Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b962aefe-588c-48b1-8240-b59bc03c4385.roa
File:                     b962aefe-588c-48b1-8240-b59bc03c4385.roa (raw, json)
Hash identifier:          OgBNtDtKTwmuMnMHaED0dcjtqr/fnYre5jW1BRsFffA=
Subject key identifier:   29:D9:D5:28:44:32:BB:74:28:7D:AA:8E:C5:F8:C4:A9:FC:FD:6F:F9
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       7617CC8F447B271BBD53A32ACD6135F0D9DC983F
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b962aefe-588c-48b1-8240-b59bc03c4385.roa
Signing time:             Fri 31 Oct 2025 00:51:49 +0000
ROA not before:           Fri 31 Oct 2025 00:51:49 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:37b2::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:17:cc:8f:44:7b:27:1b:bd:53:a3:2a:cd:61:35:f0:d9:dc:98:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 00:51:49 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=d6e398bcf0a146ae0fca21da2e777d4bac9e7077247cfabbca162cc2b0c26fa8, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:2a:d6:ae:0b:f2:e3:b0:91:bc:7a:fc:d4:81:
                    ac:f0:95:fd:3f:12:88:88:9c:8f:2b:1c:e4:11:e6:
                    9f:60:74:ca:75:73:76:91:39:a8:f8:86:ab:0b:5c:
                    68:82:b0:9f:59:cc:60:43:a3:20:9b:e4:67:63:dc:
                    56:77:4f:eb:19:a7:01:01:47:2b:ec:0c:4e:66:bd:
                    05:ae:b5:b2:81:5d:d2:7a:da:fa:51:d1:de:71:d9:
                    a0:0a:46:52:8d:72:3b:31:0e:d5:b9:0a:81:c4:7b:
                    4a:0a:b0:09:a3:0a:65:0a:1b:b0:ea:bd:09:0c:a4:
                    00:12:9a:2d:46:ac:79:d5:2d:32:e5:ec:56:c9:89:
                    e7:eb:2b:a1:24:5c:77:ba:9a:6a:59:b6:c2:00:7a:
                    12:61:9e:28:4c:8c:37:1e:62:65:5c:ad:cf:9b:2d:
                    ab:66:e7:ba:d9:16:a2:1f:c8:a4:e5:07:da:54:b8:
                    54:b4:a9:89:b3:3d:ec:cd:7d:b7:36:9b:7b:1c:37:
                    f4:32:e7:2c:3d:f5:9a:b4:2d:50:3c:fe:86:5d:8d:
                    4b:c1:db:39:ff:12:66:0d:96:74:44:5d:92:b8:31:
                    ee:77:f9:e3:f9:7c:02:62:0d:64:95:b5:2d:43:79:
                    8a:1d:25:06:f5:e1:a8:9d:12:22:c8:f7:e9:0f:63:
                    a1:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:D9:D5:28:44:32:BB:74:28:7D:AA:8E:C5:F8:C4:A9:FC:FD:6F:F9
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b962aefe-588c-48b1-8240-b59bc03c4385.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:37b2::/47

    Signature Algorithm: sha256WithRSAEncryption
         ba:56:35:56:39:a2:d6:d6:27:4d:9c:af:73:5c:8e:d8:62:c3:
         5e:fe:4d:87:ef:a9:68:b7:09:a9:bf:17:0b:a3:d1:b7:e2:ff:
         15:9d:c8:21:dc:67:f7:0c:fa:c2:57:2f:d8:0c:68:c5:ee:53:
         7e:09:e0:e4:2a:e8:46:d8:8e:ab:8b:26:da:6f:53:5a:39:42:
         f2:c5:b6:14:c6:d6:85:95:e9:69:e3:a8:cc:4e:93:25:4f:fa:
         0e:c6:8b:8b:d5:74:e5:3b:b4:0c:f4:3f:bc:a5:b8:7d:e8:96:
         b6:d0:c2:97:26:d8:8a:60:ce:5c:fa:48:c7:0f:60:0e:90:ef:
         b4:69:88:50:12:42:a6:b3:24:62:e5:44:4d:75:93:aa:c5:b8:
         d2:13:58:95:66:71:9d:d9:d0:f9:9a:ce:17:49:ab:20:f8:cf:
         81:e1:1b:46:92:eb:e2:03:f2:03:61:49:10:38:32:40:a2:f0:
         e5:15:11:46:5d:b7:2a:3f:21:12:d3:9d:83:58:37:f5:e4:d3:
         b2:76:c5:a7:05:ae:7d:61:89:09:9f:d1:05:0d:1b:b1:85:e4:
         a0:e1:08:cc:a0:52:14:8e:d3:20:f5:16:12:12:67:fb:ec:3e:
         42:09:35:2e:20:3b:2f:ba:70:e7:0c:78:09:34:59:59:c4:cc:
         bb:6d:79:0e
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUdhfMj0R7Jxu9U6MqzWE18NncmD8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDA1MTQ5WhcNMjUxMjA1MjM1OTU5
WjB6MUkwRwYDVQQFE0BkNmUzOThiY2YwYTE0NmFlMGZjYTIxZGEyZTc3N2Q0YmFj
OWU3MDc3MjQ3Y2ZhYmJjYTE2MmNjMmIwYzI2ZmE4MS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCcKtauC/LjsJG8evzUgazwlf0/EoiInI8rHOQR5p9gdMp1
c3aROaj4hqsLXGiCsJ9ZzGBDoyCb5Gdj3FZ3T+sZpwEBRyvsDE5mvQWutbKBXdJ6
2vpR0d5x2aAKRlKNcjsxDtW5CoHEe0oKsAmjCmUKG7DqvQkMpAASmi1GrHnVLTLl
7FbJiefrK6EkXHe6mmpZtsIAehJhnihMjDceYmVcrc+bLatm57rZFqIfyKTlB9pU
uFS0qYmzPezNfbc2m3scN/Qy5yw99Zq0LVA8/oZdjUvB2zn/EmYNlnREXZK4Me53
+eP5fAJiDWSVtS1DeYodJQb14aidEiLI9+kPY6G/AgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUKdnVKEQyu3QofaqOxfjEqfz9b/kwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1L2I5NjJhZWZlLTU4OGMtNDhiMS04MjQwLWI1OWJjMDNjNDM4NS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwEmAJAAN7IwDQYJKoZIhvcNAQELBQADggEBALpWNVY5otbWJ02cr3Ncjthi
w17+TYfvqWi3Cam/Fwuj0bfi/xWdyCHcZ/cM+sJXL9gMaMXuU34J4OQq6EbYjquL
JtpvU1o5QvLFthTG1oWV6WnjqMxOkyVP+g7Gi4vVdOU7tAz0P7yluH3olrbQwpcm
2Ipgzlz6SMcPYA6Q77RpiFASQqazJGLlRE11k6rFuNITWJVmcZ3Z0PmazhdJqyD4
z4HhG0aS6+ID8gNhSRA4MkCi8OUVEUZdtyo/IRLTnYNYN/Xk07J2xacFrn1hiQmf
0QUNG7GF5KDhCMygUhSO0yD1FhISZ/vsPkIJNS4gOy+6cOcMeAk0WVnEzLtteQ4=
-----END CERTIFICATE-----
Generated at Wed Nov 5 12:31:27 2025 by rpki-client