Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e9eaf12c-ad25-40f6-9df5-2df9c46d14e5.roa
File:                     e9eaf12c-ad25-40f6-9df5-2df9c46d14e5.roa (raw, json)
Hash identifier:          Dzfgal0Lc0Yp2fM+X4E0oN6qLoyterHUBoVduFjXJZA=
Subject key identifier:   8E:80:6F:27:5E:BD:B0:1B:CD:6C:D2:1F:E6:59:9B:FA:E5:2E:F5:E3
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       1D69EC9AFE334B8E1326CDF19C1087DD0E519C62
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e9eaf12c-ad25-40f6-9df5-2df9c46d14e5.roa
Signing time:             Fri 31 Oct 2025 03:43:22 +0000
ROA not before:           Fri 31 Oct 2025 03:43:22 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2db4::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:69:ec:9a:fe:33:4b:8e:13:26:cd:f1:9c:10:87:dd:0e:51:9c:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 03:43:22 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=170fc594b5a009b74806576f8c58f57771ae1cfddd93a86071523a96716f4acb, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:c3:ab:36:31:42:e8:47:22:98:bf:35:b9:bd:
                    5a:5f:b0:21:d5:a1:bd:ca:b2:80:e0:cf:58:94:6d:
                    87:f6:dc:29:bd:62:9f:d0:3f:41:7e:42:1d:ed:da:
                    9f:5f:5e:e6:36:56:c9:88:de:06:c3:6c:01:16:55:
                    9d:95:86:5c:63:6f:ad:77:c6:cf:18:e2:5f:d1:d5:
                    9d:b9:25:de:4e:b2:83:a1:c3:d9:80:9e:a5:5e:c5:
                    98:33:5c:6c:41:16:b9:1c:16:85:d2:d9:f1:37:4d:
                    fb:35:a8:01:96:d6:a0:be:37:72:1b:88:6f:5c:b2:
                    86:8f:5d:de:11:c3:3a:b1:85:91:96:5f:b0:57:cc:
                    45:c7:39:58:0f:ed:69:3c:29:9e:db:a0:30:47:91:
                    dc:82:54:96:0c:2a:86:ec:9b:4a:3d:71:5e:12:2b:
                    fa:5e:d0:63:ae:49:75:17:c0:db:e1:35:2e:34:8f:
                    aa:5a:43:43:6e:1b:1e:28:9b:49:c6:d5:7b:6e:79:
                    c8:3e:38:06:dc:06:15:c8:f4:f1:ac:b0:6f:27:4f:
                    bf:17:c7:3e:d5:19:88:8a:07:e9:ea:20:3c:3f:4a:
                    ec:d7:8b:92:ed:f6:bd:93:a6:cd:9f:62:fe:ba:c5:
                    ed:0f:b6:8f:9b:ae:c5:ad:3f:33:fc:96:0c:07:79:
                    ce:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:80:6F:27:5E:BD:B0:1B:CD:6C:D2:1F:E6:59:9B:FA:E5:2E:F5:E3
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e9eaf12c-ad25-40f6-9df5-2df9c46d14e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2db4::/46

    Signature Algorithm: sha256WithRSAEncryption
         8c:d8:16:3b:31:bf:08:6b:a5:8f:d1:e5:52:86:9b:7c:2c:42:
         f9:be:13:31:f5:b2:cf:c2:0b:38:14:e9:92:ad:c2:44:12:ca:
         05:4c:b7:06:38:ec:1e:ff:02:e3:a6:1d:46:a2:41:34:0b:7a:
         2f:00:d6:d1:64:19:9d:b9:07:c7:38:63:d7:f8:e4:af:32:83:
         31:78:f7:12:fe:c9:80:3e:c4:db:81:3f:8f:73:a7:64:aa:8e:
         67:48:6f:98:91:05:82:28:f4:e4:1c:cd:29:e9:d1:04:68:99:
         6b:74:c6:a3:8f:0f:36:3f:26:19:81:db:7c:e0:83:3a:52:11:
         52:cf:07:b8:48:c4:47:52:7b:ad:b0:86:7e:90:47:a1:08:f3:
         c4:78:e1:77:d9:ef:11:8d:5c:ca:2d:0c:f4:7c:a7:38:3d:bc:
         bc:1c:e4:d5:d4:8e:1d:1b:ca:9c:77:d4:43:48:2a:7e:24:5b:
         1c:66:e4:d0:9e:14:b9:38:ad:61:91:80:00:45:01:f5:34:c9:
         cf:29:a5:81:47:ca:7b:82:13:a7:35:05:2a:00:02:6c:33:56:
         03:68:03:1e:da:0f:1a:45:cf:70:3d:e4:09:6d:58:76:da:6b:
         cb:47:a8:9e:21:f1:2f:6f:2d:7b:3a:ea:28:87:15:6d:8c:ee:
         8d:ab:b9:2d
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUHWnsmv4zS44TJs3xnBCH3Q5RnGIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDM0MzIyWhcNMjUxMjA1MjM1OTU5
WjB6MUkwRwYDVQQFE0AxNzBmYzU5NGI1YTAwOWI3NDgwNjU3NmY4YzU4ZjU3Nzcx
YWUxY2ZkZGQ5M2E4NjA3MTUyM2E5NjcxNmY0YWNiMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDcw6s2MULoRyKYvzW5vVpfsCHVob3KsoDgz1iUbYf23Cm9
Yp/QP0F+Qh3t2p9fXuY2VsmI3gbDbAEWVZ2Vhlxjb613xs8Y4l/R1Z25Jd5OsoOh
w9mAnqVexZgzXGxBFrkcFoXS2fE3Tfs1qAGW1qC+N3IbiG9csoaPXd4RwzqxhZGW
X7BXzEXHOVgP7Wk8KZ7boDBHkdyCVJYMKobsm0o9cV4SK/pe0GOuSXUXwNvhNS40
j6paQ0NuGx4om0nG1Xtuecg+OAbcBhXI9PGssG8nT78Xxz7VGYiKB+nqIDw/SuzX
i5Lt9r2Tps2fYv66xe0Pto+brsWtPzP8lgwHec5pAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUjoBvJ169sBvNbNIf5lmb+uUu9eMwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1L2U5ZWFmMTJjLWFkMjUtNDBmNi05ZGY1LTJkZjljNDZkMTRlNS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwImAJAALbQwDQYJKoZIhvcNAQELBQADggEBAIzYFjsxvwhrpY/R5VKGm3ws
Qvm+EzH1ss/CCzgU6ZKtwkQSygVMtwY47B7/AuOmHUaiQTQLei8A1tFkGZ25B8c4
Y9f45K8ygzF49xL+yYA+xNuBP49zp2SqjmdIb5iRBYIo9OQczSnp0QRomWt0xqOP
DzY/JhmB23zggzpSEVLPB7hIxEdSe62whn6QR6EI88R44XfZ7xGNXMotDPR8pzg9
vLwc5NXUjh0bypx31ENIKn4kWxxm5NCeFLk4rWGRgABFAfU0yc8ppYFHynuCE6c1
BSoAAmwzVgNoAx7aDxpFz3A95AltWHbaa8tHqJ4h8S9vLXs66iiHFW2M7o2ruS0=
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:42:39 2025 by rpki-client