Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/acae14dd-1fa8-4a00-a189-7cb79498fd94.roa
File:                     acae14dd-1fa8-4a00-a189-7cb79498fd94.roa (raw, json)
Hash identifier:          LQlesLNV02UU2VyU7qwE2o/8c9aNBDLSNZjkFXKhV0w=
Subject key identifier:   ED:2A:19:2B:43:18:B5:DC:50:C2:CC:48:6C:1A:92:A1:DE:D0:41:5B
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       05BCCAE3420FD4529C723B3861A4AE77C617C8CD
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/acae14dd-1fa8-4a00-a189-7cb79498fd94.roa
Signing time:             Fri 31 Oct 2025 00:51:39 +0000
ROA not before:           Fri 31 Oct 2025 00:51:39 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:378a::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:bc:ca:e3:42:0f:d4:52:9c:72:3b:38:61:a4:ae:77:c6:17:c8:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 00:51:39 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=2fea5cc6e1fd5e9f563fb297bc9952a6e28d1afc5ceedea1b5eb1f9a2847b9f6, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d4:ee:77:f9:b9:79:1c:4c:96:04:47:6c:f8:
                    fb:31:b1:ac:cb:c2:6b:57:74:b5:db:72:45:88:2d:
                    fe:a7:86:e5:64:f3:14:70:48:79:27:a2:5e:42:d2:
                    42:87:d7:17:2a:03:b6:f7:9b:99:c9:25:63:80:61:
                    b6:ec:18:6e:a9:09:a4:54:26:4e:95:50:4c:3f:6d:
                    66:96:d6:30:3c:39:ce:d4:b6:9e:aa:c8:7d:c2:05:
                    b4:71:fa:7b:65:42:1c:ee:d9:8f:3d:22:88:c9:37:
                    ee:56:3f:31:87:73:9c:11:2f:48:c5:c6:f9:fc:3b:
                    2a:fa:da:d1:d3:f0:0d:2d:10:e3:32:5f:e6:c4:68:
                    5e:f0:18:dc:ee:e5:bb:eb:70:b2:db:84:9f:99:12:
                    fc:0c:36:12:33:e4:29:a0:35:f0:88:bd:ce:c3:6e:
                    23:b0:c1:2f:a4:35:80:8b:46:ae:b3:bf:63:64:1f:
                    d5:6c:8c:a5:8d:26:ec:7e:1d:84:1c:d7:2d:e1:19:
                    97:b2:d8:ac:05:83:e1:15:40:23:71:f9:22:69:f2:
                    95:14:af:f8:7c:c1:33:78:5c:f7:22:39:20:60:39:
                    b5:23:18:0b:67:d9:ec:5b:f6:72:3f:6a:2a:82:0c:
                    98:b7:9a:cf:ce:ab:f6:26:75:59:56:f9:e4:55:e7:
                    25:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:2A:19:2B:43:18:B5:DC:50:C2:CC:48:6C:1A:92:A1:DE:D0:41:5B
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/acae14dd-1fa8-4a00-a189-7cb79498fd94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:378a::/47

    Signature Algorithm: sha256WithRSAEncryption
         38:07:85:00:0e:d3:44:77:ce:57:7e:db:7b:71:dd:c0:4b:f9:
         50:8b:b0:3e:6b:2e:63:af:f6:67:cb:0a:c2:2f:cd:8d:70:e3:
         f6:c7:65:7e:7a:6f:9e:51:0f:b0:a4:ac:cc:30:fa:f9:b8:41:
         89:c1:d7:02:00:e9:40:fc:b4:7e:f7:8a:8e:aa:5c:65:43:8f:
         55:0f:e6:39:f0:d3:f0:73:ee:6f:4e:db:c9:35:1d:06:a7:55:
         fc:0e:1e:00:03:67:87:28:35:31:1b:52:e7:a1:93:f6:b3:e5:
         85:c0:68:b0:19:86:c8:e7:89:d4:1c:19:ac:bd:73:90:d8:fe:
         95:a4:e2:84:fc:6d:78:49:a9:8f:05:f8:e9:f0:2e:f0:20:05:
         ba:71:83:7a:13:a8:1e:16:2b:b0:f2:d2:57:02:91:6c:bd:1b:
         eb:57:8c:98:7e:4f:d4:c7:27:46:b6:39:82:aa:a8:a4:12:1e:
         1f:d4:f6:90:54:a8:9b:ad:49:67:9d:36:11:a8:cb:53:5f:76:
         f9:f7:26:37:be:39:d4:52:7c:d0:a2:76:ca:51:5f:b5:0a:de:
         07:31:45:80:c1:e9:db:17:e7:2b:e0:11:76:89:78:2e:26:11:
         66:6a:0d:20:a1:e9:d3:98:59:4a:e5:d4:29:54:37:90:5e:f5:
         4d:1f:ee:9a
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUBbzK40IP1FKccjs4YaSud8YXyM0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDA1MTM5WhcNMjUxMjA1MjM1OTU5
WjB6MUkwRwYDVQQFE0AyZmVhNWNjNmUxZmQ1ZTlmNTYzZmIyOTdiYzk5NTJhNmUy
OGQxYWZjNWNlZWRlYTFiNWViMWY5YTI4NDdiOWY2MS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCn1O53+bl5HEyWBEds+PsxsazLwmtXdLXbckWILf6nhuVk
8xRwSHknol5C0kKH1xcqA7b3m5nJJWOAYbbsGG6pCaRUJk6VUEw/bWaW1jA8Oc7U
tp6qyH3CBbRx+ntlQhzu2Y89IojJN+5WPzGHc5wRL0jFxvn8Oyr62tHT8A0tEOMy
X+bEaF7wGNzu5bvrcLLbhJ+ZEvwMNhIz5CmgNfCIvc7DbiOwwS+kNYCLRq6zv2Nk
H9VsjKWNJux+HYQc1y3hGZey2KwFg+EVQCNx+SJp8pUUr/h8wTN4XPciOSBgObUj
GAtn2exb9nI/aiqCDJi3ms/Oq/YmdVlW+eRV5yVRAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQU7SoZK0MYtdxQwsxIbBqSod7QQVswHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1L2FjYWUxNGRkLTFmYTgtNGEwMC1hMTg5LTdjYjc5NDk4ZmQ5NC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwEmAJAAN4owDQYJKoZIhvcNAQELBQADggEBADgHhQAO00R3zld+23tx3cBL
+VCLsD5rLmOv9mfLCsIvzY1w4/bHZX56b55RD7CkrMww+vm4QYnB1wIA6UD8tH73
io6qXGVDj1UP5jnw0/Bz7m9O28k1HQanVfwOHgADZ4coNTEbUuehk/az5YXAaLAZ
hsjnidQcGay9c5DY/pWk4oT8bXhJqY8F+OnwLvAgBbpxg3oTqB4WK7Dy0lcCkWy9
G+tXjJh+T9THJ0a2OYKqqKQSHh/U9pBUqJutSWedNhGoy1Nfdvn3Jje+OdRSfNCi
dspRX7UK3gcxRYDB6dsX5yvgEXaJeC4mEWZqDSCh6dOYWUrl1ClUN5Be9U0f7po=
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:45:44 2025 by rpki-client