Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c038bae5-32df-4547-b571-d9cbe489d971.roa
File:                     c038bae5-32df-4547-b571-d9cbe489d971.roa (raw, json)
Hash identifier:          jtnEzUo0vmJrGMYo9bhsJ90rTGTqxPXjFoMU7QZKj1c=
Subject key identifier:   38:5F:16:B7:A5:FD:C0:06:61:25:D1:A9:7B:84:04:59:16:07:17:61
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       6B0852FEAB6CCC6625786707AB8DD0EBE8A80313
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c038bae5-32df-4547-b571-d9cbe489d971.roa
Signing time:             Thu 30 Oct 2025 21:22:02 +0000
ROA not before:           Thu 30 Oct 2025 21:22:02 +0000
ROA not after:            Thu 04 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1614::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:08:52:fe:ab:6c:cc:66:25:78:67:07:ab:8d:d0:eb:e8:a8:03:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 30 21:22:02 2025 GMT
            Not After : Dec  4 23:59:59 2025 GMT
        Subject: serialNumber=09bf3adf69373e6b352cf7a4e736365c5800f378bd3785d1bbc96935223f2790, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:71:e1:fe:1f:e3:38:a3:f8:6b:b5:82:91:5f:
                    2d:a9:69:a0:83:55:46:34:18:9a:fd:0c:f6:4a:72:
                    b6:60:23:70:b0:65:36:5d:81:3a:dc:ca:cc:dc:9d:
                    66:42:3b:c5:9d:78:57:f7:07:60:f0:7f:4e:39:3a:
                    52:79:a1:1d:c0:32:5a:70:5a:d8:77:cc:f1:90:67:
                    b2:af:43:fa:73:09:5c:44:fc:ce:0f:92:64:c7:62:
                    e7:de:83:d3:79:70:d3:9c:50:37:72:61:ed:1c:38:
                    c4:d3:4e:26:13:31:4d:ec:dc:34:ab:36:2f:e7:d7:
                    e7:4f:9f:32:2b:db:32:5c:ad:06:b7:b0:e4:86:61:
                    57:71:c9:2f:10:c9:3b:ed:1d:87:a4:d6:97:95:f6:
                    b4:87:da:64:e1:25:55:30:a6:74:26:f6:a3:53:14:
                    db:d5:81:fb:f0:16:73:7b:75:df:2c:d9:fb:fe:ac:
                    e6:48:68:95:af:71:48:13:0e:34:f6:3e:19:b2:f0:
                    d6:55:53:46:cb:5f:c0:e4:c6:97:36:2f:99:46:d4:
                    3c:b2:ac:30:f4:b8:20:83:67:83:0a:0e:81:02:94:
                    86:b3:8b:e6:90:31:4a:28:ba:c9:bc:ad:23:72:28:
                    32:4b:56:49:5e:bc:c3:7a:c4:d3:67:d8:79:df:0c:
                    ac:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:5F:16:B7:A5:FD:C0:06:61:25:D1:A9:7B:84:04:59:16:07:17:61
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c038bae5-32df-4547-b571-d9cbe489d971.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1614::/47

    Signature Algorithm: sha256WithRSAEncryption
         55:66:0c:50:ec:ba:e0:80:af:6f:be:46:49:dc:22:f1:eb:f0:
         1e:ef:50:e1:1b:d4:e8:a0:d9:da:69:41:ee:05:97:e6:1c:a9:
         f3:ef:3b:09:66:cb:33:79:ea:f9:db:22:ec:b7:13:d8:3f:2e:
         a4:27:2c:c9:89:d6:73:ea:23:e5:32:6c:63:80:af:ae:3c:51:
         9d:ca:fa:30:92:7e:9f:29:ca:5b:40:50:54:40:c6:54:13:d4:
         d7:d8:0a:ef:b9:28:6c:66:fb:82:f2:7d:b7:06:f4:75:0d:6a:
         b6:6c:01:6f:bb:3b:fa:bc:89:3d:2b:be:6a:76:b6:30:39:5e:
         35:b9:1a:85:c9:aa:68:88:af:12:69:66:73:e6:88:2e:17:ba:
         62:38:c5:07:65:57:c0:39:48:9d:a4:46:82:89:00:6b:df:3d:
         48:19:a2:eb:58:54:2d:46:b3:a2:1e:bf:b5:9a:28:99:e7:cd:
         66:01:d3:6e:41:19:42:b2:67:fd:6d:19:31:87:53:9f:31:71:
         fb:51:a5:99:45:93:c4:c5:95:49:b2:7f:a3:80:9c:59:23:76:
         23:88:85:f1:9c:26:09:d2:cc:08:6d:2f:ca:c3:74:88:e1:ce:
         8b:28:a0:b0:b8:19:91:f9:f1:da:42:aa:a6:a4:b2:2a:d2:03:
         72:3f:3c:38
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUawhS/qtszGYleGcHq43Q6+ioAxMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMwMjEyMjAyWhcNMjUxMjA0MjM1OTU5
WjB6MUkwRwYDVQQFE0AwOWJmM2FkZjY5MzczZTZiMzUyY2Y3YTRlNzM2MzY1YzU4
MDBmMzc4YmQzNzg1ZDFiYmM5NjkzNTIyM2YyNzkwMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDDceH+H+M4o/hrtYKRXy2paaCDVUY0GJr9DPZKcrZgI3Cw
ZTZdgTrcyszcnWZCO8WdeFf3B2Dwf045OlJ5oR3AMlpwWth3zPGQZ7KvQ/pzCVxE
/M4PkmTHYufeg9N5cNOcUDdyYe0cOMTTTiYTMU3s3DSrNi/n1+dPnzIr2zJcrQa3
sOSGYVdxyS8QyTvtHYek1peV9rSH2mThJVUwpnQm9qNTFNvVgfvwFnN7dd8s2fv+
rOZIaJWvcUgTDjT2Phmy8NZVU0bLX8Dkxpc2L5lG1DyyrDD0uCCDZ4MKDoEClIaz
i+aQMUoousm8rSNyKDJLVklevMN6xNNn2HnfDKxbAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUOF8Wt6X9wAZhJdGpe4QEWRYHF2EwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1L2MwMzhiYWU1LTMyZGYtNDU0Ny1iNTcxLWQ5Y2JlNDg5ZDk3MS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwEmAJAAFhQwDQYJKoZIhvcNAQELBQADggEBAFVmDFDsuuCAr2++RkncIvHr
8B7vUOEb1Oig2dppQe4Fl+YcqfPvOwlmyzN56vnbIuy3E9g/LqQnLMmJ1nPqI+Uy
bGOAr648UZ3K+jCSfp8pyltAUFRAxlQT1NfYCu+5KGxm+4LyfbcG9HUNarZsAW+7
O/q8iT0rvmp2tjA5XjW5GoXJqmiIrxJpZnPmiC4XumI4xQdlV8A5SJ2kRoKJAGvf
PUgZoutYVC1Gs6Iev7WaKJnnzWYB025BGUKyZ/1tGTGHU58xcftRpZlFk8TFlUmy
f6OAnFkjdiOIhfGcJgnSzAhtL8rDdIjhzosooLC4GZH58dpCqqaksirSA3I/PDg=
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:27:07 2025 by rpki-client