Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/4c7c26d0-0e62-4cc8-ad3c-3c15ffe314e0.roa
File:                     4c7c26d0-0e62-4cc8-ad3c-3c15ffe314e0.roa (raw, json)
Hash identifier:          q78lHIFAaT6HI0V1l7rDbSt2fHrv0Ib6H31I93oTkPY=
Subject key identifier:   5F:16:A7:12:A4:3A:41:46:37:53:93:BB:25:77:F1:CE:39:31:51:6C
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       55A925F3F8FFC3E252196437516B25F8D0CD11A1
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/4c7c26d0-0e62-4cc8-ad3c-3c15ffe314e0.roa
Signing time:             Fri 26 Sep 2025 18:11:34 +0000
ROA not before:           Fri 26 Sep 2025 18:11:34 +0000
ROA not after:            Fri 31 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0fb:e500::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:a9:25:f3:f8:ff:c3:e2:52:19:64:37:51:6b:25:f8:d0:cd:11:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Sep 26 18:11:34 2025 GMT
            Not After : Oct 31 23:59:59 2025 GMT
        Subject: serialNumber=51bf91ed34bd379c9f78cdba5fc7b3b6b3332051d12e001668fc1281e9d448cc, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:34:b7:f8:c6:a7:6b:67:fb:a7:6f:d5:f9:0d:
                    ef:0f:82:5d:37:7c:2f:8d:04:31:70:b1:cf:76:ee:
                    6e:9d:41:51:41:cc:5b:a0:a8:31:e4:7b:f0:58:a9:
                    d9:7d:e6:04:5d:f4:19:f7:e7:2a:84:9a:08:d4:92:
                    e9:45:15:1a:d3:6c:bb:a2:bf:f6:71:e3:9e:10:cb:
                    21:65:1d:05:c7:d8:26:77:53:d1:44:8c:e9:05:17:
                    67:9b:63:cf:23:79:46:99:2a:ed:ff:85:df:e0:df:
                    de:b8:98:59:15:6b:ab:e6:f9:72:c0:2b:66:81:ce:
                    7e:c6:2f:a1:17:0b:f5:90:98:ea:a8:78:b0:2f:45:
                    82:77:2e:82:85:04:81:a3:b2:c8:fa:0f:56:80:06:
                    da:b6:1b:a6:dc:3c:c6:95:84:30:dc:63:78:45:a2:
                    c1:fd:74:0c:85:76:45:db:e7:25:4f:de:64:13:7f:
                    0a:b0:58:b8:0c:37:4c:52:80:b7:d3:bc:13:d0:60:
                    6a:4e:5f:88:c2:50:9f:c2:6d:48:ad:c1:d4:07:f6:
                    1f:d6:c3:df:87:d4:6f:b5:34:3f:c8:66:eb:6a:70:
                    fa:39:16:c1:65:c7:da:3a:3e:38:ce:3e:85:4f:c2:
                    8d:2b:76:1c:49:84:29:4f:b1:c2:32:c9:ae:23:4a:
                    c0:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:16:A7:12:A4:3A:41:46:37:53:93:BB:25:77:F1:CE:39:31:51:6C
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/4c7c26d0-0e62-4cc8-ad3c-3c15ffe314e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0fb:e500::/42

    Signature Algorithm: sha256WithRSAEncryption
         81:6d:3f:fb:a5:1c:64:ab:e4:0d:7b:e8:6e:0a:ed:1f:5a:5a:
         74:dd:f0:81:32:fa:4f:48:6e:1e:6d:e2:ea:67:1d:79:2a:09:
         6d:a0:f5:6a:2a:8e:8f:5f:c9:26:b9:3c:5d:ab:73:e8:ac:96:
         73:af:22:36:19:7c:83:b4:c5:3a:94:00:2d:00:14:9d:49:b2:
         1c:5c:fa:1f:fe:4f:b8:3c:25:ac:78:21:76:bc:f7:b2:f7:dc:
         5a:36:24:fc:0e:19:52:64:1c:ae:26:e2:4a:45:85:61:d4:ed:
         c8:3c:50:a0:24:24:05:10:17:72:a5:ab:64:d7:cb:0f:51:c3:
         6b:20:7f:99:6d:31:73:83:59:1f:18:49:3b:db:06:fa:d3:fa:
         e9:20:55:4e:af:1e:19:6e:3d:fc:8d:fb:00:86:bf:87:a4:96:
         cf:3f:99:32:b1:12:8e:dc:15:1c:33:a2:4b:c1:cc:f2:45:e3:
         11:02:42:25:1d:5e:bb:19:63:05:14:28:90:bb:49:60:63:c8:
         c7:b8:fa:cf:d0:c6:f8:6e:72:0c:fb:c2:7c:a8:ec:6d:5e:f7:
         fc:d5:34:9c:d6:55:79:26:08:43:84:33:9a:24:7e:a9:66:8e:
         2b:7d:fc:c2:59:48:09:63:63:58:5c:16:c6:0b:e7:b9:d7:42:
         10:76:c2:98
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUVakl8/j/w+JSGWQ3UWsl+NDNEaEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi
MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwOTI2MTgxMTM0WhcNMjUxMDMxMjM1OTU5
WjB6MUkwRwYDVQQFE0A1MWJmOTFlZDM0YmQzNzljOWY3OGNkYmE1ZmM3YjNiNmIz
MzMyMDUxZDEyZTAwMTY2OGZjMTI4MWU5ZDQ0OGNjMS0wKwYDVQQDEyRmYmIyNzU3
Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCfNLf4xqdrZ/unb9X5De8Pgl03fC+NBDFwsc927m6dQVFB
zFugqDHke/BYqdl95gRd9Bn35yqEmgjUkulFFRrTbLuiv/Zx454QyyFlHQXH2CZ3
U9FEjOkFF2ebY88jeUaZKu3/hd/g3964mFkVa6vm+XLAK2aBzn7GL6EXC/WQmOqo
eLAvRYJ3LoKFBIGjssj6D1aABtq2G6bcPMaVhDDcY3hFosH9dAyFdkXb5yVP3mQT
fwqwWLgMN0xSgLfTvBPQYGpOX4jCUJ/CbUitwdQH9h/Ww9+H1G+1ND/IZutqcPo5
FsFlx9o6PjjOPoVPwo0rdhxJhClPscIyya4jSsDVAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUXxanEqQ6QUY3U5O7JXfxzjkxUWwwHwYDVR0jBBgwFoAULhjiCKGCVxsJ
fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h
Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4
YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk
NjJlNDhmMDU2LzRjN2MyNmQwLTBlNjItNGNjOC1hZDNjLTNjMTVmZmUzMTRlMC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3
LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwYmAPD75QAwDQYJKoZIhvcNAQELBQADggEBAIFtP/ulHGSr5A176G4K7R9a
WnTd8IEy+k9Ibh5t4upnHXkqCW2g9Woqjo9fySa5PF2rc+islnOvIjYZfIO0xTqU
AC0AFJ1Jshxc+h/+T7g8Jax4IXa897L33Fo2JPwOGVJkHK4m4kpFhWHU7cg8UKAk
JAUQF3Klq2TXyw9Rw2sgf5ltMXODWR8YSTvbBvrT+ukgVU6vHhluPfyN+wCGv4ek
ls8/mTKxEo7cFRwzokvBzPJF4xECQiUdXrsZYwUUKJC7SWBjyMe4+s/Qxvhucgz7
wnyo7G1e9/zVNJzWVXkmCEOEM5okfqlmjit9/MJZSAljY1hcFsYL57nXQhB2wpg=
-----END CERTIFICATE-----
Generated at Mon Oct 20 12:34:30 2025 by rpki-client