Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/000cc7b4-1eb8-4fef-bd90-52a4a0e08d90.roa
File:                     000cc7b4-1eb8-4fef-bd90-52a4a0e08d90.roa (raw, json)
Hash identifier:          aD+M4jkJkLhVh7nqyfYkdQDd9R1yDr/ZEGhM9jNTeSU=
Subject key identifier:   CC:C9:10:61:68:D1:4A:D4:EA:37:1A:96:52:89:F0:33:28:BF:31:5F
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       75FA61263C830C743739D2CEC7209CD8139D5BC1
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/000cc7b4-1eb8-4fef-bd90-52a4a0e08d90.roa
Signing time:             Fri 31 Oct 2025 07:36:52 +0000
ROA not before:           Fri 31 Oct 2025 07:36:52 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1680::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:fa:61:26:3c:83:0c:74:37:39:d2:ce:c7:20:9c:d8:13:9d:5b:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 07:36:52 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=6ddaa0b3a3da08b1a0afe76d9ceedfd436c861ce979087ed1bbff01226866730, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:2c:c0:3a:bc:53:3d:b1:0b:c8:a4:36:dc:59:
                    8c:7a:0e:59:0c:58:0a:d7:1f:e8:23:ac:a1:bd:8b:
                    bc:85:7c:ea:4c:a4:8d:a9:11:06:26:6f:1f:db:cf:
                    cd:c1:56:04:37:23:d9:73:7c:68:90:6c:91:b1:40:
                    eb:7a:19:f7:b3:d2:1c:fa:6c:d9:0a:12:df:5f:85:
                    ff:6c:ef:6c:df:cc:87:e1:51:32:b0:0c:46:e6:20:
                    b2:a1:2f:99:d1:7e:4d:c6:21:95:d6:45:ef:60:04:
                    73:b7:d5:df:f8:65:55:f2:c4:72:ef:34:08:40:68:
                    3a:af:c0:15:f2:5c:00:d1:63:a0:59:81:27:88:03:
                    dd:88:ab:34:9c:06:c8:b4:0f:58:cb:e6:6a:32:39:
                    84:ea:1a:e8:ad:81:f7:6a:c8:e0:f7:3b:b5:d8:12:
                    15:cb:74:06:1a:52:02:7a:fc:bc:c0:b4:6d:cb:52:
                    12:ee:93:ff:eb:a2:94:9d:b5:b7:93:63:43:36:2a:
                    4a:c1:dd:fd:f9:0c:a6:23:da:2f:c9:6c:f4:63:5b:
                    6e:c1:00:a9:6d:92:17:89:c7:3a:f0:9a:2a:96:79:
                    3a:83:63:0c:4b:63:a1:bd:66:c5:65:9a:cc:ef:1b:
                    4f:9c:48:ba:49:3e:67:c0:64:d4:f7:21:57:3f:fd:
                    ab:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:C9:10:61:68:D1:4A:D4:EA:37:1A:96:52:89:F0:33:28:BF:31:5F
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/000cc7b4-1eb8-4fef-bd90-52a4a0e08d90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1680::/42

    Signature Algorithm: sha256WithRSAEncryption
         6d:aa:1c:ed:4c:2d:c3:6b:64:a4:49:a2:b9:98:86:cf:63:1c:
         01:02:7c:a3:2c:69:12:25:0b:aa:32:ff:5e:12:7e:02:9a:9c:
         c3:b8:5f:fa:29:ac:72:8e:cf:5d:52:48:db:ea:7f:db:ff:49:
         98:a4:77:9d:ae:7b:fb:3e:8c:d9:d1:12:48:92:a3:9b:7e:dd:
         62:9d:d7:5a:cd:30:dc:34:df:86:0d:89:25:4a:91:33:36:87:
         69:ec:ea:3e:7f:4c:47:53:e9:18:d1:91:a5:65:5f:a8:a9:66:
         24:87:8e:66:2d:3b:cf:17:03:b6:26:b6:39:f2:2d:15:92:0b:
         ea:ac:68:1c:30:58:82:b4:9c:40:14:35:7c:66:ed:51:16:51:
         4e:f2:15:a6:43:c9:18:9c:37:85:8c:c8:41:e6:c8:b6:92:fd:
         1b:3e:6c:b0:d7:f6:51:5d:eb:88:b0:e8:67:8a:2b:0d:3d:bd:
         eb:5b:83:8d:c4:7e:bf:b8:ad:22:94:f7:fd:cf:2a:44:0e:5c:
         c9:ae:28:61:eb:b4:50:6e:96:35:f9:04:a1:d8:36:59:e8:87:
         e0:fc:cc:b0:5d:70:cb:87:8e:85:c8:f3:66:36:95:c0:d6:04:
         1d:65:9d:4c:15:c0:3f:20:a3:48:6a:fa:fa:c9:0a:09:39:18:
         f4:22:b4:61
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:42:25 2025 by rpki-client