Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6f598b0a-1c3b-4ad0-b2c5-361a1747b321.roa
File:                     6f598b0a-1c3b-4ad0-b2c5-361a1747b321.roa (raw, json)
Hash identifier:          KY3njCTo0Nn4XOQyPBU0ZG0fdSm8Ek18e5Uo49GTxPo=
Subject key identifier:   47:3E:C9:5F:AB:CB:2A:0F:28:57:B2:0E:16:68:25:23:60:F3:B0:6F
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       2A3FEF22080035CEAA809BCACDAA6BA8B4571192
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6f598b0a-1c3b-4ad0-b2c5-361a1747b321.roa
Signing time:             Fri 31 Oct 2025 05:38:51 +0000
ROA not before:           Fri 31 Oct 2025 05:38:51 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:27f0::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 19 Nov 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:3f:ef:22:08:00:35:ce:aa:80:9b:ca:cd:aa:6b:a8:b4:57:11:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 05:38:51 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=25dd9195b49153c187e2b7b41618ed7e77f551670d5a6c323e3d5fe613b32aba, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:3d:fe:b8:a9:12:ea:e4:86:c3:20:7f:58:31:
                    bd:7a:31:88:df:c2:16:37:44:69:df:1b:db:4e:cf:
                    66:b1:f6:d2:57:a1:4e:1d:26:76:eb:21:31:12:b4:
                    65:51:37:e6:b3:c3:23:e6:78:5d:78:7e:83:b1:ab:
                    8b:76:ba:15:a4:cc:1f:a2:25:b8:76:c4:8e:0d:54:
                    e7:17:88:29:ab:26:fa:81:ff:56:ea:08:32:e8:88:
                    be:ae:50:19:79:b1:fc:6f:c2:24:1c:71:11:f7:06:
                    b7:25:31:78:02:51:43:76:c2:f0:e8:cb:0c:0e:51:
                    1c:90:68:53:88:7e:58:d7:ab:a9:f3:ef:0a:23:a3:
                    c1:26:cf:51:fe:2e:7e:51:d3:1f:f5:7a:fb:9c:4c:
                    80:43:24:0e:da:cd:72:90:84:f5:ba:44:01:11:41:
                    ad:60:49:de:22:4a:b7:ed:7e:ab:5b:84:8d:a2:46:
                    fc:98:55:67:11:30:78:98:56:80:93:0a:31:fa:72:
                    e2:49:aa:dc:a1:ac:e6:be:80:c5:7a:87:0e:c3:f9:
                    41:0a:1f:3b:94:47:b4:87:a1:b1:cc:ff:a4:ab:e2:
                    e8:1d:8b:30:ae:65:87:83:b2:55:43:20:cb:d0:28:
                    67:a9:26:6f:44:a1:6f:19:da:bb:be:1a:24:bf:f0:
                    13:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:3E:C9:5F:AB:CB:2A:0F:28:57:B2:0E:16:68:25:23:60:F3:B0:6F
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6f598b0a-1c3b-4ad0-b2c5-361a1747b321.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:27f0::/45

    Signature Algorithm: sha256WithRSAEncryption
         92:bb:c5:95:b0:99:e0:c7:1e:1c:63:64:71:9a:5b:53:1a:84:
         e8:a7:f9:33:bf:d6:75:b6:78:71:b9:21:21:bc:a7:23:57:56:
         81:09:4a:bc:da:77:00:bf:de:64:63:7b:1e:6f:db:0e:d4:10:
         ef:91:c8:22:3d:2a:15:29:05:15:98:5c:07:03:0d:fc:eb:13:
         ef:ec:56:93:30:d5:41:93:19:f3:7c:36:73:13:c1:43:0f:f9:
         7e:0c:41:77:10:67:fd:70:45:1d:98:42:48:37:67:45:3e:f3:
         2b:22:04:ff:c8:71:69:b3:ee:77:7b:88:3b:4b:d7:09:1c:c1:
         6c:53:59:41:33:e5:b1:74:68:ff:a4:75:4a:ab:09:d0:f7:97:
         98:4a:af:c6:90:a9:53:99:03:5a:3c:f2:e1:95:6a:64:4f:72:
         e6:6e:8d:93:71:20:3c:bf:fb:9f:e3:c1:cb:c2:2c:8a:25:ac:
         63:44:90:06:ce:7e:27:2f:06:5a:d7:d2:be:57:f6:eb:dd:6c:
         2e:37:d1:02:b6:66:e7:af:a6:c9:7f:cb:93:64:f9:c7:39:ed:
         62:e3:e8:52:c6:77:4d:e6:64:da:b9:02:bd:16:d3:bd:0a:15:
         7c:ab:d0:dd:58:2a:54:d3:76:3f:ad:6a:57:bc:e4:c9:b2:2b:
         8b:ab:e2:f0
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUKj/vIggANc6qgJvKzaprqLRXEZIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDUzODUxWhcNMjUxMjA1MjM1OTU5
WjB6MUkwRwYDVQQFE0AyNWRkOTE5NWI0OTE1M2MxODdlMmI3YjQxNjE4ZWQ3ZTc3
ZjU1MTY3MGQ1YTZjMzIzZTNkNWZlNjEzYjMyYWJhMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQD3Pf64qRLq5IbDIH9YMb16MYjfwhY3RGnfG9tOz2ax9tJX
oU4dJnbrITEStGVRN+azwyPmeF14foOxq4t2uhWkzB+iJbh2xI4NVOcXiCmrJvqB
/1bqCDLoiL6uUBl5sfxvwiQccRH3BrclMXgCUUN2wvDoywwOURyQaFOIfljXq6nz
7wojo8Emz1H+Ln5R0x/1evucTIBDJA7azXKQhPW6RAERQa1gSd4iSrftfqtbhI2i
RvyYVWcRMHiYVoCTCjH6cuJJqtyhrOa+gMV6hw7D+UEKHzuUR7SHobHM/6Sr4ugd
izCuZYeDslVDIMvQKGepJm9EoW8Z2ru+GiS/8BPDAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQURz7JX6vLKg8oV7IOFmglI2DzsG8wHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzZmNTk4YjBhLTFjM2ItNGFkMC1iMmM1LTM2MWExNzQ3YjMyMS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwMmAJAAJ/AwDQYJKoZIhvcNAQELBQADggEBAJK7xZWwmeDHHhxjZHGaW1Ma
hOin+TO/1nW2eHG5ISG8pyNXVoEJSrzadwC/3mRjex5v2w7UEO+RyCI9KhUpBRWY
XAcDDfzrE+/sVpMw1UGTGfN8NnMTwUMP+X4MQXcQZ/1wRR2YQkg3Z0U+8ysiBP/I
cWmz7nd7iDtL1wkcwWxTWUEz5bF0aP+kdUqrCdD3l5hKr8aQqVOZA1o88uGVamRP
cuZujZNxIDy/+5/jwcvCLIolrGNEkAbOficvBlrX0r5X9uvdbC430QK2Zuevpsl/
y5Nk+cc57WLj6FLGd03mZNq5Ar0W070KFXyr0N1YKlTTdj+tale85MmyK4ur4vA=
-----END CERTIFICATE-----
Generated at Tue Nov 18 08:24:28 2025 by rpki-client