Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/bed31132-8975-4744-a470-42b6027cb5b8.roa
File:                     bed31132-8975-4744-a470-42b6027cb5b8.roa (raw, json)
Hash identifier:          63ZT05xjfdwRDiq/vc1IXtmuvDeTnJgNeHpyR0eF4HQ=
Subject key identifier:   83:D9:69:31:CF:F8:75:E2:7B:64:7F:58:3A:A4:EA:10:75:5B:69:FB
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       2C7D86F2DD8C78866A03D3234ACEE7A3338606F6
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/bed31132-8975-4744-a470-42b6027cb5b8.roa
Signing time:             Fri 31 Oct 2025 05:25:34 +0000
ROA not before:           Fri 31 Oct 2025 05:25:34 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1bf0::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:7d:86:f2:dd:8c:78:86:6a:03:d3:23:4a:ce:e7:a3:33:86:06:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 05:25:34 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=fff5165e927bcc505e445cdef1edcc63d197e8880d7fd92722de6c78fc7caf60, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:61:6a:cf:d7:28:eb:c7:c5:6b:0d:af:54:6d:
                    33:a8:f4:7d:09:7f:74:c3:99:f4:49:0a:7b:77:dc:
                    1b:10:67:bd:d3:32:6b:0d:a1:cd:3f:e5:8b:db:63:
                    e1:c7:87:69:ed:84:86:f7:bd:53:ff:c9:30:e0:c3:
                    8e:04:c1:66:bf:78:8f:09:83:3f:70:94:1a:33:af:
                    f1:48:50:8d:5e:f6:13:e1:7c:46:c0:b2:31:6e:b0:
                    a7:01:15:80:b0:1e:b6:ff:d0:20:79:f1:19:de:ec:
                    73:b0:f6:a2:50:b6:24:92:f9:c7:c9:a2:80:13:d0:
                    58:07:c6:46:95:a2:f8:7b:97:97:21:fd:9d:7d:15:
                    2b:5b:e1:1b:62:73:36:63:43:d5:e0:25:4f:cc:ec:
                    93:b4:1f:da:23:c9:5d:c0:2a:e5:82:9e:c0:c9:d8:
                    6c:d1:1c:bd:d0:a5:ac:cd:7e:b2:6d:7f:75:0b:1d:
                    ea:e1:53:85:b6:7d:6f:2b:e6:39:82:be:78:17:d3:
                    fc:d6:cd:1e:cd:ea:4e:37:98:4c:64:2c:89:0e:90:
                    f1:8c:98:9c:21:cd:80:5e:22:1e:fa:7c:b4:28:a5:
                    47:87:4e:fa:ba:f5:68:bb:e9:c3:52:e6:c7:af:9d:
                    42:de:ab:69:9d:d0:42:c8:5d:00:16:36:43:a4:e7:
                    53:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:D9:69:31:CF:F8:75:E2:7B:64:7F:58:3A:A4:EA:10:75:5B:69:FB
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/bed31132-8975-4744-a470-42b6027cb5b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1bf0::/45

    Signature Algorithm: sha256WithRSAEncryption
         4d:87:2d:d2:84:40:fe:67:de:fa:f1:8a:5e:81:38:13:ae:bf:
         ea:ad:1d:9d:c2:5f:6f:84:05:74:8e:8c:c6:a5:33:6b:8c:5d:
         90:a4:fc:0d:bc:d4:2f:58:93:27:af:77:9d:3d:50:5c:fd:ca:
         2f:d3:21:82:ea:42:fe:72:55:ce:17:ef:13:b0:21:40:49:3a:
         df:3e:79:e7:b5:62:0f:4e:af:d6:0e:24:c7:d2:a1:09:cf:25:
         87:f2:3c:41:28:1b:b8:eb:7f:12:96:a1:ed:81:90:b1:45:7f:
         d0:d2:8e:06:23:e1:e7:56:56:ea:99:f1:8e:3d:fa:c3:3a:0b:
         6c:7f:20:21:95:30:70:ee:fd:36:7a:76:84:5d:a4:fb:99:83:
         73:6c:3b:20:b6:db:49:d4:77:b7:a6:38:75:6d:44:35:e0:64:
         14:90:e1:7c:3e:00:65:8d:34:f5:aa:36:15:38:bb:4b:de:07:
         bc:7c:15:b1:0c:2f:c9:c2:22:eb:b3:fe:9d:c1:ec:d0:ac:a7:
         d3:43:32:78:98:3b:11:f9:46:cd:c2:7c:8d:9e:f0:9b:80:f4:
         b7:75:73:c8:cb:e3:42:14:6a:2d:d2:71:ff:71:ae:d2:e4:7d:
         b4:20:f2:fd:8a:ad:b7:5c:9e:00:fc:ac:51:64:f9:c4:56:57:
         24:f1:e3:bf
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIULH2G8t2MeIZqA9MjSs7nozOGBvYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDUyNTM0WhcNMjUxMjA1MjM1OTU5
WjB6MUkwRwYDVQQFE0BmZmY1MTY1ZTkyN2JjYzUwNWU0NDVjZGVmMWVkY2M2M2Qx
OTdlODg4MGQ3ZmQ5MjcyMmRlNmM3OGZjN2NhZjYwMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCDYWrP1yjrx8VrDa9UbTOo9H0Jf3TDmfRJCnt33BsQZ73T
MmsNoc0/5YvbY+HHh2nthIb3vVP/yTDgw44EwWa/eI8Jgz9wlBozr/FIUI1e9hPh
fEbAsjFusKcBFYCwHrb/0CB58Rne7HOw9qJQtiSS+cfJooAT0FgHxkaVovh7l5ch
/Z19FStb4RticzZjQ9XgJU/M7JO0H9ojyV3AKuWCnsDJ2GzRHL3QpazNfrJtf3UL
HerhU4W2fW8r5jmCvngX0/zWzR7N6k43mExkLIkOkPGMmJwhzYBeIh76fLQopUeH
Tvq69Wi76cNS5sevnULeq2md0ELIXQAWNkOk51NhAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUg9lpMc/4deJ7ZH9YOqTqEHVbafswHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1L2JlZDMxMTMyLTg5NzUtNDc0NC1hNDcwLTQyYjYwMjdjYjViOC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwMmAJAAG/AwDQYJKoZIhvcNAQELBQADggEBAE2HLdKEQP5n3vrxil6BOBOu
v+qtHZ3CX2+EBXSOjMalM2uMXZCk/A281C9Ykyevd509UFz9yi/TIYLqQv5yVc4X
7xOwIUBJOt8+eee1Yg9Or9YOJMfSoQnPJYfyPEEoG7jrfxKWoe2BkLFFf9DSjgYj
4edWVuqZ8Y49+sM6C2x/ICGVMHDu/TZ6doRdpPuZg3NsOyC220nUd7emOHVtRDXg
ZBSQ4Xw+AGWNNPWqNhU4u0veB7x8FbEML8nCIuuz/p3B7NCsp9NDMniYOxH5Rs3C
fI2e8JuA9Ld1c8jL40IUai3Scf9xrtLkfbQg8v2KrbdcngD8rFFk+cRWVyTx478=
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:25:25 2025 by rpki-client