Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/92dcb21a-c738-4f1a-b533-4d4231ba7451.roa
File:                     92dcb21a-c738-4f1a-b533-4d4231ba7451.roa (raw, json)
Hash identifier:          H6Kqk7fcLSe/R2q2RNE+5IpgrnCbVvH4xYRq2W4cu5g=
Subject key identifier:   AC:5B:8A:E6:9C:5E:74:C2:AB:AD:CB:DE:CE:7D:BF:EA:5D:31:24:E1
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       49715F361A7E7DA47839F0DD977EEF9DD853C1E5
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/92dcb21a-c738-4f1a-b533-4d4231ba7451.roa
Signing time:             Thu 30 Oct 2025 20:52:10 +0000
ROA not before:           Thu 30 Oct 2025 20:52:10 +0000
ROA not after:            Thu 04 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1372::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:71:5f:36:1a:7e:7d:a4:78:39:f0:dd:97:7e:ef:9d:d8:53:c1:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 30 20:52:10 2025 GMT
            Not After : Dec  4 23:59:59 2025 GMT
        Subject: serialNumber=cf8951a3f6d4955f117b83a5e448480b4b7e84b6db9a32884c6b711116658cc8, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ee:de:a1:04:a2:cb:87:b7:b7:ac:73:47:5e:
                    b4:17:01:27:6b:43:3b:f9:b1:52:33:50:d9:43:9d:
                    7b:bc:23:32:09:6f:ad:61:f8:20:3e:ca:3d:6a:d2:
                    83:36:79:67:d3:62:3d:a4:e6:92:b8:88:90:0b:3b:
                    33:a2:2d:b8:ee:19:f0:7c:ad:a8:30:23:47:2e:b5:
                    a9:da:13:98:a2:bc:63:05:c8:27:96:8f:0a:02:b5:
                    ae:b6:07:17:de:99:7b:1b:e0:52:88:9a:cf:0a:4f:
                    2e:8d:9e:d9:0f:d8:a2:0d:e9:f4:cb:9b:a3:d1:42:
                    79:ae:cb:c2:25:15:ec:06:fd:ef:0d:89:1f:9f:bc:
                    60:46:32:33:46:0d:36:76:5a:82:65:82:ea:b6:69:
                    c7:8a:34:d9:89:74:60:4e:b7:b3:b5:c6:61:96:21:
                    41:e9:6a:fb:6e:e1:90:4a:56:33:20:1e:8d:48:75:
                    5b:4d:74:a1:33:0f:30:07:de:80:43:b3:e8:c4:a4:
                    c4:08:91:7e:38:d8:60:68:04:cc:c7:a0:03:dc:9c:
                    e0:2c:d5:51:60:b7:83:4a:7f:25:a4:49:41:c4:4f:
                    77:13:af:2a:9f:bf:b8:d6:7a:9d:20:5d:2a:17:05:
                    18:2a:8c:e1:41:c7:c1:af:a9:35:12:f8:af:ab:f4:
                    b8:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:5B:8A:E6:9C:5E:74:C2:AB:AD:CB:DE:CE:7D:BF:EA:5D:31:24:E1
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/92dcb21a-c738-4f1a-b533-4d4231ba7451.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1372::/47

    Signature Algorithm: sha256WithRSAEncryption
         81:62:fb:b2:22:d6:04:05:9d:07:69:35:2c:0c:24:6c:ac:b7:
         b6:80:45:15:0d:bc:9a:98:ee:4e:a7:ed:22:c1:0f:0b:4d:e2:
         20:f8:3a:60:aa:73:7a:08:03:4f:62:26:9e:5a:6b:0e:33:62:
         b9:f7:88:39:39:69:b6:9d:b6:cc:95:7f:d6:45:4b:45:40:4d:
         68:37:60:f9:3d:2d:33:dc:68:21:67:c7:03:d9:a9:e8:51:35:
         81:f7:bd:cf:35:35:62:90:89:fb:97:1d:96:dd:bd:55:31:16:
         a0:8f:7d:82:7f:0b:0b:10:31:a4:55:51:cb:be:bd:38:d6:62:
         d5:2b:8d:38:a2:a2:dd:6e:df:41:14:50:76:6a:f8:55:90:b0:
         e9:92:54:7e:c3:39:ee:54:c0:9b:db:c4:88:8d:8c:d5:04:a2:
         4e:40:f1:05:fa:3c:dc:3f:7e:de:fe:49:88:57:30:4c:57:84:
         84:f5:da:f1:c4:9d:61:5a:54:40:ab:88:25:d5:96:69:85:20:
         07:da:7a:c3:33:d2:57:ed:0b:33:e1:6b:12:2d:1e:2f:de:04:
         2f:7a:dd:12:09:31:40:fc:ca:d5:3f:54:00:6f:78:09:41:34:
         42:48:7d:7b:c1:08:d8:a6:65:d8:c4:5f:b7:2f:91:93:70:2e:
         f6:9d:24:d7
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUSXFfNhp+faR4OfDdl37vndhTweUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMwMjA1MjEwWhcNMjUxMjA0MjM1OTU5
WjB6MUkwRwYDVQQFE0BjZjg5NTFhM2Y2ZDQ5NTVmMTE3YjgzYTVlNDQ4NDgwYjRi
N2U4NGI2ZGI5YTMyODg0YzZiNzExMTE2NjU4Y2M4MS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDO7t6hBKLLh7e3rHNHXrQXASdrQzv5sVIzUNlDnXu8IzIJ
b61h+CA+yj1q0oM2eWfTYj2k5pK4iJALOzOiLbjuGfB8ragwI0cutanaE5iivGMF
yCeWjwoCta62BxfemXsb4FKIms8KTy6NntkP2KIN6fTLm6PRQnmuy8IlFewG/e8N
iR+fvGBGMjNGDTZ2WoJlguq2aceKNNmJdGBOt7O1xmGWIUHpavtu4ZBKVjMgHo1I
dVtNdKEzDzAH3oBDs+jEpMQIkX442GBoBMzHoAPcnOAs1VFgt4NKfyWkSUHET3cT
ryqfv7jWep0gXSoXBRgqjOFBx8GvqTUS+K+r9Lh5AgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUrFuK5pxedMKrrcvezn2/6l0xJOEwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzkyZGNiMjFhLWM3MzgtNGYxYS1iNTMzLTRkNDIzMWJhNzQ1MS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwEmAJAAE3IwDQYJKoZIhvcNAQELBQADggEBAIFi+7Ii1gQFnQdpNSwMJGys
t7aARRUNvJqY7k6n7SLBDwtN4iD4OmCqc3oIA09iJp5aaw4zYrn3iDk5abadtsyV
f9ZFS0VATWg3YPk9LTPcaCFnxwPZqehRNYH3vc81NWKQifuXHZbdvVUxFqCPfYJ/
CwsQMaRVUcu+vTjWYtUrjTiiot1u30EUUHZq+FWQsOmSVH7DOe5UwJvbxIiNjNUE
ok5A8QX6PNw/ft7+SYhXMExXhIT12vHEnWFaVECriCXVlmmFIAfaesMz0lftCzPh
axItHi/eBC963RIJMUD8ytU/VABveAlBNEJIfXvBCNimZdjEX7cvkZNwLvadJNc=
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:36:47 2025 by rpki-client