Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e2537d34-b935-4543-ae5e-284d3a18609f.roa
File:                     e2537d34-b935-4543-ae5e-284d3a18609f.roa (raw, json)
Hash identifier:          Ygcrxgt5M1Fo9X4eO83eAaZOoSrpiPkwr+bKcAHDKO8=
Subject key identifier:   94:1D:15:B0:18:9A:B7:54:59:7F:03:E0:42:1F:33:71:18:37:B5:32
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       49CBC12AAE47AAE400AA5EEBC38E7B19795F26B9
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e2537d34-b935-4543-ae5e-284d3a18609f.roa
Signing time:             Thu 30 Oct 2025 21:53:46 +0000
ROA not before:           Thu 30 Oct 2025 21:53:46 +0000
ROA not after:            Thu 04 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:198e::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 19 Nov 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:cb:c1:2a:ae:47:aa:e4:00:aa:5e:eb:c3:8e:7b:19:79:5f:26:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 30 21:53:46 2025 GMT
            Not After : Dec  4 23:59:59 2025 GMT
        Subject: serialNumber=5640afa912a416cfbc7706ca359118e4b9febf24b47c637a24085940327d2904, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f9:c3:89:1f:76:52:42:47:34:b1:3a:b0:91:
                    d3:57:39:17:57:3d:68:b4:b3:d6:8a:c0:20:95:49:
                    89:1e:d4:ca:e3:de:a8:df:a4:8f:33:1a:a8:22:73:
                    c2:84:7d:cd:89:08:f6:1b:c4:0c:04:fa:9e:ea:3c:
                    e1:47:28:b3:bc:21:79:d3:d9:09:15:6a:ee:c1:93:
                    de:f9:a9:9e:3d:9c:2e:79:6c:e8:fa:9b:52:b7:d6:
                    f3:32:ba:d5:84:31:4d:65:6e:b3:3d:b1:8c:4b:7b:
                    a6:c5:6a:67:23:9d:9e:3b:97:9d:2b:98:29:87:6d:
                    1e:d0:b0:e2:f3:3b:47:c4:fe:73:ad:fe:a6:d9:51:
                    90:2b:16:c2:e7:40:3a:64:16:e9:4b:b5:21:01:8b:
                    4a:90:ff:a5:ff:23:50:38:75:31:6d:c3:87:c6:36:
                    33:74:c5:a5:3e:80:80:a1:07:e9:d5:bd:fb:ad:73:
                    52:3e:12:98:c7:98:06:2c:5b:07:44:f7:df:98:84:
                    89:54:33:94:0b:cf:2b:5f:f5:76:98:df:91:d0:4e:
                    b2:8a:30:81:3b:af:9c:78:8b:16:6f:35:f1:2e:fc:
                    c5:db:d8:c3:64:9d:32:4a:8c:dc:cf:46:de:e7:3c:
                    59:c6:42:a7:6c:31:3d:14:1c:15:80:5e:1f:b7:52:
                    10:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:1D:15:B0:18:9A:B7:54:59:7F:03:E0:42:1F:33:71:18:37:B5:32
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e2537d34-b935-4543-ae5e-284d3a18609f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:198e::/47

    Signature Algorithm: sha256WithRSAEncryption
         7b:5a:5f:71:7f:5c:68:ab:85:ec:92:7c:d8:33:d5:f1:53:7a:
         ec:41:bd:2b:47:d3:08:e6:1b:63:45:d6:dd:17:5a:fc:72:fb:
         7f:6a:62:61:0a:90:11:09:f2:4f:8b:28:e3:c1:92:cd:c2:db:
         76:bf:5a:bd:e6:2b:7f:ae:28:f2:45:47:e4:f4:f3:f4:75:ea:
         c2:a7:e3:f6:da:67:cc:db:84:fe:0a:c6:03:11:87:06:89:c6:
         a6:73:57:3e:ed:cd:7a:dc:1e:c2:99:33:3e:e4:b2:0a:e9:f9:
         36:18:9a:8d:ef:79:e8:d2:81:70:c3:b0:19:84:cb:f5:36:a5:
         e8:bc:7e:ca:c6:4e:5b:ab:6f:d0:cd:65:1e:da:0c:cb:e2:a6:
         bb:6c:4d:18:fb:01:e0:e4:c8:3d:6c:b6:57:89:de:3a:ea:e4:
         31:4f:6a:ef:06:ae:43:08:5c:be:5d:6f:e8:ef:8d:ff:60:8a:
         e1:c7:4b:a6:df:17:25:05:61:62:8c:ee:a8:b0:6b:89:83:65:
         31:71:fa:41:76:ab:bc:b5:c7:5b:83:27:76:c9:88:5d:65:66:
         e9:cb:43:cc:50:e0:af:bc:ca:da:07:f7:4f:bd:63:b9:49:c6:
         bc:4f:72:60:7d:b2:72:97:bc:a1:a4:78:8a:06:57:fa:37:70:
         44:ab:b1:34
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUScvBKq5HquQAql7rw457GXlfJrkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMwMjE1MzQ2WhcNMjUxMjA0MjM1OTU5
WjB6MUkwRwYDVQQFE0A1NjQwYWZhOTEyYTQxNmNmYmM3NzA2Y2EzNTkxMThlNGI5
ZmViZjI0YjQ3YzYzN2EyNDA4NTk0MDMyN2QyOTA0MS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDL+cOJH3ZSQkc0sTqwkdNXORdXPWi0s9aKwCCVSYke1Mrj
3qjfpI8zGqgic8KEfc2JCPYbxAwE+p7qPOFHKLO8IXnT2QkVau7Bk975qZ49nC55
bOj6m1K31vMyutWEMU1lbrM9sYxLe6bFamcjnZ47l50rmCmHbR7QsOLzO0fE/nOt
/qbZUZArFsLnQDpkFulLtSEBi0qQ/6X/I1A4dTFtw4fGNjN0xaU+gIChB+nVvfut
c1I+EpjHmAYsWwdE99+YhIlUM5QLzytf9XaY35HQTrKKMIE7r5x4ixZvNfEu/MXb
2MNknTJKjNzPRt7nPFnGQqdsMT0UHBWAXh+3UhBNAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUlB0VsBiat1RZfwPgQh8zcRg3tTIwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1L2UyNTM3ZDM0LWI5MzUtNDU0My1hZTVlLTI4NGQzYTE4NjA5Zi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwEmAJAAGY4wDQYJKoZIhvcNAQELBQADggEBAHtaX3F/XGirheySfNgz1fFT
euxBvStH0wjmG2NF1t0XWvxy+39qYmEKkBEJ8k+LKOPBks3C23a/Wr3mK3+uKPJF
R+T08/R16sKn4/baZ8zbhP4KxgMRhwaJxqZzVz7tzXrcHsKZMz7ksgrp+TYYmo3v
eejSgXDDsBmEy/U2pei8fsrGTlurb9DNZR7aDMviprtsTRj7AeDkyD1stleJ3jrq
5DFPau8GrkMIXL5db+jvjf9giuHHS6bfFyUFYWKM7qiwa4mDZTFx+kF2q7y1x1uD
J3bJiF1lZunLQ8xQ4K+8ytoH90+9Y7lJxrxPcmB9snKXvKGkeIoGV/o3cESrsTQ=
-----END CERTIFICATE-----
Generated at Tue Nov 18 08:22:31 2025 by rpki-client