Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8baee1a9-210e-46e7-b79f-0fa1e32c70c9.roa
File:                     8baee1a9-210e-46e7-b79f-0fa1e32c70c9.roa (raw, json)
Hash identifier:          jzc/quxB79xVg+7tLxQM0WB4aohCaYR0zv3yF67kBl4=
Subject key identifier:   39:FD:80:D6:A5:45:30:82:08:35:C4:D3:E5:04:A4:26:87:ED:07:49
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       1D72D646612AAA7EBEA145CEC2AAF52D24B148A3
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8baee1a9-210e-46e7-b79f-0fa1e32c70c9.roa
Signing time:             Tue 28 Oct 2025 00:00:17 +0000
ROA not before:           Tue 28 Oct 2025 00:00:17 +0000
ROA not after:            Tue 02 Dec 2025 23:59:59 +0000
asID:                     19047
IP address blocks:        2605:b940:3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:72:d6:46:61:2a:aa:7e:be:a1:45:ce:c2:aa:f5:2d:24:b1:48:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 28 00:00:17 2025 GMT
            Not After : Dec  2 23:59:59 2025 GMT
        Subject: serialNumber=16626f725af59334e78673ec30a37527c72e57c852da76085e52c2e7a0c7b2c6, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:63:d7:a4:0b:10:7d:04:a8:d6:eb:1c:0e:02:
                    d4:ca:0f:d1:d2:28:92:93:90:ea:61:91:6b:30:21:
                    76:e1:1c:3a:c8:71:77:eb:10:fb:f4:0f:42:52:36:
                    a6:ab:8f:e5:2d:76:6a:d3:07:d4:5c:62:6a:1f:7e:
                    67:61:82:98:ee:07:e0:2b:cc:5d:28:d0:7e:8c:5e:
                    1e:75:50:0d:d2:07:32:11:65:35:e3:c1:01:5b:df:
                    9a:19:18:67:3a:1a:90:de:9c:54:6e:2f:e4:27:3b:
                    53:a3:c3:1a:d4:fc:55:27:d6:e7:69:e5:a6:71:a1:
                    cc:1e:7e:6d:4f:f6:fe:50:9c:f6:88:6c:38:d0:f3:
                    fb:e6:34:0b:8a:c9:12:6a:3b:b1:5e:1b:cc:63:e1:
                    1d:dd:c4:57:0e:c2:df:98:79:bb:b4:7e:c2:2b:9c:
                    89:e9:50:d8:24:3b:ec:30:7c:41:bd:11:fa:1e:32:
                    ed:50:cd:96:6e:94:d3:eb:e5:17:62:2a:08:45:56:
                    e7:d9:3e:ad:94:6e:fb:e7:6b:d4:20:ac:a3:71:ce:
                    d0:e8:a5:1e:28:5d:4a:65:6d:74:db:cc:d0:a1:83:
                    eb:d2:37:8e:78:8b:c1:fe:aa:5e:cb:03:d3:1d:72:
                    87:5c:60:a9:8f:03:14:8d:bb:ab:56:c2:7d:33:3b:
                    9d:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:FD:80:D6:A5:45:30:82:08:35:C4:D3:E5:04:A4:26:87:ED:07:49
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8baee1a9-210e-46e7-b79f-0fa1e32c70c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:b940:3::/48

    Signature Algorithm: sha256WithRSAEncryption
         1e:67:12:74:c6:23:f8:65:89:cc:2f:e6:ca:8f:67:fd:40:62:
         a5:d7:60:c4:6e:6e:5b:79:1b:d1:6f:76:1c:b4:f4:f8:2b:b8:
         29:41:58:d4:91:f6:c3:79:a5:03:4c:a5:65:0b:34:54:d5:15:
         27:59:b1:42:c4:86:0a:28:4a:7d:71:ba:26:5d:1d:74:f3:d1:
         28:ff:85:67:32:41:08:b2:65:90:bc:c7:66:ff:34:7a:3f:25:
         dd:91:c1:5b:1d:06:39:eb:c9:b9:9a:76:1e:fe:9d:16:3b:b2:
         36:50:88:da:08:9b:58:47:bb:7c:7a:ec:e8:5d:bc:9a:4a:d7:
         93:3c:9d:95:a7:90:28:5f:b8:49:f1:6c:a2:90:4b:14:c8:b0:
         5c:bc:9b:99:d9:06:76:60:b2:37:fb:96:84:ab:4c:20:1e:27:
         85:66:0a:61:db:bc:88:c6:62:c2:14:d8:83:52:89:fc:2b:74:
         bd:a8:c9:96:ea:7a:dc:24:31:0e:53:95:12:54:38:12:68:b9:
         1e:c6:15:84:f0:81:e7:1d:54:30:eb:2b:ac:31:a3:14:da:7d:
         2f:f3:b8:35:35:8c:db:09:5f:94:7b:85:15:c9:2f:77:d9:6b:
         7d:e2:e2:3c:05:e2:39:e7:fa:17:94:ec:89:9d:84:b2:61:ef:
         ea:bc:62:78
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUHXLWRmEqqn6+oUXOwqr1LSSxSKMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDI4MDAwMDE3WhcNMjUxMjAyMjM1OTU5
WjB6MUkwRwYDVQQFE0AxNjYyNmY3MjVhZjU5MzM0ZTc4NjczZWMzMGEzNzUyN2M3
MmU1N2M4NTJkYTc2MDg1ZTUyYzJlN2EwYzdiMmM2MS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCjY9ekCxB9BKjW6xwOAtTKD9HSKJKTkOphkWswIXbhHDrI
cXfrEPv0D0JSNqarj+UtdmrTB9RcYmoffmdhgpjuB+ArzF0o0H6MXh51UA3SBzIR
ZTXjwQFb35oZGGc6GpDenFRuL+QnO1OjwxrU/FUn1udp5aZxocwefm1P9v5QnPaI
bDjQ8/vmNAuKyRJqO7FeG8xj4R3dxFcOwt+Yebu0fsIrnInpUNgkO+wwfEG9Efoe
Mu1QzZZulNPr5RdiKghFVufZPq2Ubvvna9QgrKNxztDopR4oXUplbXTbzNChg+vS
N454i8H+ql7LA9MdcodcYKmPAxSNu6tWwn0zO51BAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUOf2A1qVFMIIINcTT5QSkJoftB0kwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzhiYWVlMWE5LTIxMGUtNDZlNy1iNzlmLTBmYTFlMzJjNzBjOS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmBblAAAMwDQYJKoZIhvcNAQELBQADggEBAB5nEnTGI/hlicwv5sqPZ/1A
YqXXYMRublt5G9Fvdhy09PgruClBWNSR9sN5pQNMpWULNFTVFSdZsULEhgooSn1x
uiZdHXTz0Sj/hWcyQQiyZZC8x2b/NHo/Jd2RwVsdBjnrybmadh7+nRY7sjZQiNoI
m1hHu3x67OhdvJpK15M8nZWnkChfuEnxbKKQSxTIsFy8m5nZBnZgsjf7loSrTCAe
J4VmCmHbvIjGYsIU2INSifwrdL2oyZbqetwkMQ5TlRJUOBJouR7GFYTwgecdVDDr
K6wxoxTafS/zuDU1jNsJX5R7hRXJL3fZa33i4jwF4jnn+heU7ImdhLJh7+q8Yng=
-----END CERTIFICATE-----
Generated at Wed Nov 5 02:55:19 2025 by rpki-client