Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c9884e47-fcf0-4a1e-b034-a4416e1f6c47.roa
File:                     c9884e47-fcf0-4a1e-b034-a4416e1f6c47.roa (raw, json)
Hash identifier:          mjP8lTaQevhCC1CZxjkW1maU7C8lSGJtVEOMct1AGRM=
Subject key identifier:   52:57:F6:FA:E1:78:42:96:0E:F4:5D:7D:88:8D:C3:DB:8D:54:29:69
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       344D9F0B8F9291EC5A62576440361EA382CFAC90
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c9884e47-fcf0-4a1e-b034-a4416e1f6c47.roa
Signing time:             Fri 31 Oct 2025 06:36:54 +0000
ROA not before:           Fri 31 Oct 2025 06:36:54 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1770::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:4d:9f:0b:8f:92:91:ec:5a:62:57:64:40:36:1e:a3:82:cf:ac:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 06:36:54 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=337a4cd7a233b3da4e71d05bed83fe055896b22a18f0014961499fe5c8b1ddbd, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:33:f0:60:0b:9f:e4:29:6d:22:d2:7a:6a:17:
                    f2:19:81:8d:ce:82:90:d2:47:17:d4:6a:ae:dd:d4:
                    bc:d3:49:36:78:61:fc:8a:c9:08:9f:0a:a0:a9:16:
                    aa:5a:5b:55:30:10:ee:24:88:6a:c8:30:2c:41:37:
                    38:57:96:47:e1:1f:a9:5b:aa:0e:db:4e:76:d2:e5:
                    5b:d8:68:2a:ba:d1:8d:0a:e0:75:db:f1:33:bc:e2:
                    5c:39:86:a7:35:d9:a5:1a:e4:bb:86:20:cd:04:dd:
                    1f:4a:e9:56:50:01:db:82:4b:91:15:c9:79:dc:cc:
                    43:de:ce:52:b0:4f:f9:fa:09:e7:35:af:f7:ba:4e:
                    f0:83:bd:7b:4b:15:20:5f:a7:b0:6f:b2:ef:30:23:
                    52:c7:9d:8a:ef:88:97:c7:95:10:b1:74:79:55:2d:
                    95:a8:79:a4:90:13:01:6a:bc:2e:4f:b5:c5:6b:f6:
                    fc:c3:24:6d:ab:86:80:5e:eb:a2:ec:2c:fc:50:c1:
                    2f:b3:42:fc:e4:73:8e:84:b7:fd:be:44:46:4d:71:
                    1e:0b:e1:a8:30:2d:ec:7a:a1:d2:7e:3d:4e:0b:c9:
                    66:05:e9:ad:f4:39:7b:01:20:e5:4f:0a:ee:44:ab:
                    b4:3d:2f:b7:8c:5e:09:6f:b3:93:5f:e4:37:87:32:
                    6f:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:57:F6:FA:E1:78:42:96:0E:F4:5D:7D:88:8D:C3:DB:8D:54:29:69
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c9884e47-fcf0-4a1e-b034-a4416e1f6c47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1770::/44

    Signature Algorithm: sha256WithRSAEncryption
         7e:62:2c:49:cf:26:0c:34:cb:ff:a4:c6:fc:ef:c4:fc:32:09:
         8b:52:9b:4d:97:05:db:9a:02:2a:3a:52:ea:87:9f:94:ec:8f:
         9a:e7:4d:bd:3f:c5:37:c2:f8:7c:26:48:0a:e8:4a:88:1e:94:
         9f:e1:bd:ea:5a:95:ec:b7:da:54:57:e0:29:ce:91:6c:dd:19:
         a8:f3:f8:97:85:ce:ea:9e:a8:40:c7:2a:c0:7c:7a:9c:9d:85:
         28:97:91:a2:5c:45:e7:96:e7:ae:36:24:2d:da:47:c7:91:cd:
         3d:c6:65:09:9a:53:25:d3:f6:fa:e4:ae:49:a8:52:aa:ff:8b:
         89:fd:b6:2c:ab:87:86:b2:74:37:12:29:12:d3:76:da:0f:82:
         bd:d9:3a:f4:7f:01:0a:9a:b1:26:76:41:d5:fe:e0:4a:02:53:
         ce:5f:2d:c3:79:e1:61:0c:91:14:dd:db:e3:ce:45:af:29:0d:
         ac:90:f9:e8:ed:f8:4b:4b:55:a5:5f:a1:5e:bd:19:ec:cc:c1:
         5e:ea:5b:26:5b:fd:f5:b8:8e:eb:82:0f:bd:e7:fb:15:09:12:
         d4:0f:13:04:f7:ad:3f:8f:c4:7e:bc:55:6e:5b:37:3c:78:f5:
         6e:47:a5:1e:d5:84:76:06:fd:1f:39:c0:4f:d1:5f:ef:5f:bd:
         75:89:1a:ea
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUNE2fC4+SkexaYldkQDYeo4LPrJAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDYzNjU0WhcNMjUxMjA1MjM1OTU5
WjB6MUkwRwYDVQQFE0AzMzdhNGNkN2EyMzNiM2RhNGU3MWQwNWJlZDgzZmUwNTU4
OTZiMjJhMThmMDAxNDk2MTQ5OWZlNWM4YjFkZGJkMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDvM/BgC5/kKW0i0npqF/IZgY3OgpDSRxfUaq7d1LzTSTZ4
YfyKyQifCqCpFqpaW1UwEO4kiGrIMCxBNzhXlkfhH6lbqg7bTnbS5VvYaCq60Y0K
4HXb8TO84lw5hqc12aUa5LuGIM0E3R9K6VZQAduCS5EVyXnczEPezlKwT/n6Cec1
r/e6TvCDvXtLFSBfp7Bvsu8wI1LHnYrviJfHlRCxdHlVLZWoeaSQEwFqvC5PtcVr
9vzDJG2rhoBe66LsLPxQwS+zQvzkc46Et/2+REZNcR4L4agwLex6odJ+PU4LyWYF
6a30OXsBIOVPCu5Eq7Q9L7eMXglvs5Nf5DeHMm/fAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUUlf2+uF4QpYO9F19iI3D241UKWkwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1L2M5ODg0ZTQ3LWZjZjAtNGExZS1iMDM0LWE0NDE2ZTFmNmM0Ny5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwQmAJAAF3AwDQYJKoZIhvcNAQELBQADggEBAH5iLEnPJgw0y/+kxvzvxPwy
CYtSm02XBduaAio6UuqHn5Tsj5rnTb0/xTfC+HwmSAroSogelJ/hvepaley32lRX
4CnOkWzdGajz+JeFzuqeqEDHKsB8epydhSiXkaJcReeW5642JC3aR8eRzT3GZQma
UyXT9vrkrkmoUqr/i4n9tiyrh4aydDcSKRLTdtoPgr3ZOvR/AQqasSZ2QdX+4EoC
U85fLcN54WEMkRTd2+PORa8pDayQ+ejt+EtLVaVfoV69GezMwV7qWyZb/fW4juuC
D73n+xUJEtQPEwT3rT+PxH68VW5bNzx49W5HpR7VhHYG/R85wE/RX+9fvXWJGuo=
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:38:26 2025 by rpki-client