Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d1d0f524-01ed-4187-b71c-c3bf13945004.roa
File:                     d1d0f524-01ed-4187-b71c-c3bf13945004.roa (raw, json)
Hash identifier:          ePy0PKoLn6HQ9tiXiNIl1Fzj+31VtBLUj+GObAJDVks=
Subject key identifier:   49:EF:CA:E7:B5:DF:19:5E:49:95:59:0F:6B:92:72:75:C5:0D:CD:4E
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       1E4F193A78EF6DCE9B23222F1475ACD557DB812A
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d1d0f524-01ed-4187-b71c-c3bf13945004.roa
Signing time:             Fri 31 Oct 2025 04:41:27 +0000
ROA not before:           Fri 31 Oct 2025 04:41:27 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3c20::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:4f:19:3a:78:ef:6d:ce:9b:23:22:2f:14:75:ac:d5:57:db:81:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 04:41:27 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=a720f0b35456c936a8f1cf02f43e587077401cbafc510b64ed128eeb4c14dc82, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:1f:8f:20:b3:59:83:49:c9:8d:12:75:93:6a:
                    b8:33:bf:24:3d:c0:d6:18:23:3f:98:11:e9:82:73:
                    64:9d:43:cc:5c:aa:0f:ec:c5:30:77:b0:61:de:84:
                    6e:b0:4e:c2:db:47:b9:44:09:4a:9a:bd:17:7e:12:
                    f8:86:1d:59:48:aa:ed:8e:8a:02:0f:c8:66:7b:65:
                    1d:f6:03:28:81:84:c2:10:2a:87:4b:2c:8c:4f:0d:
                    ae:25:9d:90:20:b7:87:2d:13:bc:00:bc:90:a9:ea:
                    32:fc:4d:03:9f:ae:38:40:9d:b7:42:fb:a3:18:68:
                    2d:c4:f6:c4:3a:89:0c:8c:68:5a:6b:ff:3f:f7:c4:
                    cc:cc:0d:0e:0b:56:86:ce:a5:e7:c9:cb:87:6e:4f:
                    6d:e6:99:77:81:32:24:df:16:88:23:c1:87:9a:07:
                    12:53:47:40:74:50:63:db:d6:0d:fd:e4:20:0c:e4:
                    04:74:cb:98:60:54:f8:35:c1:36:dd:c7:ef:01:25:
                    3e:f9:7a:3c:c8:e1:32:73:29:50:22:75:cc:fb:47:
                    e5:98:c1:f6:d8:c3:51:a0:cc:3a:10:de:fc:f3:23:
                    dc:00:ca:b3:d4:c6:a5:fb:26:88:41:e3:14:fd:6a:
                    f5:a5:28:e4:94:ce:05:ca:13:4a:15:e4:f2:dc:d5:
                    d9:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:EF:CA:E7:B5:DF:19:5E:49:95:59:0F:6B:92:72:75:C5:0D:CD:4E
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d1d0f524-01ed-4187-b71c-c3bf13945004.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3c20::/46

    Signature Algorithm: sha256WithRSAEncryption
         a9:5b:78:2d:32:57:20:3d:f1:26:5e:6c:8d:25:8e:d4:69:01:
         61:94:60:7b:73:c5:e6:9e:90:05:85:c6:73:31:a6:a0:eb:0a:
         47:6e:52:3e:1d:a8:e9:2a:a5:8a:1a:44:2e:86:6b:e0:2e:8f:
         11:64:1c:81:ca:af:3f:ce:55:16:36:4c:39:86:71:b8:01:f0:
         61:f2:12:a8:29:56:97:96:e5:66:de:29:3c:fe:ec:18:96:e1:
         2c:2c:09:ae:ab:c8:8d:3a:42:4c:cc:d1:ab:57:7b:69:95:4e:
         5b:6a:52:35:ee:92:3c:a0:a0:ad:db:36:6f:0d:5f:c3:99:63:
         db:33:67:a0:1b:31:4f:08:80:81:f0:e1:bd:ab:6a:14:0d:36:
         f0:56:64:75:75:10:8f:a8:ad:9d:70:65:d1:2b:a5:16:27:56:
         0f:e9:5f:38:81:0f:84:88:f2:a8:2b:fb:92:5a:04:64:fa:14:
         a9:e0:dc:9d:5b:df:91:6a:40:5a:07:34:bf:30:2d:29:ed:a5:
         6c:e7:2d:45:50:f7:31:30:5b:aa:81:e5:68:93:c8:45:37:fc:
         bf:84:70:dd:53:82:e2:2a:3d:42:03:75:2c:e1:07:43:45:83:
         68:d7:86:06:0a:31:ef:c9:74:f7:c7:32:3b:39:49:33:bf:7d:
         d8:9e:54:59
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUHk8ZOnjvbc6bIyIvFHWs1VfbgSowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDQ0MTI3WhcNMjUxMjA1MjM1OTU5
WjB6MUkwRwYDVQQFE0BhNzIwZjBiMzU0NTZjOTM2YThmMWNmMDJmNDNlNTg3MDc3
NDAxY2JhZmM1MTBiNjRlZDEyOGVlYjRjMTRkYzgyMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDjH48gs1mDScmNEnWTargzvyQ9wNYYIz+YEemCc2SdQ8xc
qg/sxTB3sGHehG6wTsLbR7lECUqavRd+EviGHVlIqu2OigIPyGZ7ZR32AyiBhMIQ
KodLLIxPDa4lnZAgt4ctE7wAvJCp6jL8TQOfrjhAnbdC+6MYaC3E9sQ6iQyMaFpr
/z/3xMzMDQ4LVobOpefJy4duT23mmXeBMiTfFogjwYeaBxJTR0B0UGPb1g395CAM
5AR0y5hgVPg1wTbdx+8BJT75ejzI4TJzKVAidcz7R+WYwfbYw1GgzDoQ3vzzI9wA
yrPUxqX7JohB4xT9avWlKOSUzgXKE0oV5PLc1dmzAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUSe/K57XfGV5JlVkPa5JydcUNzU4wHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1L2QxZDBmNTI0LTAxZWQtNDE4Ny1iNzFjLWMzYmYxMzk0NTAwNC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwImAJAAPCAwDQYJKoZIhvcNAQELBQADggEBAKlbeC0yVyA98SZebI0ljtRp
AWGUYHtzxeaekAWFxnMxpqDrCkduUj4dqOkqpYoaRC6Ga+AujxFkHIHKrz/OVRY2
TDmGcbgB8GHyEqgpVpeW5WbeKTz+7BiW4SwsCa6ryI06QkzM0atXe2mVTltqUjXu
kjygoK3bNm8NX8OZY9szZ6AbMU8IgIHw4b2rahQNNvBWZHV1EI+orZ1wZdErpRYn
Vg/pXziBD4SI8qgr+5JaBGT6FKng3J1b35FqQFoHNL8wLSntpWznLUVQ9zEwW6qB
5WiTyEU3/L+EcN1TguIqPUIDdSzhB0NFg2jXhgYKMe/JdPfHMjs5STO/fdieVFk=
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:55:05 2025 by rpki-client