Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/79232961-c24e-4e24-a09f-bc78fb7c0bcc.roa
File:                     79232961-c24e-4e24-a09f-bc78fb7c0bcc.roa (raw, json)
Hash identifier:          hQFNV4CjWKDiXIij9jHcoGQbfYuDdaaYoQnnKqudsIA=
Subject key identifier:   85:64:D2:CE:3C:87:AE:C7:87:A9:FD:5E:64:20:97:2C:46:63:5D:CE
Certificate issuer:       /CN=5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64
Certificate serial:       7299E985F274CC83EC49C3935DE9BE5A44ECDA1F
Authority key identifier: FE:22:E0:F7:22:CC:4F:06:0C:58:5A:12:6F:E6:A2:65:00:36:5E:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/79232961-c24e-4e24-a09f-bc78fb7c0bcc.roa
Signing time:             Fri 31 Oct 2025 00:00:20 +0000
ROA not before:           Fri 31 Oct 2025 00:00:20 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2620:107:3001::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/42b2991f-22c7-42f7-8cf5-4f3138859732.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/42b2991f-22c7-42f7-8cf5-4f3138859732.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:99:e9:85:f2:74:cc:83:ec:49:c3:93:5d:e9:be:5a:44:ec:da:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64
        Validity
            Not Before: Oct 31 00:00:20 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=e052dcf3935b21159b34155bb26e407db9df4ed3725a7cf72750f93b91f84a4d, CN=71c3876e-b944-4600-92c7-cec33d89523f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:07:b1:20:92:07:cf:8a:25:5b:b9:73:0c:29:
                    b8:90:92:93:47:81:86:55:a9:57:aa:da:ae:f4:d0:
                    89:8e:78:29:12:39:0d:e3:ed:3a:ea:37:4d:7f:c4:
                    b1:e8:a4:01:76:cd:ad:12:48:3f:af:c9:a3:d5:59:
                    3f:51:c9:05:7d:03:28:69:ed:34:d2:8d:97:e0:2a:
                    63:26:b4:1d:1e:66:c1:ed:51:30:cf:87:6f:03:b5:
                    df:8a:e3:da:1e:e7:ad:e7:37:a6:df:7c:5f:7d:8b:
                    d1:48:e6:b1:21:2c:59:2a:aa:05:ad:2f:0c:3d:a6:
                    f4:5c:67:a0:9a:69:ab:9a:64:cf:38:c1:52:10:46:
                    db:a1:3e:bd:6c:dc:11:cc:9b:1f:c5:5a:eb:aa:b7:
                    48:86:82:a5:70:f0:34:c8:34:59:58:a3:fc:a9:57:
                    26:5d:2a:44:59:a6:e7:1d:a1:57:ab:08:9d:06:f9:
                    2c:55:5e:c5:d0:14:9c:cc:e9:c3:b9:93:7e:c7:6c:
                    55:36:cc:fc:2d:65:e4:92:4d:78:91:cc:c0:50:14:
                    2f:08:57:3f:40:8e:25:1a:f1:d2:1f:e4:a4:1c:08:
                    2a:94:e4:eb:4d:f1:42:d3:b2:16:ad:fa:56:99:e1:
                    a6:79:88:9b:f4:f1:7b:a8:88:c2:52:7a:92:79:0e:
                    1f:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:64:D2:CE:3C:87:AE:C7:87:A9:FD:5E:64:20:97:2C:46:63:5D:CE
            X509v3 Authority Key Identifier:
                keyid:FE:22:E0:F7:22:CC:4F:06:0C:58:5A:12:6F:E6:A2:65:00:36:5E:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/79232961-c24e-4e24-a09f-bc78fb7c0bcc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:107:3001::/48

    Signature Algorithm: sha256WithRSAEncryption
         45:c5:cc:dc:74:3f:bf:c8:9c:70:d3:b9:6f:7d:c2:79:5c:a9:
         eb:c4:34:87:38:ee:84:f1:6e:aa:4e:32:30:18:d4:d7:f4:8a:
         62:c5:73:ed:49:18:d3:b7:d5:bf:2c:a4:44:31:22:d6:2b:48:
         54:e5:f7:fd:e4:79:50:1a:cd:8c:6e:54:a1:e6:c0:8e:7a:65:
         49:2c:e8:0b:33:01:4a:fc:1a:a3:33:c9:df:c3:fc:01:73:68:
         6a:68:17:d5:f4:f7:b6:71:81:56:af:29:48:ff:a9:3e:45:d5:
         c9:63:80:d5:6c:19:73:3a:6c:2b:bf:6b:4a:23:57:f2:af:b9:
         31:0d:cf:db:ef:11:41:d6:4e:46:af:04:96:8a:12:50:3b:c8:
         9c:f5:75:ec:31:fe:1d:b2:fa:3d:6d:f8:b3:bd:ac:36:a0:b0:
         3f:d8:7e:66:0d:17:b0:81:1f:63:a0:d1:51:b9:e6:f2:e4:b2:
         03:89:96:26:1d:cf:4e:d2:39:55:21:75:05:6a:47:5f:34:7d:
         90:3b:65:03:ee:58:e4:67:7c:38:71:8c:6d:05:1b:21:30:13:
         71:8d:95:bc:2f:7f:f8:cc:2a:85:4a:84:03:92:4a:0f:a4:da:
         20:b4:4d:1b:66:ae:76:2c:22:d4:d2:86:e4:6e:a6:c8:fc:70:
         ea:40:bc:fa
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 12:56:55 2025 by rpki-client