Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0075a040-3195-463b-884a-bbfb30b20c20.roa
File:                     0075a040-3195-463b-884a-bbfb30b20c20.roa (raw, json)
Hash identifier:          mg58rlBPdMgsr7SZpN7cWKttOksbhurQ7XUW0c3Fb+Q=
Subject key identifier:   74:2D:87:D2:B4:B6:DB:97:D5:20:2A:F0:13:BA:31:19:B1:CA:6A:17
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       07EB83481C0FAB7355B7C369B5EBA6B883774C69
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0075a040-3195-463b-884a-bbfb30b20c20.roa
Signing time:             Thu 30 Oct 2025 21:57:20 +0000
ROA not before:           Thu 30 Oct 2025 21:57:20 +0000
ROA not after:            Thu 04 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1a4c::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Nov 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:eb:83:48:1c:0f:ab:73:55:b7:c3:69:b5:eb:a6:b8:83:77:4c:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 30 21:57:20 2025 GMT
            Not After : Dec  4 23:59:59 2025 GMT
        Subject: serialNumber=3b1cf88dccff108139daf87eab0e60fb0499b8131dac67f168b158496e278da5, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:7a:2c:98:97:ca:cb:c1:a9:10:5e:0e:02:66:
                    b4:7f:d3:03:30:c5:2a:b0:10:87:40:54:84:84:06:
                    d8:94:3c:f8:06:a0:62:2f:7f:3a:74:9c:da:51:00:
                    f1:d1:f9:46:8f:fc:11:86:4c:8c:07:44:9b:ae:62:
                    5d:ff:2e:b1:12:59:0a:ee:eb:07:46:cf:98:bd:3b:
                    29:55:d0:37:c9:6b:90:2c:f0:44:62:dd:ac:de:ff:
                    ef:b9:3a:29:0f:a5:c9:b8:33:32:62:f5:67:ea:63:
                    f8:5e:c2:da:7d:e3:d0:86:55:65:70:51:bd:25:56:
                    55:05:b6:26:c5:03:a8:85:f5:41:41:26:ee:64:f6:
                    28:14:a2:46:e6:1e:47:b7:b7:37:27:43:ca:7f:06:
                    ec:31:82:04:e7:94:ab:7d:40:bc:7c:d6:e3:49:5a:
                    8d:3d:46:75:82:8b:7e:24:c0:b4:e9:4c:1a:31:e5:
                    db:9d:6a:87:ff:66:eb:6a:2e:43:ef:1a:06:25:59:
                    ab:cd:f7:8c:df:c9:7c:ad:fd:bd:67:aa:94:61:bb:
                    19:1b:bb:90:01:72:9b:4b:9f:64:2c:1c:a9:7c:c3:
                    d3:9c:9d:0f:45:60:a2:df:8b:9f:bd:3c:d4:25:ca:
                    a8:ad:b2:33:36:54:62:6f:6b:dc:db:69:ab:d7:ab:
                    5f:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:2D:87:D2:B4:B6:DB:97:D5:20:2A:F0:13:BA:31:19:B1:CA:6A:17
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0075a040-3195-463b-884a-bbfb30b20c20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1a4c::/47

    Signature Algorithm: sha256WithRSAEncryption
         5e:34:63:b8:64:bc:dd:4b:39:60:03:2f:cd:61:60:d7:35:31:
         ad:80:c2:68:31:e6:46:64:99:d2:55:d1:ab:ee:3b:aa:cb:4c:
         46:c2:7f:ee:bc:f8:a3:e2:8c:5d:c8:05:40:8a:71:04:15:0a:
         0d:92:fa:42:b9:51:f0:af:37:91:a5:53:6b:fa:26:c3:83:2c:
         96:21:01:f0:ef:88:ec:e8:e0:e2:33:ce:33:8e:a9:ce:15:4e:
         4a:81:b2:e0:df:87:e1:a5:3f:0b:2c:86:3d:11:ec:7a:b5:f3:
         fa:54:cb:6d:7e:31:64:ff:2f:b9:1d:ff:42:c8:b5:57:d8:9d:
         e6:a3:81:19:79:29:a5:eb:d7:1a:1f:c8:84:96:e2:29:f0:71:
         ce:4f:ce:08:79:0b:86:93:8f:9f:e4:c7:6b:58:e1:7c:97:b2:
         ff:34:f4:32:75:0f:df:2b:d2:6d:d2:1d:48:42:4d:74:79:9d:
         95:31:fe:f5:e4:e3:fe:3a:90:94:d3:ab:b1:72:fa:70:99:fa:
         19:89:b7:aa:97:12:14:d8:42:10:a9:7a:a8:2f:fc:51:77:a0:
         25:11:64:6d:18:b2:13:6d:2f:b2:8b:f6:06:c1:8c:4a:95:c2:
         76:98:45:fd:d1:b7:75:4b:d4:20:0e:81:d0:b8:bb:f6:db:6f:
         10:9d:07:76
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 16:00:09 2025 by rpki-client