Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c10e11b9-2c3e-40e6-b13a-24c3620bfc9b.roa
File:                     c10e11b9-2c3e-40e6-b13a-24c3620bfc9b.roa (raw, json)
Hash identifier:          S7HHzqjrndzGp40pZ6v1QT398GJ+XuHs/zDIF/B4d/U=
Subject key identifier:   5C:B1:5F:69:21:B6:C2:A4:27:B1:D8:3E:CD:C0:1A:3C:62:01:50:CC
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       7369096DAF4ED62D1B47C2726CE07CFC1424ED7A
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c10e11b9-2c3e-40e6-b13a-24c3620bfc9b.roa
Signing time:             Fri 31 Oct 2025 01:38:12 +0000
ROA not before:           Fri 31 Oct 2025 01:38:12 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3c9c::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:69:09:6d:af:4e:d6:2d:1b:47:c2:72:6c:e0:7c:fc:14:24:ed:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 01:38:12 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=7e0d7e9f9c2ac54bc28aafcd88378a5b90cd5a0169c3bf4d27af8867d44a4858, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d1:58:a3:7d:21:4f:05:49:5e:a9:e8:c2:7d:
                    14:26:9d:37:64:d8:a5:f0:bf:18:ca:e9:4c:84:b1:
                    6c:c7:c7:6d:74:fd:6a:cf:58:8d:12:db:9b:6f:8c:
                    ad:93:b9:05:79:58:36:eb:ea:dd:c9:34:ba:5e:5f:
                    1a:f7:bd:35:f2:c5:cb:df:16:52:e9:ba:c4:4c:56:
                    1f:88:26:78:a2:40:5f:79:e1:da:ea:44:7a:04:52:
                    85:e3:47:30:94:c5:d8:6f:f7:fe:61:df:4c:42:b5:
                    3b:a7:b4:db:d8:bb:5a:71:01:f5:f2:87:44:0b:bd:
                    96:07:49:82:de:a3:eb:10:d3:d5:80:b0:d8:e0:a1:
                    00:3a:5d:0d:49:a2:7e:7c:f4:35:ee:76:bf:48:8d:
                    5e:24:67:2b:b9:4d:81:05:41:95:a3:3d:3c:89:9d:
                    c5:79:4a:f0:e8:a0:59:21:68:00:f0:1b:1b:c2:24:
                    62:9b:b4:21:ce:74:78:9a:1d:a7:f9:ed:b6:41:85:
                    02:ba:5b:c8:1d:17:66:74:ae:e8:6e:44:de:5a:73:
                    ae:8d:4b:a3:c9:40:c0:57:27:f6:c6:03:28:d2:9d:
                    0b:c8:b2:88:c3:39:9e:8e:05:39:1b:14:2d:a8:13:
                    35:d4:60:76:75:55:bd:07:fd:59:23:0a:10:64:9f:
                    9a:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:B1:5F:69:21:B6:C2:A4:27:B1:D8:3E:CD:C0:1A:3C:62:01:50:CC
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c10e11b9-2c3e-40e6-b13a-24c3620bfc9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3c9c::/47

    Signature Algorithm: sha256WithRSAEncryption
         77:ee:17:de:fd:17:54:f7:79:b1:01:cd:74:d5:21:72:fe:d3:
         d9:ff:d9:17:67:0d:c8:68:20:3d:d8:85:d9:5d:7b:4e:f6:66:
         38:bf:c9:50:a7:59:7f:b7:bf:5c:e6:56:af:8b:c6:fd:58:01:
         79:5d:47:6a:17:53:fa:3b:e7:ac:b8:4e:ca:5f:a2:c1:90:8e:
         e2:83:8f:3d:0b:c5:d9:a7:60:dd:5f:bc:91:6e:b1:1e:09:e7:
         b2:04:a9:de:4d:95:9e:3a:c4:79:72:ec:f6:8f:90:83:ee:0e:
         f5:d8:ee:0b:80:a9:6e:4d:c0:78:be:09:19:d5:53:37:70:7f:
         76:12:fb:bb:8c:ba:f7:2a:55:7f:84:2e:47:9f:9e:13:85:27:
         67:12:e5:ef:37:93:d3:e6:52:db:77:b1:94:2c:db:71:65:43:
         71:c0:e7:3c:f1:b1:46:f0:f1:62:b4:a4:0b:5b:eb:a4:62:0b:
         5c:c4:d8:48:ea:57:a5:93:2a:d6:b9:70:cd:98:1a:b4:5d:eb:
         91:49:b4:a8:70:41:2c:46:f3:a9:ff:42:cb:bc:ef:60:82:8e:
         2f:53:8c:0d:74:68:62:e6:d5:87:23:00:db:94:fa:df:1d:75:
         67:d4:13:65:f1:64:58:02:87:ad:3c:7d:05:23:77:11:db:60:
         86:b2:1d:e7
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUc2kJba9O1i0bR8JybOB8/BQk7XowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDEzODEyWhcNMjUxMjA1MjM1OTU5
WjB6MUkwRwYDVQQFE0A3ZTBkN2U5ZjljMmFjNTRiYzI4YWFmY2Q4ODM3OGE1Yjkw
Y2Q1YTAxNjljM2JmNGQyN2FmODg2N2Q0NGE0ODU4MS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC20VijfSFPBUleqejCfRQmnTdk2KXwvxjK6UyEsWzHx210
/WrPWI0S25tvjK2TuQV5WDbr6t3JNLpeXxr3vTXyxcvfFlLpusRMVh+IJniiQF95
4drqRHoEUoXjRzCUxdhv9/5h30xCtTuntNvYu1pxAfXyh0QLvZYHSYLeo+sQ09WA
sNjgoQA6XQ1Jon589DXudr9IjV4kZyu5TYEFQZWjPTyJncV5SvDooFkhaADwGxvC
JGKbtCHOdHiaHaf57bZBhQK6W8gdF2Z0ruhuRN5ac66NS6PJQMBXJ/bGAyjSnQvI
sojDOZ6OBTkbFC2oEzXUYHZ1Vb0H/VkjChBkn5qdAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUXLFfaSG2wqQnsdg+zcAaPGIBUMwwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1L2MxMGUxMWI5LTJjM2UtNDBlNi1iMTNhLTI0YzM2MjBiZmM5Yi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwEmAJAAPJwwDQYJKoZIhvcNAQELBQADggEBAHfuF979F1T3ebEBzXTVIXL+
09n/2RdnDchoID3Yhdlde072Zji/yVCnWX+3v1zmVq+Lxv1YAXldR2oXU/o756y4
TspfosGQjuKDjz0LxdmnYN1fvJFusR4J57IEqd5NlZ46xHly7PaPkIPuDvXY7guA
qW5NwHi+CRnVUzdwf3YS+7uMuvcqVX+ELkefnhOFJ2cS5e83k9PmUtt3sZQs23Fl
Q3HA5zzxsUbw8WK0pAtb66RiC1zE2EjqV6WTKta5cM2YGrRd65FJtKhwQSxG86n/
Qsu872CCji9TjA10aGLm1YcjANuU+t8ddWfUE2XxZFgCh608fQUjdxHbYIayHec=
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:43:16 2025 by rpki-client