Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9bd4fdae-90c5-49c4-a6c0-45b8a6534054.roa
File:                     9bd4fdae-90c5-49c4-a6c0-45b8a6534054.roa (raw, json)
Hash identifier:          wieoC0Xhv4qRzTlox7jnLZWn2E4i1pd6b6IECUhLFEg=
Subject key identifier:   50:90:5C:97:17:99:95:46:65:68:DF:A3:F1:25:D9:10:4C:06:1C:8F
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       28CC8334ED77F489DFC8CB190BEBBE2E536621
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9bd4fdae-90c5-49c4-a6c0-45b8a6534054.roa
Signing time:             Thu 30 Oct 2025 20:51:57 +0000
ROA not before:           Thu 30 Oct 2025 20:51:57 +0000
ROA not after:            Thu 04 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1344::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:cc:83:34:ed:77:f4:89:df:c8:cb:19:0b:eb:be:2e:53:66:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 30 20:51:57 2025 GMT
            Not After : Dec  4 23:59:59 2025 GMT
        Subject: serialNumber=da8e814558e7c4d31ffee8141d85acbd11b2ae2b75bce43aec4c0b983bb002a1, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e7:3d:5e:ef:b0:40:bc:4f:21:d9:e8:67:64:
                    ec:9b:76:9e:4b:92:da:c6:89:2c:16:f6:bb:40:ac:
                    48:85:ba:a2:72:a4:1e:a8:be:a1:9e:da:1d:5e:b6:
                    1b:fa:77:e9:9d:c6:10:30:d8:ec:83:5c:41:b6:72:
                    dd:06:ef:98:e1:90:d9:f1:c6:b6:15:c6:10:62:e1:
                    dd:d6:13:31:18:51:6b:83:b6:e6:fe:c0:92:9d:57:
                    e5:7f:99:f5:1c:7d:29:e5:77:0d:1f:7c:7e:5f:6e:
                    63:4d:50:be:0b:eb:f4:6a:0e:4e:9e:a5:7f:fb:4b:
                    19:ee:3a:ca:82:85:ae:99:12:4c:4b:73:98:66:fa:
                    e1:61:15:71:b6:d2:ec:7c:b2:c7:0d:b3:f3:e0:09:
                    8a:7e:75:46:44:75:3a:de:a6:72:5d:ab:22:87:f0:
                    95:a7:57:6f:cc:fd:d3:79:27:4f:03:48:d7:b2:68:
                    9b:e6:18:0a:4d:79:a9:8c:9c:49:c6:5c:00:4a:ec:
                    69:49:52:c4:f7:3f:e6:08:76:32:a1:96:78:09:09:
                    aa:40:23:7f:c9:50:0e:32:20:3d:88:af:3e:3f:83:
                    35:19:bd:88:ff:87:03:2a:4c:2b:d9:c1:bd:f3:64:
                    f5:9f:58:5e:5b:77:df:c1:96:da:4a:e6:3e:bc:b9:
                    f4:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:90:5C:97:17:99:95:46:65:68:DF:A3:F1:25:D9:10:4C:06:1C:8F
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9bd4fdae-90c5-49c4-a6c0-45b8a6534054.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1344::/47

    Signature Algorithm: sha256WithRSAEncryption
         48:fc:ab:ee:80:9c:a2:29:d1:d1:d2:2c:e2:6b:c1:fb:f2:d1:
         cd:fe:e9:2e:9e:22:15:9b:95:92:82:87:3e:49:f4:56:61:bf:
         15:52:cc:87:d8:e5:63:cc:52:64:64:79:14:c7:30:11:1a:a5:
         92:56:71:d5:32:7f:26:c7:df:27:d1:ed:5f:b3:0a:98:77:68:
         1c:e5:14:5b:02:cd:37:af:28:13:26:87:3f:64:76:e8:91:7d:
         b9:92:63:21:97:68:2c:b0:70:51:a7:d4:7c:6a:64:7a:9d:1b:
         3a:c0:b6:29:0a:ca:3c:b6:6e:31:ed:07:ac:3b:4d:c1:a7:15:
         32:35:a4:22:c9:d1:2f:04:38:ff:80:16:1d:c9:d0:a5:68:55:
         fd:c8:e8:85:dc:45:db:d9:fe:ef:cd:4b:39:ae:e3:b5:62:2f:
         0c:db:d8:bb:61:a3:e2:3a:27:58:23:a0:dd:cd:bd:3a:ce:24:
         7f:68:64:71:9b:7b:fc:d2:f6:c0:d5:c1:4a:6f:e8:61:bf:49:
         bf:06:9c:1d:46:e6:e2:bc:92:a3:9c:51:0a:ae:e1:cc:dd:bf:
         02:fb:1f:62:82:a2:07:71:c2:d3:8e:50:2f:26:65:06:88:33:
         2c:81:37:6a:87:f2:d0:f4:bb:72:f3:af:94:2b:2a:6a:df:f0:
         a9:23:f8:ad
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgITKMyDNO139InfyMsZC+u+LlNmITANBgkqhkiG9w0BAQsF
ADA9MTswOQYDVQQDEzI1NTEyMDkwMjdmNWU3YWQ1NGUwNGYwNDJlNGFjMGU5ZTY1
YzU2ZTU1Yzc3NDc4ZDJjZTAeFw0yNTEwMzAyMDUxNTdaFw0yNTEyMDQyMzU5NTla
MHoxSTBHBgNVBAUTQGRhOGU4MTQ1NThlN2M0ZDMxZmZlZTgxNDFkODVhY2JkMTFi
MmFlMmI3NWJjZTQzYWVjNGMwYjk4M2JiMDAyYTExLTArBgNVBAMTJDlmMjMwZmE5
LWFhMmYtNDAyMC1hZTJhLTFhNjAzNzQwODRiODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMvnPV7vsEC8TyHZ6Gdk7Jt2nkuS2saJLBb2u0CsSIW6onKk
Hqi+oZ7aHV62G/p36Z3GEDDY7INcQbZy3QbvmOGQ2fHGthXGEGLh3dYTMRhRa4O2
5v7Akp1X5X+Z9Rx9KeV3DR98fl9uY01Qvgvr9GoOTp6lf/tLGe46yoKFrpkSTEtz
mGb64WEVcbbS7Hyyxw2z8+AJin51RkR1Ot6mcl2rIofwladXb8z903knTwNI17Jo
m+YYCk15qYycScZcAErsaUlSxPc/5gh2MqGWeAkJqkAjf8lQDjIgPYivPj+DNRm9
iP+HAypMK9nBvfNk9Z9YXlt338GW2krmPry59LUCAwEAAaOCArQwggKwMB0GA1Ud
DgQWBBRQkFyXF5mVRmVo36PxJdkQTAYcjzAfBgNVHSMEGDAWgBTo88Ug4g7yXTq3
oha7FAQxajc48TAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg
BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy
aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv
ZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5Lzk5ZjhmZWQyLTI5
MmItNDcyMi1iOTI4LWZlZTdiZjBhNTkxMC81NTEyMDkwMjdmNWU3YWQ1NGUwNGYw
NDJlNGFjMGU5ZTY1YzU2ZTU1Yzc3NDc4ZDJjZS5jZXIwgZ4GCCsGAQUFBwELBIGR
MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS9lNzUxOGFmNS1hMzQzLTQyOGQtYmY3OC1mOTgy
YjZlNjA1MDUvOWJkNGZkYWUtOTBjNS00OWM0LWE2YzAtNDViOGE2NTM0MDU0LnJv
YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0
LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgt
Zjk4MmI2ZTYwNTA1L1huclZUZ1R3UXVTc0RwNWx4VzVWeDNSNDBzNC5jcmwwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIw
CQMHASYAkAATRDANBgkqhkiG9w0BAQsFAAOCAQEASPyr7oCcoinR0dIs4mvB+/LR
zf7pLp4iFZuVkoKHPkn0VmG/FVLMh9jlY8xSZGR5FMcwERqlklZx1TJ/JsffJ9Ht
X7MKmHdoHOUUWwLNN68oEyaHP2R26JF9uZJjIZdoLLBwUafUfGpkep0bOsC2KQrK
PLZuMe0HrDtNwacVMjWkIsnRLwQ4/4AWHcnQpWhV/cjohdxF29n+781LOa7jtWIv
DNvYu2Gj4jonWCOg3c29Os4kf2hkcZt7/NL2wNXBSm/oYb9JvwacHUbm4rySo5xR
Cq7hzN2/AvsfYoKiB3HC045QLyZlBogzLIE3aofy0PS7cvOvlCsqat/wqSP4rQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:36:35 2025 by rpki-client