Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f22a4505-4b10-4c5d-ac4e-7b14c3af103b.roa
File:                     f22a4505-4b10-4c5d-ac4e-7b14c3af103b.roa (raw, json)
Hash identifier:          4QeXk+SHUSCubOt9irxVrAUvZCYIPLJQhEwEm8yiCVw=
Subject key identifier:   19:9A:7C:21:B2:30:70:7F:E0:AE:66:31:8F:6C:E2:DD:19:B6:A8:59
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       76029F932B87201DBFF1B2C7777EB0EF077CAA70
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f22a4505-4b10-4c5d-ac4e-7b14c3af103b.roa
Signing time:             Thu 30 Oct 2025 22:43:43 +0000
ROA not before:           Thu 30 Oct 2025 22:43:43 +0000
ROA not after:            Thu 04 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:244e::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:02:9f:93:2b:87:20:1d:bf:f1:b2:c7:77:7e:b0:ef:07:7c:aa:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 30 22:43:43 2025 GMT
            Not After : Dec  4 23:59:59 2025 GMT
        Subject: serialNumber=92173c03c0af66e69a72a70451a282edd73abf45d28f1a05bf74173206c98db2, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:94:47:6c:42:ae:2c:f2:38:21:d6:89:4f:17:
                    36:b9:50:99:c5:34:02:a4:91:4d:05:78:8d:a8:90:
                    2d:f0:1c:c7:af:c3:40:8a:cf:7c:64:35:65:ec:a2:
                    40:d8:b3:1b:09:3e:2d:f3:32:ad:2c:2b:91:14:96:
                    64:83:fc:e4:17:f9:f4:76:fb:49:31:bf:07:10:87:
                    0a:d6:58:a0:ee:b4:24:21:78:26:10:11:dc:f3:68:
                    bd:1a:80:6f:36:2c:ad:b6:02:1a:8a:f9:4c:15:f7:
                    8d:c0:49:08:15:6d:51:9b:16:df:6b:4a:57:91:cb:
                    40:5a:19:3c:8e:4c:dc:4d:6e:3f:4c:db:e8:76:a1:
                    77:b5:4d:3a:b4:09:1b:2a:24:e9:fb:7d:df:71:55:
                    a9:11:bd:71:e3:8f:05:56:27:8f:ce:4e:f1:96:27:
                    2f:84:4c:ef:37:04:aa:fe:c5:9f:80:e7:11:87:45:
                    45:de:41:72:6f:2b:52:4b:7e:9e:8f:ec:51:3c:7e:
                    eb:6f:fe:2e:ac:a4:39:a6:11:64:da:24:44:d7:fa:
                    37:d2:5d:78:ae:c6:a4:68:f7:af:51:47:be:32:6f:
                    64:16:ab:07:3e:4e:41:54:c3:e4:51:43:c8:2e:3f:
                    55:44:41:cd:74:f3:9d:f6:8b:fb:2b:35:ee:4b:c4:
                    2d:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:9A:7C:21:B2:30:70:7F:E0:AE:66:31:8F:6C:E2:DD:19:B6:A8:59
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f22a4505-4b10-4c5d-ac4e-7b14c3af103b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:244e::/47

    Signature Algorithm: sha256WithRSAEncryption
         ac:b7:63:69:10:5e:68:32:00:ea:7e:2a:2b:ff:8a:12:29:a6:
         b2:39:7e:53:f1:d1:8f:6c:3b:e2:88:7e:9e:3e:c9:0a:86:2c:
         5d:ad:84:b9:d0:0c:fd:ea:07:53:96:51:d2:7a:92:89:80:9a:
         e5:94:88:93:6e:24:87:8d:d2:d2:7a:0f:c3:f7:43:bb:b0:9c:
         bb:8a:e5:ae:19:30:17:e3:8a:2f:a4:94:42:93:a1:9b:cc:9a:
         5b:35:82:00:3f:ba:dc:00:0b:6e:84:a2:06:06:dc:a9:9b:88:
         48:3e:51:c3:a9:74:2c:e9:13:a9:95:62:a2:c1:22:07:21:b1:
         af:8e:bd:e9:7b:3e:5f:3d:3e:f1:e2:42:73:df:3e:9b:dd:7e:
         3d:00:55:60:b0:3b:85:f4:18:19:b8:88:17:ad:e5:77:79:11:
         88:31:f9:67:42:df:21:48:5f:a9:97:b4:f5:21:54:be:43:65:
         2e:f5:8a:a9:59:5a:90:d7:38:43:82:ac:2e:26:c5:37:78:03:
         64:58:ac:e8:3e:41:17:4d:f9:17:5a:a7:97:89:51:17:16:61:
         0b:62:8f:31:f3:d8:06:b4:6f:bd:b7:f2:8e:a4:f3:a7:e3:e2:
         b8:2c:40:b7:c5:68:d7:97:f0:e1:0e:73:da:c1:cd:34:54:1d:
         99:db:78:0c
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUdgKfkyuHIB2/8bLHd36w7wd8qnAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMwMjI0MzQzWhcNMjUxMjA0MjM1OTU5
WjB6MUkwRwYDVQQFE0A5MjE3M2MwM2MwYWY2NmU2OWE3MmE3MDQ1MWEyODJlZGQ3
M2FiZjQ1ZDI4ZjFhMDViZjc0MTczMjA2Yzk4ZGIyMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDVlEdsQq4s8jgh1olPFza5UJnFNAKkkU0FeI2okC3wHMev
w0CKz3xkNWXsokDYsxsJPi3zMq0sK5EUlmSD/OQX+fR2+0kxvwcQhwrWWKDutCQh
eCYQEdzzaL0agG82LK22AhqK+UwV943ASQgVbVGbFt9rSleRy0BaGTyOTNxNbj9M
2+h2oXe1TTq0CRsqJOn7fd9xVakRvXHjjwVWJ4/OTvGWJy+ETO83BKr+xZ+A5xGH
RUXeQXJvK1JLfp6P7FE8futv/i6spDmmEWTaJETX+jfSXXiuxqRo969RR74yb2QW
qwc+TkFUw+RRQ8guP1VEQc108532i/srNe5LxC3fAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUGZp8IbIwcH/grmYxj2zi3Rm2qFkwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1L2YyMmE0NTA1LTRiMTAtNGM1ZC1hYzRlLTdiMTRjM2FmMTAzYi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwEmAJAAJE4wDQYJKoZIhvcNAQELBQADggEBAKy3Y2kQXmgyAOp+Kiv/ihIp
prI5flPx0Y9sO+KIfp4+yQqGLF2thLnQDP3qB1OWUdJ6komAmuWUiJNuJIeN0tJ6
D8P3Q7uwnLuK5a4ZMBfjii+klEKToZvMmls1ggA/utwAC26EogYG3KmbiEg+UcOp
dCzpE6mVYqLBIgchsa+Ovel7Pl89PvHiQnPfPpvdfj0AVWCwO4X0GBm4iBet5Xd5
EYgx+WdC3yFIX6mXtPUhVL5DZS71iqlZWpDXOEOCrC4mxTd4A2RYrOg+QRdN+Rda
p5eJURcWYQtijzHz2Aa0b7238o6k86fj4rgsQLfFaNeX8OEOc9rBzTRUHZnbeAw=
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:37:55 2025 by rpki-client