Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7cbc897b-7d5d-4186-85a8-bfab5012a598.roa
File:                     7cbc897b-7d5d-4186-85a8-bfab5012a598.roa (raw, json)
Hash identifier:          n1xaxb8YLSF47/wi1o1BWQ0taSfNfMrTVPGZY2x09OA=
Subject key identifier:   1A:F5:3F:A4:74:C3:59:A9:43:C9:93:FA:46:45:C4:76:9C:6C:AB:1A
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       0C6B091F212E20848D492DCEA9DC3E018EF8BA55
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7cbc897b-7d5d-4186-85a8-bfab5012a598.roa
Signing time:             Thu 30 Oct 2025 21:12:05 +0000
ROA not before:           Thu 30 Oct 2025 21:12:05 +0000
ROA not after:            Thu 04 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:158e::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:6b:09:1f:21:2e:20:84:8d:49:2d:ce:a9:dc:3e:01:8e:f8:ba:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 30 21:12:05 2025 GMT
            Not After : Dec  4 23:59:59 2025 GMT
        Subject: serialNumber=b68a69f0f50ac5af49eaef26b97253d9037fee9a9991d9fc50442f03377fba37, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:59:f7:5d:b5:70:62:59:26:83:eb:aa:a5:7e:
                    3c:ef:ad:b6:43:6d:03:e1:0b:6f:7d:e7:02:8e:45:
                    12:b6:b7:78:70:20:6b:8d:64:d7:57:04:4b:56:31:
                    0f:05:a0:2b:85:39:a9:a9:4f:54:b5:79:6c:31:bf:
                    3c:c8:41:ec:bf:33:f3:78:f4:58:93:c2:c1:cb:a4:
                    f0:eb:7f:a0:79:6a:d3:12:cc:3a:85:c3:b0:80:e1:
                    66:6c:3b:2c:0e:cf:b4:92:95:18:dc:40:5c:c4:c1:
                    c8:55:ca:22:e2:d0:0b:6d:4b:31:d1:16:36:f9:6a:
                    cf:92:05:dc:aa:17:d6:7b:ce:11:9a:58:48:a7:2f:
                    64:6a:c2:83:92:d1:ed:0a:15:39:0f:5a:81:9c:d9:
                    89:88:72:67:ad:a1:14:48:2a:92:11:0b:15:c2:51:
                    28:b3:91:e9:76:e4:ee:95:a0:32:c4:2d:3f:f6:41:
                    8e:38:73:ca:24:0b:d4:0b:2d:2b:03:85:b3:4b:aa:
                    4b:a4:22:9b:00:6f:3a:ce:84:ad:1d:62:92:cf:cc:
                    4c:ed:13:cc:f1:99:f3:d9:14:13:1a:b6:5a:30:47:
                    2a:b3:b8:4f:08:87:80:e2:04:38:7e:e1:ca:38:ea:
                    55:d1:46:4b:ca:cd:09:82:f2:f9:92:45:eb:ba:de:
                    7e:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:F5:3F:A4:74:C3:59:A9:43:C9:93:FA:46:45:C4:76:9C:6C:AB:1A
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7cbc897b-7d5d-4186-85a8-bfab5012a598.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:158e::/47

    Signature Algorithm: sha256WithRSAEncryption
         b2:d3:30:45:19:b4:b9:64:2f:7a:81:80:af:8a:98:7c:a6:20:
         ca:63:34:f0:e0:33:16:82:45:33:9d:1f:46:17:14:f4:a6:72:
         c9:eb:86:5f:45:d8:80:54:b9:74:ed:da:60:c1:05:ec:8c:c8:
         39:d5:88:07:8f:cb:ea:93:75:02:1d:5c:4c:da:f4:78:96:4b:
         79:f6:56:3a:2d:96:47:23:ac:7f:64:92:77:4b:3d:c1:a4:dd:
         c2:cc:8f:a3:f9:e9:9b:25:63:a7:51:b4:bc:9a:9d:bc:22:97:
         b7:cc:de:8c:c0:fc:26:36:e7:0a:c5:12:b2:c1:c1:af:79:a7:
         e4:31:76:a5:b1:d4:cc:0b:c7:f7:7d:68:94:a6:a4:97:9f:76:
         ac:6f:be:71:fd:64:15:19:f0:cc:d1:14:a1:08:5d:bc:2e:05:
         72:40:58:9a:5b:3e:10:0e:8a:d2:97:aa:2c:37:1d:24:ab:fa:
         ca:13:ae:54:3e:52:a4:b7:4a:3b:2e:ff:95:81:67:f7:0f:35:
         94:b2:f8:69:71:f4:b2:e1:01:4e:50:94:a9:66:cb:85:8c:f3:
         56:44:15:f2:81:cc:b8:b8:77:48:9f:d8:b9:77:c1:c0:39:75:
         20:13:b5:7d:7b:4f:88:06:9d:39:c2:dd:ec:a0:3d:ca:e6:27:
         bd:e1:5d:09
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUDGsJHyEuIISNSS3Oqdw+AY74ulUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMwMjExMjA1WhcNMjUxMjA0MjM1OTU5
WjB6MUkwRwYDVQQFE0BiNjhhNjlmMGY1MGFjNWFmNDllYWVmMjZiOTcyNTNkOTAz
N2ZlZTlhOTk5MWQ5ZmM1MDQ0MmYwMzM3N2ZiYTM3MS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDNWfddtXBiWSaD66qlfjzvrbZDbQPhC2995wKORRK2t3hw
IGuNZNdXBEtWMQ8FoCuFOampT1S1eWwxvzzIQey/M/N49FiTwsHLpPDrf6B5atMS
zDqFw7CA4WZsOywOz7SSlRjcQFzEwchVyiLi0AttSzHRFjb5as+SBdyqF9Z7zhGa
WEinL2RqwoOS0e0KFTkPWoGc2YmIcmetoRRIKpIRCxXCUSizkel25O6VoDLELT/2
QY44c8okC9QLLSsDhbNLqkukIpsAbzrOhK0dYpLPzEztE8zxmfPZFBMatlowRyqz
uE8Ih4DiBDh+4co46lXRRkvKzQmC8vmSReu63n7fAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUGvU/pHTDWalDyZP6RkXEdpxsqxowHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzdjYmM4OTdiLTdkNWQtNDE4Ni04NWE4LWJmYWI1MDEyYTU5OC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwEmAJAAFY4wDQYJKoZIhvcNAQELBQADggEBALLTMEUZtLlkL3qBgK+KmHym
IMpjNPDgMxaCRTOdH0YXFPSmcsnrhl9F2IBUuXTt2mDBBeyMyDnViAePy+qTdQId
XEza9HiWS3n2VjotlkcjrH9kkndLPcGk3cLMj6P56ZslY6dRtLyanbwil7fM3ozA
/CY25wrFErLBwa95p+QxdqWx1MwLx/d9aJSmpJefdqxvvnH9ZBUZ8MzRFKEIXbwu
BXJAWJpbPhAOitKXqiw3HSSr+soTrlQ+UqS3Sjsu/5WBZ/cPNZSy+Glx9LLhAU5Q
lKlmy4WM81ZEFfKBzLi4d0if2Ll3wcA5dSATtX17T4gGnTnC3eygPcrmJ73hXQk=
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:27:11 2025 by rpki-client