Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a63f4128-f1c3-4f99-8b76-cb5e83e0962c.roa
File:                     a63f4128-f1c3-4f99-8b76-cb5e83e0962c.roa (raw, json)
Hash identifier:          jqPd3k9VzWNB01ok2ZZnZdt6wNH2Lu0PZCcmPBkPmRA=
Subject key identifier:   7A:50:FB:46:3E:A0:04:BF:A6:96:96:F1:E1:86:28:25:C3:11:49:BA
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       3F0B1110F763BD7637782C40DD532C7E25F58FFB
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a63f4128-f1c3-4f99-8b76-cb5e83e0962c.roa
Signing time:             Fri 31 Oct 2025 07:11:28 +0000
ROA not before:           Fri 31 Oct 2025 07:11:28 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1640::/43 maxlen: 43
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:0b:11:10:f7:63:bd:76:37:78:2c:40:dd:53:2c:7e:25:f5:8f:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 07:11:28 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=71713f513720b8195fc8e22e9fabceaede4d74bcdadf017f11c38c9df8d3bf31, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:bb:87:c5:cd:0f:b7:bd:42:ab:ee:72:aa:cd:
                    6b:94:3d:93:55:45:ed:89:06:50:e0:6e:14:ca:58:
                    dc:45:76:5e:45:fd:77:b3:e4:b4:93:b9:ee:ad:2e:
                    20:a9:16:c6:00:60:b6:b2:dc:12:8a:32:58:16:bd:
                    a6:c0:2c:8b:f0:53:dc:36:df:b9:ba:00:1c:43:88:
                    2d:8e:28:a3:b7:c7:67:97:0d:ff:d3:00:7c:a4:76:
                    cf:00:84:06:85:17:a1:bb:34:df:1e:e8:51:49:07:
                    ab:e9:90:23:bb:dd:b4:e4:fc:4c:00:44:1d:56:4d:
                    27:8f:c9:90:62:2a:ef:db:86:ac:af:3e:79:d0:bc:
                    fa:9c:59:94:92:92:fa:10:95:cb:5e:c7:6d:db:92:
                    1d:4f:27:80:0d:47:80:d5:03:03:1a:50:b3:b1:51:
                    95:ef:7d:93:36:b0:54:e1:18:09:21:6b:cf:2e:86:
                    6e:2d:4b:0a:49:6f:44:7e:28:fc:b1:e3:b5:f2:38:
                    2e:87:d4:67:97:8b:df:0a:69:7f:70:b6:7c:4c:95:
                    1f:d5:e0:55:08:76:b2:9f:ee:b7:9c:69:fd:79:98:
                    f1:78:4b:2a:d9:14:8a:fa:aa:07:6b:0c:a2:4e:c5:
                    0e:75:07:46:3a:37:c4:c6:4e:f2:86:b8:54:b2:b4:
                    0c:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:50:FB:46:3E:A0:04:BF:A6:96:96:F1:E1:86:28:25:C3:11:49:BA
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a63f4128-f1c3-4f99-8b76-cb5e83e0962c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1640::/43

    Signature Algorithm: sha256WithRSAEncryption
         0f:ab:a8:58:48:00:ae:7d:da:74:7b:df:dd:0c:0f:34:5b:26:
         fd:d6:1a:59:1d:88:ec:99:5d:22:67:19:c5:89:f7:75:0f:fd:
         7c:b6:b2:ab:c5:d2:a7:92:41:ca:dc:16:e6:41:16:50:22:5e:
         e1:cb:30:5d:4b:45:85:e4:24:e2:14:91:38:50:37:96:a0:8f:
         38:8e:54:94:5f:fc:02:28:fe:dd:19:a6:e1:78:ef:c9:a5:a6:
         cb:62:bf:25:e2:f3:87:74:62:cc:c5:54:90:88:e4:4f:75:39:
         c2:58:1d:9f:69:88:49:8f:f7:01:33:7e:31:69:ce:50:29:de:
         65:94:46:13:19:a8:9f:f5:44:54:69:13:2e:02:75:d5:fc:f0:
         1e:3b:3d:e6:2f:c7:16:b7:d6:1a:09:da:5b:e5:b0:80:43:ac:
         b6:c2:04:32:fc:35:65:2f:6a:1d:e7:3b:ba:0d:56:00:24:14:
         2d:95:cb:d0:28:a8:f6:85:d8:fc:15:b6:56:48:4b:d3:04:ec:
         3f:a8:7b:5c:33:8f:c8:ee:dd:67:58:69:d2:8d:8e:2c:28:ab:
         c3:11:4b:e7:77:20:ec:44:ae:d0:45:8d:c5:1d:58:cc:ea:db:
         fc:d2:4f:d4:7b:01:2f:ad:25:12:62:ea:7f:62:f6:16:c6:49:
         98:88:42:4c
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUPwsREPdjvXY3eCxA3VMsfiX1j/swDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDcxMTI4WhcNMjUxMjA1MjM1OTU5
WjB6MUkwRwYDVQQFE0A3MTcxM2Y1MTM3MjBiODE5NWZjOGUyMmU5ZmFiY2VhZWRl
NGQ3NGJjZGFkZjAxN2YxMWMzOGM5ZGY4ZDNiZjMxMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC5u4fFzQ+3vUKr7nKqzWuUPZNVRe2JBlDgbhTKWNxFdl5F
/Xez5LSTue6tLiCpFsYAYLay3BKKMlgWvabALIvwU9w237m6ABxDiC2OKKO3x2eX
Df/TAHykds8AhAaFF6G7NN8e6FFJB6vpkCO73bTk/EwARB1WTSePyZBiKu/bhqyv
PnnQvPqcWZSSkvoQlctex23bkh1PJ4ANR4DVAwMaULOxUZXvfZM2sFThGAkha88u
hm4tSwpJb0R+KPyx47XyOC6H1GeXi98KaX9wtnxMlR/V4FUIdrKf7recaf15mPF4
SyrZFIr6qgdrDKJOxQ51B0Y6N8TGTvKGuFSytAzjAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUelD7Rj6gBL+mlpbx4YYoJcMRSbowHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1L2E2M2Y0MTI4LWYxYzMtNGY5OS04Yjc2LWNiNWU4M2UwOTYyYy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwUmAJAAFkAwDQYJKoZIhvcNAQELBQADggEBAA+rqFhIAK592nR7390MDzRb
Jv3WGlkdiOyZXSJnGcWJ93UP/Xy2sqvF0qeSQcrcFuZBFlAiXuHLMF1LRYXkJOIU
kThQN5agjziOVJRf/AIo/t0ZpuF478mlpstivyXi84d0YszFVJCI5E91OcJYHZ9p
iEmP9wEzfjFpzlAp3mWURhMZqJ/1RFRpEy4CddX88B47PeYvxxa31hoJ2lvlsIBD
rLbCBDL8NWUvah3nO7oNVgAkFC2Vy9AoqPaF2PwVtlZIS9ME7D+oe1wzj8ju3WdY
adKNjiwoq8MRS+d3IOxErtBFjcUdWMzq2/zST9R7AS+tJRJi6n9i9hbGSZiIQkw=
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:42:37 2025 by rpki-client