Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8f6981ca-b372-4a63-b30e-862d8be54194.roa
File:                     8f6981ca-b372-4a63-b30e-862d8be54194.roa (raw, json)
Hash identifier:          qFkYrrXNyupcMoTJlll0/RLwd34sDpBaAAblm3jOz/c=
Subject key identifier:   3A:B0:27:6E:49:FF:C8:F9:24:19:A8:F5:22:CE:AB:1A:5A:2E:BA:80
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       63F7E32B7AB48594C83EF930D8F40192EACC1633
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8f6981ca-b372-4a63-b30e-862d8be54194.roa
Signing time:             Fri 31 Oct 2025 03:11:47 +0000
ROA not before:           Fri 31 Oct 2025 03:11:47 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1ddc::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Nov 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:f7:e3:2b:7a:b4:85:94:c8:3e:f9:30:d8:f4:01:92:ea:cc:16:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 03:11:47 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=66b3b0474efb471423e7473486de92191a7c11f090715ab845499d0b0c65c34e, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:5f:40:d5:da:54:a0:ed:0e:77:5a:fa:94:a3:
                    28:25:b2:5c:30:53:fc:ba:87:0f:19:43:0a:56:d7:
                    0b:ed:40:82:82:1e:c2:62:b7:4e:d8:3d:6e:2b:5f:
                    f8:47:e3:02:dd:68:6d:4c:c5:8d:e3:41:52:88:ee:
                    67:1c:32:20:1f:1a:6b:4a:c3:d0:3b:25:14:12:87:
                    b6:22:0c:e3:eb:90:d6:b3:76:ec:cb:36:b9:04:be:
                    14:fd:6c:2f:03:61:55:92:15:62:0d:d0:73:a6:95:
                    11:62:03:55:f2:ef:ce:67:86:2e:fe:5c:5d:fd:83:
                    22:3f:85:88:73:58:09:97:ea:29:ae:b3:63:b1:fe:
                    89:2d:4e:cc:d4:ce:8c:67:48:ab:11:4c:8b:b6:6b:
                    d1:df:81:a4:e1:b8:94:48:db:29:8a:04:69:1a:a0:
                    e3:fb:86:8b:1f:d4:c8:29:8e:3b:93:41:44:f1:fa:
                    59:f9:42:f2:b4:c0:77:fb:0d:ea:2f:7d:89:41:10:
                    70:3f:98:ee:8f:1b:d8:dd:81:a9:3e:61:1b:ec:46:
                    1c:4a:63:12:94:74:c7:65:1f:5c:a9:30:5d:74:90:
                    4c:7e:1b:83:be:2c:cb:f1:7a:81:e5:6e:1f:38:b7:
                    dc:bb:53:26:06:42:ef:00:be:36:83:6c:d3:a3:dc:
                    06:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:B0:27:6E:49:FF:C8:F9:24:19:A8:F5:22:CE:AB:1A:5A:2E:BA:80
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8f6981ca-b372-4a63-b30e-862d8be54194.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1ddc::/46

    Signature Algorithm: sha256WithRSAEncryption
         9e:4a:b2:13:d4:75:f2:91:f5:a9:58:0d:27:58:e0:49:ab:1f:
         03:ad:3b:1d:58:fe:7e:8a:85:5e:72:40:04:c0:42:d7:22:61:
         11:aa:4c:3d:f2:e0:c3:1e:93:8d:cd:0d:f4:5b:f6:35:e4:6e:
         70:a6:91:78:eb:47:8d:a1:ee:87:39:51:db:a6:2b:a2:7f:f4:
         0a:c0:4f:2f:dd:35:c4:fa:4a:6b:69:3e:15:c4:ed:11:5f:08:
         5e:8a:98:f3:30:94:97:2f:1e:c2:ac:6c:be:f1:b2:a8:c9:79:
         49:72:3b:b7:ef:81:b0:fa:33:7a:8c:08:3a:22:40:d6:61:1f:
         c7:ba:b5:f4:b4:7b:32:91:e2:45:3d:e1:92:4f:38:e5:50:33:
         6a:95:39:f0:61:c0:a9:00:3a:15:2e:17:65:13:51:e0:db:bd:
         01:06:12:46:03:85:d0:c4:91:62:03:b1:2c:07:85:c6:49:1c:
         db:b8:7b:8a:f6:09:37:bc:6c:08:a8:52:f0:f6:a3:b3:74:50:
         8a:ec:7d:ff:e3:9e:b0:d6:d3:ae:bd:61:32:59:75:05:bf:75:
         02:a2:97:c6:0c:02:53:e5:44:07:53:76:d2:6e:b0:3e:ea:c5:
         80:a9:19:63:54:47:78:1e:cd:2c:72:af:bc:17:96:1e:46:f8:
         14:2c:d6:d3
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUY/fjK3q0hZTIPvkw2PQBkurMFjMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDMxMTQ3WhcNMjUxMjA1MjM1OTU5
WjB6MUkwRwYDVQQFE0A2NmIzYjA0NzRlZmI0NzE0MjNlNzQ3MzQ4NmRlOTIxOTFh
N2MxMWYwOTA3MTVhYjg0NTQ5OWQwYjBjNjVjMzRlMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCbX0DV2lSg7Q53WvqUoyglslwwU/y6hw8ZQwpW1wvtQIKC
HsJit07YPW4rX/hH4wLdaG1MxY3jQVKI7mccMiAfGmtKw9A7JRQSh7YiDOPrkNaz
duzLNrkEvhT9bC8DYVWSFWIN0HOmlRFiA1Xy785nhi7+XF39gyI/hYhzWAmX6imu
s2Ox/oktTszUzoxnSKsRTIu2a9HfgaThuJRI2ymKBGkaoOP7hosf1MgpjjuTQUTx
+ln5QvK0wHf7DeovfYlBEHA/mO6PG9jdgak+YRvsRhxKYxKUdMdlH1ypMF10kEx+
G4O+LMvxeoHlbh84t9y7UyYGQu8AvjaDbNOj3AaZAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUOrAnbkn/yPkkGaj1Is6rGlouuoAwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzhmNjk4MWNhLWIzNzItNGE2My1iMzBlLTg2MmQ4YmU1NDE5NC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwImAJAAHdwwDQYJKoZIhvcNAQELBQADggEBAJ5KshPUdfKR9alYDSdY4Emr
HwOtOx1Y/n6KhV5yQATAQtciYRGqTD3y4MMek43NDfRb9jXkbnCmkXjrR42h7oc5
UdumK6J/9ArATy/dNcT6SmtpPhXE7RFfCF6KmPMwlJcvHsKsbL7xsqjJeUlyO7fv
gbD6M3qMCDoiQNZhH8e6tfS0ezKR4kU94ZJPOOVQM2qVOfBhwKkAOhUuF2UTUeDb
vQEGEkYDhdDEkWIDsSwHhcZJHNu4e4r2CTe8bAioUvD2o7N0UIrsff/jnrDW0669
YTJZdQW/dQKil8YMAlPlRAdTdtJusD7qxYCpGWNUR3gezSxyr7wXlh5G+BQs1tM=
-----END CERTIFICATE-----
Generated at Wed Nov 5 16:56:38 2025 by rpki-client