Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/18f1a319-6550-4ec3-9b40-740770e3a564.roa
File:                     18f1a319-6550-4ec3-9b40-740770e3a564.roa (raw, json)
Hash identifier:          HX0pasGAdCLxoGH4HtF2aTel5sDyDbBMrxCb5QHrPJ8=
Subject key identifier:   E9:B2:55:BB:69:71:97:1F:13:1A:B6:32:65:FA:65:BF:4F:A5:61:55
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       27259C42D9608D0F06D2A56C9E16E821AB841BFA
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/18f1a319-6550-4ec3-9b40-740770e3a564.roa
Signing time:             Thu 30 Oct 2025 21:13:50 +0000
ROA not before:           Thu 30 Oct 2025 21:13:50 +0000
ROA not after:            Thu 04 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:15ec::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 19 Nov 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:25:9c:42:d9:60:8d:0f:06:d2:a5:6c:9e:16:e8:21:ab:84:1b:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 30 21:13:50 2025 GMT
            Not After : Dec  4 23:59:59 2025 GMT
        Subject: serialNumber=b9912134665cb97bc255f7fc510f212a3613e9dcdd8a5ffab8310b0a16ec76dc, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:2b:56:d3:65:76:f1:d8:41:89:26:8b:8a:d7:
                    69:fe:58:ab:12:05:b4:bc:21:6c:54:f9:73:fb:6e:
                    e4:99:5c:40:d7:c2:0b:42:38:8c:5c:ca:a9:f6:fa:
                    79:7f:9b:7d:39:f5:e1:cd:a0:32:39:28:4b:97:9b:
                    90:28:06:f9:d8:65:12:f5:61:8e:85:36:ee:4c:92:
                    b8:a6:00:b5:b9:b9:41:9d:9d:03:85:03:ab:e5:8f:
                    5b:6b:68:b1:55:9b:f5:4a:c5:49:03:76:bc:0e:4d:
                    66:43:17:28:08:39:5a:7b:a8:ae:72:31:25:c3:ae:
                    9b:6b:d3:60:09:50:64:b6:6d:b6:6a:12:e4:c3:65:
                    5f:30:9b:40:1a:12:51:f9:1d:34:bc:32:4c:1d:9d:
                    e8:b0:52:70:51:45:69:0b:d7:b5:15:09:2b:5e:b5:
                    44:7e:22:d7:ba:f3:19:76:c8:d9:7c:d3:a4:28:a7:
                    e8:90:a0:7a:4e:54:c3:39:c0:f0:b8:7e:a4:e1:d9:
                    72:69:35:6c:fa:22:a6:79:6c:72:48:31:6f:c6:b2:
                    f4:9d:30:7d:d8:39:19:1b:c0:62:0d:71:98:b2:3e:
                    a4:df:b8:1f:67:2f:a1:cd:12:c9:f9:fa:31:5e:1b:
                    ce:9f:e8:6b:eb:7e:35:aa:25:94:5c:05:da:cf:bb:
                    83:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:B2:55:BB:69:71:97:1F:13:1A:B6:32:65:FA:65:BF:4F:A5:61:55
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/18f1a319-6550-4ec3-9b40-740770e3a564.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:15ec::/47

    Signature Algorithm: sha256WithRSAEncryption
         06:db:3a:54:1a:6c:05:b5:7e:7e:1c:e9:07:90:c4:16:16:01:
         c5:05:5e:a0:58:f9:64:68:bc:d7:0f:30:0e:d1:58:9f:36:fd:
         d5:1e:c4:2d:0e:6b:71:58:da:c9:71:ec:06:61:85:c5:c6:a2:
         b2:7a:b0:3c:cc:28:2b:15:b8:ec:6c:b3:df:2e:e8:7d:28:25:
         e8:1c:61:7d:9d:0e:a6:90:5e:da:07:71:b1:17:9b:c5:76:fd:
         35:cf:4b:75:b5:e1:61:4c:72:dc:50:1e:87:03:79:f4:19:95:
         a9:ed:f4:5d:29:a6:60:6c:fb:0a:0b:da:0c:d1:1c:ac:2d:90:
         9e:16:90:a7:a7:8f:f7:6d:a9:a3:e9:43:03:2e:15:c1:61:7b:
         c9:aa:03:8b:5c:94:4b:cb:63:18:43:28:08:be:46:82:a5:52:
         32:31:ab:a9:0f:b2:01:f8:54:c3:e3:e1:4c:5b:9e:58:e4:28:
         78:61:54:bf:38:92:43:c6:82:e8:d2:5e:3f:7f:fb:ec:9b:99:
         4e:f5:69:d1:9f:ae:36:81:2d:e9:7a:5d:32:5b:40:79:7a:a3:
         af:8f:b3:db:7e:78:fe:94:ec:84:e0:cb:ba:76:51:c9:91:9f:
         83:7a:2b:0f:3b:3a:5f:85:1a:7e:9a:78:79:4a:e6:9c:bf:ec:
         06:81:4c:f2
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUJyWcQtlgjQ8G0qVsnhboIauEG/owDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMwMjExMzUwWhcNMjUxMjA0MjM1OTU5
WjB6MUkwRwYDVQQFE0BiOTkxMjEzNDY2NWNiOTdiYzI1NWY3ZmM1MTBmMjEyYTM2
MTNlOWRjZGQ4YTVmZmFiODMxMGIwYTE2ZWM3NmRjMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC6K1bTZXbx2EGJJouK12n+WKsSBbS8IWxU+XP7buSZXEDX
wgtCOIxcyqn2+nl/m3059eHNoDI5KEuXm5AoBvnYZRL1YY6FNu5MkrimALW5uUGd
nQOFA6vlj1traLFVm/VKxUkDdrwOTWZDFygIOVp7qK5yMSXDrptr02AJUGS2bbZq
EuTDZV8wm0AaElH5HTS8MkwdneiwUnBRRWkL17UVCStetUR+Ite68xl2yNl806Qo
p+iQoHpOVMM5wPC4fqTh2XJpNWz6IqZ5bHJIMW/GsvSdMH3YORkbwGINcZiyPqTf
uB9nL6HNEsn5+jFeG86f6GvrfjWqJZRcBdrPu4NtAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQU6bJVu2lxlx8TGrYyZfplv0+lYVUwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzE4ZjFhMzE5LTY1NTAtNGVjMy05YjQwLTc0MDc3MGUzYTU2NC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwEmAJAAFewwDQYJKoZIhvcNAQELBQADggEBAAbbOlQabAW1fn4c6QeQxBYW
AcUFXqBY+WRovNcPMA7RWJ82/dUexC0Oa3FY2slx7AZhhcXGorJ6sDzMKCsVuOxs
s98u6H0oJegcYX2dDqaQXtoHcbEXm8V2/TXPS3W14WFMctxQHocDefQZlant9F0p
pmBs+woL2gzRHKwtkJ4WkKenj/dtqaPpQwMuFcFhe8mqA4tclEvLYxhDKAi+RoKl
UjIxq6kPsgH4VMPj4UxbnljkKHhhVL84kkPGgujSXj9/++ybmU71adGfrjaBLel6
XTJbQHl6o6+Ps9t+eP6U7ITgy7p2UcmRn4N6Kw87Ol+FGn6aeHlK5py/7AaBTPI=
-----END CERTIFICATE-----
Generated at Tue Nov 18 08:22:27 2025 by rpki-client