Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/feec66e8-f95b-444d-bd4e-917d547d1820.roa
File:                     feec66e8-f95b-444d-bd4e-917d547d1820.roa (raw, json)
Hash identifier:          3DznXQxV6kwP+6OoslAAbDoTFHWxV9OPPW4hhamoi5w=
Subject key identifier:   37:63:BD:64:7F:B0:5B:06:8A:EF:EC:D6:DB:F0:9A:61:04:58:0D:1E
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       1CD4F63BFC0D89627A88D61A683C61023ED22781
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/feec66e8-f95b-444d-bd4e-917d547d1820.roa
Signing time:             Tue 21 Oct 2025 00:20:04 +0000
ROA not before:           Tue 21 Oct 2025 00:20:04 +0000
ROA not after:            Tue 25 Nov 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:9000:5210::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:d4:f6:3b:fc:0d:89:62:7a:88:d6:1a:68:3c:61:02:3e:d2:27:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 21 00:20:04 2025 GMT
            Not After : Nov 25 23:59:59 2025 GMT
        Subject: serialNumber=86463141987b63bce4bd301f46b82e54518d314533f1572b84e8750f9619ddc6, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f6:a3:c1:45:23:bb:2b:86:f5:1f:7c:62:c7:
                    b3:07:c5:33:b4:eb:5d:b1:67:6a:0e:82:0a:84:fb:
                    6c:72:a0:fc:81:66:54:9a:71:bc:c2:52:61:fe:2a:
                    86:e2:3c:d7:24:eb:a3:c9:b2:83:95:60:45:c2:28:
                    94:1b:f7:78:61:57:c9:c0:1c:ef:e1:d8:db:a2:0e:
                    d0:99:b8:29:e0:4d:44:3d:63:45:cd:bd:22:ab:b3:
                    a3:b2:c0:b5:06:05:52:53:fd:d8:86:10:40:fe:2b:
                    d9:c1:33:6e:84:fa:3d:87:f2:40:8d:80:64:ed:e6:
                    84:32:5d:9f:d2:e1:f3:54:f1:7e:b3:f3:56:a0:7e:
                    ea:a4:02:0a:d3:89:98:8c:0e:f7:b1:ef:2f:79:34:
                    e8:a7:41:41:dd:8a:14:e1:de:85:de:88:bd:ef:24:
                    05:8e:73:1f:65:0b:fb:82:1d:5c:b3:7f:4c:d4:22:
                    8f:79:37:47:c6:52:bf:0a:8d:06:22:f5:de:83:8d:
                    3b:db:e2:aa:90:e5:94:fd:fa:2b:79:ca:20:a9:f2:
                    bf:ae:39:e9:fb:d6:db:59:21:04:ad:1c:a6:dc:05:
                    a7:a7:3b:d9:c2:5b:c7:d9:8e:99:b7:13:f1:cd:7b:
                    31:be:57:f3:3a:32:26:a7:40:0c:51:c3:a0:dc:26:
                    a3:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:63:BD:64:7F:B0:5B:06:8A:EF:EC:D6:DB:F0:9A:61:04:58:0D:1E
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/feec66e8-f95b-444d-bd4e-917d547d1820.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:5210::/48

    Signature Algorithm: sha256WithRSAEncryption
         37:98:e8:61:85:72:e9:b9:cb:e5:ee:77:5c:eb:29:66:41:b4:
         ed:15:41:bc:d0:f3:80:37:c9:dd:70:b8:ec:54:05:e3:0f:ae:
         7e:72:af:60:3c:d0:8c:41:16:49:22:27:b6:33:fb:0d:4d:f5:
         43:97:41:17:d5:5d:87:d9:91:19:e3:79:5e:f9:26:e6:d7:48:
         65:50:c4:7e:e9:fc:a8:b3:80:f5:93:70:4a:a3:6d:15:63:37:
         dd:86:11:65:ab:e1:e1:89:84:d7:fb:8c:9f:82:5a:0d:45:98:
         a8:ca:72:b4:a0:45:55:24:28:d2:dd:a3:a9:78:12:1c:b2:84:
         66:94:23:2c:6f:86:7c:8d:f7:1c:78:f2:68:90:a6:07:83:68:
         dc:b3:dd:21:ba:2f:e2:0f:98:0f:e0:a1:91:8b:74:fc:8c:76:
         9e:be:75:a0:07:5b:e2:2e:72:0c:8d:da:38:7e:b7:64:d8:c8:
         9f:d9:63:e8:f3:03:c1:6c:32:71:8f:b5:63:ee:40:c5:d0:12:
         6f:bc:4b:a3:6a:e1:15:de:bc:d0:9a:09:24:74:11:97:d8:5c:
         78:d5:c7:06:37:c2:5f:7d:da:e0:72:29:da:b0:68:e8:b7:b1:
         28:82:64:cb:9f:0f:eb:9a:65:b4:6f:df:88:f9:b8:7b:bb:f1:
         ef:fb:61:a2
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUHNT2O/wNiWJ6iNYaaDxhAj7SJ4EwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDIxMDAyMDA0WhcNMjUxMTI1MjM1OTU5
WjB6MUkwRwYDVQQFE0A4NjQ2MzE0MTk4N2I2M2JjZTRiZDMwMWY0NmI4MmU1NDUx
OGQzMTQ1MzNmMTU3MmI4NGU4NzUwZjk2MTlkZGM2MS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCd9qPBRSO7K4b1H3xix7MHxTO0612xZ2oOggqE+2xyoPyB
ZlSacbzCUmH+KobiPNck66PJsoOVYEXCKJQb93hhV8nAHO/h2NuiDtCZuCngTUQ9
Y0XNvSKrs6OywLUGBVJT/diGEED+K9nBM26E+j2H8kCNgGTt5oQyXZ/S4fNU8X6z
81agfuqkAgrTiZiMDvex7y95NOinQUHdihTh3oXeiL3vJAWOcx9lC/uCHVyzf0zU
Io95N0fGUr8KjQYi9d6DjTvb4qqQ5ZT9+it5yiCp8r+uOen71ttZIQStHKbcBaen
O9nCW8fZjpm3E/HNezG+V/M6MianQAxRw6DcJqMzAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUN2O9ZH+wWwaK7+zW2/CaYQRYDR4wHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1L2ZlZWM2NmU4LWY5NWItNDQ0ZC1iZDRlLTkxN2Q1NDdkMTgyMC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAJAAUhAwDQYJKoZIhvcNAQELBQADggEBADeY6GGFcum5y+Xud1zrKWZB
tO0VQbzQ84A3yd1wuOxUBeMPrn5yr2A80IxBFkkiJ7Yz+w1N9UOXQRfVXYfZkRnj
eV75JubXSGVQxH7p/KizgPWTcEqjbRVjN92GEWWr4eGJhNf7jJ+CWg1FmKjKcrSg
RVUkKNLdo6l4EhyyhGaUIyxvhnyN9xx48miQpgeDaNyz3SG6L+IPmA/goZGLdPyM
dp6+daAHW+IucgyN2jh+t2TYyJ/ZY+jzA8FsMnGPtWPuQMXQEm+8S6Nq4RXevNCa
CSR0EZfYXHjVxwY3wl992uByKdqwaOi3sSiCZMufD+uaZbRv34j5uHu78e/7YaI=
-----END CERTIFICATE-----
Generated at Fri Oct 24 08:28:26 2025 by rpki-client