Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f0ea7a95-861a-40d7-8fad-3bd142a3a5a9.roa
File:                     f0ea7a95-861a-40d7-8fad-3bd142a3a5a9.roa (raw, json)
Hash identifier:          Twsp3sPCwgYtuSyxKA0fcsdV4T4OIrrc0AD3glHjhVw=
Subject key identifier:   C5:D2:C5:42:0F:A9:ED:97:11:A1:FD:CC:61:D8:0F:05:72:A4:35:7D
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       189C33AF2E263D1925A3977D2F74C289DCFF4BCC
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f0ea7a95-861a-40d7-8fad-3bd142a3a5a9.roa
Signing time:             Fri 31 Oct 2025 05:58:55 +0000
ROA not before:           Fri 31 Oct 2025 05:58:55 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:35a0::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 19 Nov 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:9c:33:af:2e:26:3d:19:25:a3:97:7d:2f:74:c2:89:dc:ff:4b:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 05:58:55 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=e28aac71ce6b5c0deaa1579603ea736e785d1c90d8b3974770627b45265c8556, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:8e:80:7a:ef:0b:18:18:44:77:d1:3d:3f:d5:
                    5c:8e:e8:47:09:4f:4b:62:e4:e5:e7:0c:87:22:1c:
                    8d:a5:07:55:cc:f6:73:a8:d8:13:f3:ac:08:12:4d:
                    c6:10:45:bd:ad:a2:33:34:97:98:c5:52:19:c2:31:
                    15:a2:0e:1c:e7:ee:48:87:5d:f8:c5:f7:05:25:16:
                    a0:ca:fe:8c:14:ec:68:54:14:ff:d0:eb:2d:c5:4c:
                    79:df:f5:f1:6c:0c:21:65:62:71:4c:0e:4e:a1:6a:
                    87:50:7e:d7:7c:f0:a3:b6:4e:45:d1:19:de:18:50:
                    04:28:df:e6:d3:a8:27:d9:90:31:79:f0:2b:00:30:
                    4b:df:98:67:cf:a6:11:b5:25:4a:b3:fd:8a:e7:c3:
                    e2:df:55:5f:85:7e:5b:f3:a6:6e:82:ee:16:42:44:
                    a0:fb:81:6c:b3:57:ce:85:41:4c:9d:9d:ac:be:fe:
                    cb:88:19:44:7e:42:60:a8:13:36:a6:0a:52:3f:24:
                    31:f0:2c:66:13:55:3d:0a:3e:40:5c:36:20:af:e4:
                    a7:83:af:79:ab:a8:3f:f0:81:54:81:36:6d:e1:73:
                    4e:a5:df:4a:62:15:a6:ba:e0:e1:88:56:e3:d6:96:
                    2d:06:d4:35:bf:9e:bb:d7:e7:a7:f9:07:2d:06:15:
                    1d:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:D2:C5:42:0F:A9:ED:97:11:A1:FD:CC:61:D8:0F:05:72:A4:35:7D
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f0ea7a95-861a-40d7-8fad-3bd142a3a5a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:35a0::/45

    Signature Algorithm: sha256WithRSAEncryption
         bf:8b:6a:94:b7:6a:74:77:0f:5d:13:b9:7d:fd:67:1d:7e:11:
         69:ac:a9:85:79:8f:6a:26:2a:f2:01:b5:ff:cf:6f:bd:da:e6:
         1e:e4:f8:54:7e:53:35:46:6c:ea:26:33:ec:84:6d:94:70:39:
         88:5d:6e:95:bf:2b:86:96:eb:65:81:16:6d:90:f2:ee:a6:6e:
         79:eb:56:5f:85:da:5b:2b:28:3e:3d:2e:93:af:9a:3a:c1:8c:
         38:69:6b:1a:d9:86:0a:60:75:d6:83:de:17:e4:88:81:5e:da:
         e7:78:3a:de:d5:74:af:e7:92:70:99:2e:ab:39:f5:85:aa:f8:
         44:5a:6b:aa:6d:4b:37:4f:d7:8a:4d:dc:74:1f:ae:12:81:56:
         16:37:1e:c1:e3:55:97:7d:b2:9a:f1:cd:10:c5:8e:c6:b7:c2:
         d4:4c:a7:71:2f:f0:b4:00:76:7f:2e:4d:4b:49:52:8f:0a:b7:
         a8:5c:31:bf:f7:8f:ca:96:88:7a:ec:ca:26:ed:ff:b0:6f:e6:
         af:3f:72:15:bf:20:d0:57:29:cc:d6:cf:60:2a:29:12:97:90:
         b0:11:0f:30:27:32:42:17:21:3a:29:1b:d7:ed:83:87:9d:72:
         bf:6e:eb:ae:e9:be:d3:35:9a:48:0a:28:82:dc:ed:1f:65:99:
         8b:dc:dc:f9
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUGJwzry4mPRklo5d9L3TCidz/S8wwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDU1ODU1WhcNMjUxMjA1MjM1OTU5
WjB6MUkwRwYDVQQFE0BlMjhhYWM3MWNlNmI1YzBkZWFhMTU3OTYwM2VhNzM2ZTc4
NWQxYzkwZDhiMzk3NDc3MDYyN2I0NTI2NWM4NTU2MS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCZjoB67wsYGER30T0/1VyO6EcJT0ti5OXnDIciHI2lB1XM
9nOo2BPzrAgSTcYQRb2tojM0l5jFUhnCMRWiDhzn7kiHXfjF9wUlFqDK/owU7GhU
FP/Q6y3FTHnf9fFsDCFlYnFMDk6haodQftd88KO2TkXRGd4YUAQo3+bTqCfZkDF5
8CsAMEvfmGfPphG1JUqz/Yrnw+LfVV+Fflvzpm6C7hZCRKD7gWyzV86FQUydnay+
/suIGUR+QmCoEzamClI/JDHwLGYTVT0KPkBcNiCv5KeDr3mrqD/wgVSBNm3hc06l
30piFaa64OGIVuPWli0G1DW/nrvX56f5By0GFR3VAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUxdLFQg+p7ZcRof3MYdgPBXKkNX0wHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1L2YwZWE3YTk1LTg2MWEtNDBkNy04ZmFkLTNiZDE0MmEzYTVhOS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwMmAJAANaAwDQYJKoZIhvcNAQELBQADggEBAL+LapS3anR3D10TuX39Zx1+
EWmsqYV5j2omKvIBtf/Pb73a5h7k+FR+UzVGbOomM+yEbZRwOYhdbpW/K4aW62WB
Fm2Q8u6mbnnrVl+F2lsrKD49LpOvmjrBjDhpaxrZhgpgddaD3hfkiIFe2ud4Ot7V
dK/nknCZLqs59YWq+ERaa6ptSzdP14pN3HQfrhKBVhY3HsHjVZd9sprxzRDFjsa3
wtRMp3Ev8LQAdn8uTUtJUo8Kt6hcMb/3j8qWiHrsyibt/7Bv5q8/chW/INBXKczW
z2AqKRKXkLARDzAnMkIXITopG9ftg4edcr9u667pvtM1mkgKKILc7R9lmYvc3Pk=
-----END CERTIFICATE-----
Generated at Tue Nov 18 08:24:53 2025 by rpki-client