Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/70601067-e29b-41ca-9157-a63ace434242.roa
File:                     70601067-e29b-41ca-9157-a63ace434242.roa (raw, json)
Hash identifier:          WppK1Vsnjdd9729YNu+IScIB3z9DpcGA01Pp4wddHhM=
Subject key identifier:   F9:F2:6C:66:09:67:83:A3:1F:C4:5E:1D:C1:96:47:58:57:43:85:11
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       77ADD536B6BC9FA1573A6746156DF4A39D41C2C9
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/70601067-e29b-41ca-9157-a63ace434242.roa
Signing time:             Thu 30 Oct 2025 21:25:23 +0000
ROA not before:           Thu 30 Oct 2025 21:25:23 +0000
ROA not after:            Thu 04 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:169e::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 19 Nov 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:ad:d5:36:b6:bc:9f:a1:57:3a:67:46:15:6d:f4:a3:9d:41:c2:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 30 21:25:23 2025 GMT
            Not After : Dec  4 23:59:59 2025 GMT
        Subject: serialNumber=92393c8185d00fdd712a72915d684a956a26a862f630475d385b13997c5977b0, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:38:13:bd:f6:f1:92:ff:34:21:cc:31:ba:d7:
                    52:39:9d:90:4c:f6:be:d1:5f:2b:22:67:60:be:9b:
                    12:97:a5:13:51:16:e0:07:2e:c8:07:b1:b7:77:07:
                    40:d9:e7:99:f5:c7:91:7b:be:1f:59:44:cc:f3:de:
                    af:6b:c2:d5:46:93:43:7f:09:38:50:07:83:52:af:
                    37:48:00:38:d7:69:df:58:c4:fe:8b:93:5b:37:87:
                    f8:f2:cd:da:84:b9:71:ea:c3:6b:a7:00:6e:0f:79:
                    06:e7:75:15:16:26:a4:9b:6d:b8:9a:4f:fc:eb:a4:
                    3e:1e:28:d1:08:ae:31:90:f4:c5:dd:c3:aa:f7:26:
                    b2:32:ce:a2:c7:3e:64:c3:3f:35:39:91:2f:4d:45:
                    31:1a:61:9e:ed:fa:de:5f:be:fd:fc:99:92:bb:5b:
                    6d:d8:e1:22:e4:32:56:d3:b3:bf:8d:c0:c0:50:2b:
                    0f:b0:7e:24:c8:75:b0:12:87:63:e0:dd:62:22:b0:
                    f7:23:c5:a0:ef:d5:e5:fd:7d:dd:ff:b3:0b:36:76:
                    a8:7b:f5:3d:4e:7b:0e:74:f5:f1:b5:ee:d6:e1:e9:
                    78:c7:d0:40:66:0b:2e:88:b1:53:96:3d:b9:e8:ee:
                    18:52:37:42:ae:21:7a:fe:50:c7:5c:57:36:9b:70:
                    91:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:F2:6C:66:09:67:83:A3:1F:C4:5E:1D:C1:96:47:58:57:43:85:11
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/70601067-e29b-41ca-9157-a63ace434242.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:169e::/47

    Signature Algorithm: sha256WithRSAEncryption
         09:a4:5d:78:5e:7f:08:4d:4e:4c:13:13:65:52:b7:1e:75:bb:
         34:80:14:5a:80:f9:c6:23:e2:84:a4:74:3f:df:c3:c7:06:92:
         79:16:1e:25:51:22:f2:91:07:b3:16:78:0e:62:87:4b:06:de:
         27:b3:0e:50:a6:90:34:f6:3b:3c:a9:47:06:2e:ce:00:31:c9:
         81:35:e0:bc:f4:3a:69:64:64:74:6b:b1:74:d4:fd:da:51:25:
         56:42:9c:30:3f:eb:05:27:ca:5d:13:20:eb:7a:e9:20:ec:78:
         a0:e5:6a:e0:ef:fa:38:32:77:9b:84:a5:b3:59:11:f0:fb:81:
         2e:ef:63:63:72:e3:e1:7c:67:6e:82:a5:b5:84:1d:86:1b:cf:
         eb:f5:68:52:5a:ac:65:e5:ab:63:07:93:22:be:4b:4f:f3:43:
         49:54:e0:98:92:c2:ee:79:bc:18:4b:17:43:dd:90:7c:65:9e:
         02:bb:12:96:43:73:58:93:25:78:89:2b:35:42:6a:49:5e:34:
         88:96:b7:44:d5:d3:b0:a4:0b:55:0d:ef:55:f8:ed:7b:6b:76:
         97:6f:d2:17:df:4d:a8:8b:85:30:e3:e3:0d:10:96:16:19:eb:
         1a:73:8c:62:07:84:60:09:18:88:08:43:92:fe:24:99:d7:71:
         81:e2:58:e0
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUd63VNra8n6FXOmdGFW30o51BwskwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMwMjEyNTIzWhcNMjUxMjA0MjM1OTU5
WjB6MUkwRwYDVQQFE0A5MjM5M2M4MTg1ZDAwZmRkNzEyYTcyOTE1ZDY4NGE5NTZh
MjZhODYyZjYzMDQ3NWQzODViMTM5OTdjNTk3N2IwMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCjOBO99vGS/zQhzDG611I5nZBM9r7RXysiZ2C+mxKXpRNR
FuAHLsgHsbd3B0DZ55n1x5F7vh9ZRMzz3q9rwtVGk0N/CThQB4NSrzdIADjXad9Y
xP6Lk1s3h/jyzdqEuXHqw2unAG4PeQbndRUWJqSbbbiaT/zrpD4eKNEIrjGQ9MXd
w6r3JrIyzqLHPmTDPzU5kS9NRTEaYZ7t+t5fvv38mZK7W23Y4SLkMlbTs7+NwMBQ
Kw+wfiTIdbASh2Pg3WIisPcjxaDv1eX9fd3/sws2dqh79T1Oew509fG17tbh6XjH
0EBmCy6IsVOWPbno7hhSN0KuIXr+UMdcVzabcJEzAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQU+fJsZglng6MfxF4dwZZHWFdDhREwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzcwNjAxMDY3LWUyOWItNDFjYS05MTU3LWE2M2FjZTQzNDI0Mi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwEmAJAAFp4wDQYJKoZIhvcNAQELBQADggEBAAmkXXhefwhNTkwTE2VStx51
uzSAFFqA+cYj4oSkdD/fw8cGknkWHiVRIvKRB7MWeA5ih0sG3iezDlCmkDT2Ozyp
RwYuzgAxyYE14Lz0OmlkZHRrsXTU/dpRJVZCnDA/6wUnyl0TIOt66SDseKDlauDv
+jgyd5uEpbNZEfD7gS7vY2Ny4+F8Z26CpbWEHYYbz+v1aFJarGXlq2MHkyK+S0/z
Q0lU4JiSwu55vBhLF0PdkHxlngK7EpZDc1iTJXiJKzVCakleNIiWt0TV07CkC1UN
71X47Xtrdpdv0hffTaiLhTDj4w0QlhYZ6xpzjGIHhGAJGIgIQ5L+JJnXcYHiWOA=
-----END CERTIFICATE-----
Generated at Tue Nov 18 05:41:36 2025 by rpki-client