Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d91fbc0b-d151-42db-9bd6-3c71fa153dda.roa
File:                     d91fbc0b-d151-42db-9bd6-3c71fa153dda.roa (raw, json)
Hash identifier:          cAqZeYEHHNGIjSFQApK1iiuW1jOh6OFVk6w60feICzc=
Subject key identifier:   B8:32:88:E2:0B:80:A7:93:F3:FC:7B:62:65:A4:8E:08:56:34:3C:04
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       51104DFBC2BF093D64EBB6F5218C2316610A6D77
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d91fbc0b-d151-42db-9bd6-3c71fa153dda.roa
Signing time:             Fri 31 Oct 2025 21:55:06 +0000
ROA not before:           Fri 31 Oct 2025 21:55:06 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:ac00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:10:4d:fb:c2:bf:09:3d:64:eb:b6:f5:21:8c:23:16:61:0a:6d:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 21:55:06 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=710e777a7afccd1f57b1c32f5c1c50c0b33d9a477e3d32c7ad7aae0b9b194f8f, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b6:4d:96:b7:25:9a:73:16:05:25:5d:89:62:
                    2e:d2:0a:7e:e3:78:f7:55:cd:39:73:19:30:d9:d4:
                    61:f1:5c:ee:3e:87:46:71:27:7c:36:e3:31:64:d0:
                    b7:8b:b2:f8:98:fb:53:1f:49:83:39:3e:be:80:86:
                    1f:03:42:5d:d4:15:e9:f0:3a:0a:c2:c8:09:0b:fa:
                    44:b4:f4:55:ae:95:b7:70:36:61:91:8e:f0:0f:e7:
                    6b:95:9e:f8:08:c6:8b:56:e5:6b:fb:87:9c:d1:23:
                    f2:6e:d8:bd:79:7d:c2:eb:bd:74:f7:e0:43:90:d2:
                    fe:6b:40:02:9a:9e:ad:fb:0f:b5:96:d7:4f:1b:06:
                    df:a1:ac:09:b5:75:63:e0:5f:7e:5c:08:12:19:a3:
                    25:25:aa:d3:3d:7e:6d:4e:2e:76:ef:b9:5f:24:0d:
                    eb:ef:2e:ca:cc:ed:10:2e:3d:8c:13:b3:e9:65:9e:
                    c3:9a:b1:7b:e4:c3:1f:3d:c5:5d:b9:5f:ab:6e:b8:
                    cc:ed:9d:83:c1:8c:87:84:92:9a:70:77:98:62:f7:
                    66:6a:a0:9d:f7:9e:f9:8d:e6:d3:4b:95:c6:2d:5f:
                    11:f3:5d:e6:1c:b8:c1:b1:42:a5:60:b8:07:d0:34:
                    c2:88:7d:df:b8:05:9f:7a:57:69:8a:ad:69:7a:ad:
                    43:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:32:88:E2:0B:80:A7:93:F3:FC:7B:62:65:A4:8E:08:56:34:3C:04
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d91fbc0b-d151-42db-9bd6-3c71fa153dda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:ac00::/40

    Signature Algorithm: sha256WithRSAEncryption
         02:7f:43:9b:82:64:09:96:2f:88:ea:73:57:9a:83:ca:c5:66:
         cd:fa:90:69:af:b1:b2:a8:0e:bd:8a:60:1a:e0:1b:9c:59:82:
         df:57:a6:f5:55:c7:8b:f0:3d:30:32:5e:cd:dd:cd:d8:28:b1:
         50:08:98:7c:b8:a9:6a:84:06:72:35:7e:65:33:1e:b4:ce:41:
         b2:0a:f2:b4:60:4f:a2:17:90:c0:f4:32:00:7a:d4:ba:3c:98:
         94:cc:ac:b5:ad:98:9a:ff:bf:ea:f3:f9:d2:e3:de:18:04:88:
         6b:d5:e2:d1:84:ed:ff:33:a3:31:0b:b6:11:7d:9f:59:1b:c2:
         f2:e8:4b:0a:c1:26:2e:5c:be:58:5f:39:e9:62:a3:84:9c:22:
         d2:ee:16:c1:6f:26:77:c7:c7:b1:08:33:6e:d4:03:d6:84:cc:
         e4:d4:c7:2f:e4:0a:95:49:43:dd:bc:21:48:58:ed:8d:f7:b9:
         20:ed:2b:00:04:bb:3a:3f:c8:e1:10:99:65:b2:6d:55:9c:e0:
         6a:00:e8:3a:ef:39:a5:ac:9a:65:d4:a8:ff:73:d2:e2:3f:71:
         28:bd:3c:8e:62:18:27:ae:43:7b:bd:35:f0:d3:17:31:1d:bb:
         37:6e:0e:c5:9b:7a:d8:67:73:15:aa:36:04:76:d1:a6:65:71:
         13:e2:58:61
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUURBN+8K/CT1k67b1IYwjFmEKbXcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMjE1NTA2WhcNMjUxMjA1MjM1OTU5
WjB6MUkwRwYDVQQFE0A3MTBlNzc3YTdhZmNjZDFmNTdiMWMzMmY1YzFjNTBjMGIz
M2Q5YTQ3N2UzZDMyYzdhZDdhYWUwYjliMTk0ZjhmMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCxtk2WtyWacxYFJV2JYi7SCn7jePdVzTlzGTDZ1GHxXO4+
h0ZxJ3w24zFk0LeLsviY+1MfSYM5Pr6Ahh8DQl3UFenwOgrCyAkL+kS09FWulbdw
NmGRjvAP52uVnvgIxotW5Wv7h5zRI/Ju2L15fcLrvXT34EOQ0v5rQAKanq37D7WW
108bBt+hrAm1dWPgX35cCBIZoyUlqtM9fm1OLnbvuV8kDevvLsrM7RAuPYwTs+ll
nsOasXvkwx89xV25X6tuuMztnYPBjIeEkppwd5hi92ZqoJ33nvmN5tNLlcYtXxHz
XeYcuMGxQqVguAfQNMKIfd+4BZ96V2mKrWl6rUNbAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUuDKI4guAp5Pz/HtiZaSOCFY0PAQwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1L2Q5MWZiYzBiLWQxNTEtNDJkYi05YmQ2LTNjNzFmYTE1M2RkYS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAmAJAArDANBgkqhkiG9w0BAQsFAAOCAQEAAn9Dm4JkCZYviOpzV5qDysVm
zfqQaa+xsqgOvYpgGuAbnFmC31em9VXHi/A9MDJezd3N2CixUAiYfLipaoQGcjV+
ZTMetM5BsgrytGBPoheQwPQyAHrUujyYlMysta2Ymv+/6vP50uPeGASIa9Xi0YTt
/zOjMQu2EX2fWRvC8uhLCsEmLly+WF856WKjhJwi0u4WwW8md8fHsQgzbtQD1oTM
5NTHL+QKlUlD3bwhSFjtjfe5IO0rAAS7Oj/I4RCZZbJtVZzgagDoOu85payaZdSo
/3PS4j9xKL08jmIYJ65De7018NMXMR27N24OxZt62GdzFao2BHbRpmVxE+JYYQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:43:01 2025 by rpki-client