Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ed5e9e3c-8b7f-4443-8227-eca5584ab566.roa
File:                     ed5e9e3c-8b7f-4443-8227-eca5584ab566.roa (raw, json)
Hash identifier:          ZyoiAtbYi2SIWA2eZ24GMGLILpHy1VpltxuLCRk673Y=
Subject key identifier:   C7:7B:8E:57:EF:8C:F5:30:B1:4D:96:23:75:02:2B:51:92:E1:46:8B
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       09D2BB64198A2E26B0823C7AB351F6D55C902799
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ed5e9e3c-8b7f-4443-8227-eca5584ab566.roa
Signing time:             Fri 31 Oct 2025 03:42:01 +0000
ROA not before:           Fri 31 Oct 2025 03:42:01 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2d78::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:d2:bb:64:19:8a:2e:26:b0:82:3c:7a:b3:51:f6:d5:5c:90:27:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 03:42:01 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=ebce1b953b869d918fe41254f761bd75468c3241d179a48c5757bd25fa67eebc, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:37:b8:30:c6:f3:76:4a:f0:a1:f6:83:38:c3:
                    06:94:05:73:8c:59:43:cf:1a:75:99:96:64:c8:e7:
                    65:fb:fe:a3:d0:22:06:0a:02:53:c7:87:b0:b0:ca:
                    c3:dd:30:78:21:b0:15:11:b2:e7:e7:de:f0:a7:d3:
                    98:70:52:57:78:25:ec:6b:e2:88:29:ac:59:47:66:
                    82:3a:46:b5:99:0e:cd:da:88:14:6f:48:cb:79:a7:
                    b3:8e:60:5d:95:a8:ce:62:41:05:79:0d:4d:c7:1b:
                    97:fe:1a:e7:99:95:2b:b6:04:4e:59:8e:0c:38:2d:
                    b0:ca:de:64:b2:e1:35:80:ff:24:5c:28:80:d4:f4:
                    25:5b:c4:50:d3:12:00:99:c5:f6:16:2d:d7:25:5f:
                    a5:8a:0a:c6:52:b1:ce:a2:86:a1:a6:6d:c0:84:54:
                    36:e9:f5:e0:7f:c6:0e:d4:1a:d7:f9:05:fe:a1:4e:
                    80:0c:dc:bd:93:b8:c6:d3:c7:7b:74:c2:b2:d1:22:
                    5f:8b:79:bd:a2:f0:31:36:eb:fc:75:95:64:db:61:
                    1e:b7:67:69:1b:5e:9f:f0:c9:06:b7:de:13:e2:5a:
                    ea:e6:81:31:97:e2:74:b8:0e:36:d6:0e:ef:29:15:
                    fd:aa:ab:e7:40:85:0d:14:de:a8:ac:76:ed:e3:b9:
                    e5:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:7B:8E:57:EF:8C:F5:30:B1:4D:96:23:75:02:2B:51:92:E1:46:8B
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ed5e9e3c-8b7f-4443-8227-eca5584ab566.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2d78::/46

    Signature Algorithm: sha256WithRSAEncryption
         b7:15:af:48:25:4a:91:71:87:f8:9f:4d:f8:60:3f:f2:fc:c2:
         75:81:19:2d:cb:c7:ed:3c:04:51:f4:41:0c:f0:b1:ae:02:51:
         80:11:60:4f:08:dd:b8:36:9d:71:a3:54:27:bf:46:c1:f0:69:
         86:71:eb:83:21:a8:f5:98:85:d6:5d:64:99:d6:84:94:90:72:
         23:3a:7f:55:5a:c4:f2:d3:93:8c:9e:ce:1f:ff:59:bf:ff:93:
         d7:84:5a:2f:b8:8b:a9:fa:f3:16:d1:5a:9b:3f:8e:ac:6d:b2:
         6f:0c:34:35:25:6b:2b:4b:2a:51:65:4f:e1:66:41:23:e0:a7:
         41:3c:aa:8a:a3:f2:d9:47:e7:76:10:a1:30:60:42:c8:dd:95:
         66:4c:52:6b:59:5b:80:82:ce:ec:97:4f:31:58:35:05:b3:ed:
         34:1a:21:5f:43:a3:db:89:6c:1c:ae:9d:5d:8a:15:e0:d4:b3:
         47:d2:a4:2f:dc:70:28:69:ad:48:e9:41:64:2f:26:20:91:e8:
         2f:b9:45:7c:8c:2f:b8:32:69:6a:77:32:2d:2b:15:96:a1:be:
         6f:05:d7:31:5a:ed:12:2c:47:fe:c9:76:98:b9:cd:70:6d:6f:
         38:62:89:48:39:8a:3b:e8:f2:fe:56:7a:b9:3b:b0:d8:c8:77:
         48:00:30:c3
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUCdK7ZBmKLiawgjx6s1H21VyQJ5kwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDM0MjAxWhcNMjUxMjA1MjM1OTU5
WjB6MUkwRwYDVQQFE0BlYmNlMWI5NTNiODY5ZDkxOGZlNDEyNTRmNzYxYmQ3NTQ2
OGMzMjQxZDE3OWE0OGM1NzU3YmQyNWZhNjdlZWJjMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCuN7gwxvN2SvCh9oM4wwaUBXOMWUPPGnWZlmTI52X7/qPQ
IgYKAlPHh7CwysPdMHghsBURsufn3vCn05hwUld4Jexr4ogprFlHZoI6RrWZDs3a
iBRvSMt5p7OOYF2VqM5iQQV5DU3HG5f+GueZlSu2BE5Zjgw4LbDK3mSy4TWA/yRc
KIDU9CVbxFDTEgCZxfYWLdclX6WKCsZSsc6ihqGmbcCEVDbp9eB/xg7UGtf5Bf6h
ToAM3L2TuMbTx3t0wrLRIl+Leb2i8DE26/x1lWTbYR63Z2kbXp/wyQa33hPiWurm
gTGX4nS4DjbWDu8pFf2qq+dAhQ0U3qisdu3jueW/AgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUx3uOV++M9TCxTZYjdQIrUZLhRoswHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1L2VkNWU5ZTNjLThiN2YtNDQ0My04MjI3LWVjYTU1ODRhYjU2Ni5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwImAJAALXgwDQYJKoZIhvcNAQELBQADggEBALcVr0glSpFxh/ifTfhgP/L8
wnWBGS3Lx+08BFH0QQzwsa4CUYARYE8I3bg2nXGjVCe/RsHwaYZx64MhqPWYhdZd
ZJnWhJSQciM6f1VaxPLTk4yezh//Wb//k9eEWi+4i6n68xbRWps/jqxtsm8MNDUl
aytLKlFlT+FmQSPgp0E8qoqj8tlH53YQoTBgQsjdlWZMUmtZW4CCzuyXTzFYNQWz
7TQaIV9Do9uJbByunV2KFeDUs0fSpC/ccChprUjpQWQvJiCR6C+5RXyML7gyaWp3
Mi0rFZahvm8F1zFa7RIsR/7Jdpi5zXBtbzhiiUg5ijvo8v5Werk7sNjId0gAMMM=
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:46:16 2025 by rpki-client