:dc:77:a5:b8:
                    ec:14:26:b6:6f:f7:81:e2:da:89:a0:a9:c6:6a:b3:
                    f1:e6:cf:ad:70:ea:bd:0a:64:55:00:b0:ac:5e:96:
                    4a:8f:9f:f3:68:df:70:b1:e4:fb:eb:d6:83:48:87:
                    01:cd:8c:aa:57:5c:de:85:77:0a:a7:68:ef:1f:a3:
                    a5:72:38:9d:8e:6b:2e:2c:7c:e1:51:fd:c0:6a:34:
                    5a:b5:59:92:16:5c:40:92:c6:43:3a:9e:a5:f6:9c:
                    f3:ed:42:ff:87:8c:af:59:8a:bf:73:af:39:81:2a:
                    af:64:17:d8:ea:f1:64:72:99:0e:2a:47:33:31:23:
                    ae:af:53:8a:f6:79:15:18:ea:cd:89:05:d2:a9:82:
                    36:ae:bd:68:75:fb:1f:d8:a8:80:e6:9b:0f:6c:b1:
                    02:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:EB:A1:3D:A8:AF:04:63:3F:D0:8B:8E:E9:2A:68:0D:81:E7:AF:9A
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7c7f70bb-dd5b-405a-9bed-25e7e9bd3fd8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3376::/47

    Signature Algorithm: sha256WithRSAEncryption
         c0:0e:9b:ae:aa:15:45:66:1b:71:13:37:55:e4:a4:70:0b:8f:
         12:ba:72:fe:93:cf:18:5e:96:a1:e4:e5:86:2b:df:76:5e:5f:
         39:0e:18:0e:6e:56:a6:26:45:ab:52:b8:5c:4a:db:5e:65:f6:
         59:60:d4:37:26:c1:d6:a8:21:b5:12:42:65:7a:15:45:cc:58:
         a3:da:c2:3d:64:f9:12:4d:be:82:63:e3:5f:a9:2c:82:e9:66:
         85:89:d0:3d:38:de:f0:91:7e:79:e0:7c:21:dc:bc:68:86:67:
         20:cb:18:f5:c3:7c:cc:2c:64:37:e2:9b:5c:13:a5:78:28:ce:
         21:23:08:4e:d1:10:44:99:8d:ad:1f:a0:91:a9:1a:fd:13:d0:
         4a:d3:87:10:d4:fd:55:f9:c2:4c:b9:60:a8:16:da:67:ad:28:
         45:90:1a:d5:05:96:ec:29:f3:02:e0:ec:86:e4:51:1f:e4:b2:
         49:5a:c4:f9:65:b5:7b:84:43:bb:22:20:e2:7d:b5:8e:bf:37:
         6e:54:aa:54:07:84:8b:46:07:fa:38:be:0e:85:8f:fa:68:5f:
         27:9d:a2:2b:33:ec:bd:d6:4c:2b:3c:2c:40:f0:bb:73:51:de:
         fb:bf:03:5b:4f:42:a5:f0:6e:1e:05:49:e8:80:49:cc:53:10:
         1c:ed:e5:38
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUXz9XJlFCefqJy1E4Fo9uR5SaB9MwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDAxMDIwWhcNMjUxMjA1MjM1OTU5
WjB6MUkwRwYDVQQFE0AyNzkxYWFiNDZjNGY2YWNmZjlmNzJiZGY3ZGU2NWI3MDA4
OWY1MGY3NGI0ZmFmYTYzNmJhNDQ2YzU3NWE1ZTQyMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC5XGx4EiJtCO36hjdZ7irb2gmgiShoNbFGJk33vgFUeYDE
Cw37AUXcHMZiilZU6wQsj7DCtA9yI49R5nenc71z1cKzMK9jlXYrNsykt0OiI8Kx
3ut0SCgFwC7da2SqUInmTZ3Q3HeluOwUJrZv94Hi2omgqcZqs/Hmz61w6r0KZFUA
sKxelkqPn/No33Cx5Pvr1oNIhwHNjKpXXN6FdwqnaO8fo6VyOJ2Oay4sfOFR/cBq
NFq1WZIWXECSxkM6nqX2nPPtQv+HjK9Zir9zrzmBKq9kF9jq8WRymQ4qRzMxI66v
U4r2eRUY6s2JBdKpgjauvWh1+x/YqIDmmw9ssQKFAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUs+uhPaivBGM/0IuO6SpoDYHnr5owHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzdjN2Y3MGJiLWRkNWItNDA1YS05YmVkLTI1ZTdlOWJkM2ZkOC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwEmAJAAM3YwDQYJKoZIhvcNAQELBQADggEBAMAOm66qFUVmG3ETN1XkpHAL
jxK6cv6TzxhelqHk5YYr33ZeXzkOGA5uVqYmRatSuFxK215l9llg1DcmwdaoIbUS
QmV6FUXMWKPawj1k+RJNvoJj41+pLILpZoWJ0D043vCRfnngfCHcvGiGZyDLGPXD
fMwsZDfim1wTpXgoziEjCE7REESZja0foJGpGv0T0ErThxDU/VX5wky5YKgW2met
KEWQGtUFluwp8wLg7IbkUR/ksklaxPlltXuEQ7siIOJ9tY6/N25UqlQHhItGB/o4
vg6Fj/poXyedoisz7L3WTCs8LEDwu3NR3vu/A1tPQqXwbh4FSeiAScxTEBzt5Tg=
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:38:56 2025 by rpki-client