Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/007caf5e-976d-4adc-a2bf-15e48deac745.roa
File:                     007caf5e-976d-4adc-a2bf-15e48deac745.roa (raw, json)
Hash identifier:          21ZCk0LAqW5ne6IhRQK+1KRTSCI3mNIQiLtgNrGOslo=
Subject key identifier:   00:77:F3:C4:41:8E:11:54:C3:C0:58:B2:54:3C:1B:1F:A4:85:E1:8C
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       05FEF887965FDB9E00018541F4D51CB37ABD8BD7
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/007caf5e-976d-4adc-a2bf-15e48deac745.roa
Signing time:             Thu 30 Oct 2025 22:58:46 +0000
ROA not before:           Thu 30 Oct 2025 22:58:46 +0000
ROA not after:            Thu 04 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2a70::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:fe:f8:87:96:5f:db:9e:00:01:85:41:f4:d5:1c:b3:7a:bd:8b:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 30 22:58:46 2025 GMT
            Not After : Dec  4 23:59:59 2025 GMT
        Subject: serialNumber=ca19524cfa36c86c46ba89f59bbc74e8a2357272b6eb7a976702e8bb1f712431, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d1:7c:74:93:70:f7:f5:cd:05:f7:23:26:5e:
                    af:50:77:bb:16:d3:6e:66:15:8f:49:ea:b4:aa:66:
                    22:24:07:4c:68:17:8a:91:bf:55:52:58:46:46:15:
                    cb:6b:14:14:61:28:ae:c2:81:25:f1:23:ae:8e:09:
                    0d:84:e2:ac:22:73:f8:d9:c1:85:10:85:b6:fe:80:
                    03:48:71:97:4e:45:01:a1:c2:0b:b6:cc:98:61:ce:
                    20:11:47:ff:7c:02:b2:10:35:44:4e:2f:51:fb:fc:
                    c4:6c:b3:5e:a5:0a:69:5a:53:70:a3:78:15:9e:05:
                    b7:aa:b3:89:34:a8:c8:d6:d2:84:ee:a5:87:a1:67:
                    78:7f:6f:1b:5e:69:77:6b:b5:5c:36:0d:5a:b4:9e:
                    13:a3:c8:81:3a:5a:ca:69:07:ac:3f:f6:23:04:61:
                    35:b3:56:2b:90:0f:d7:ff:82:2b:cb:bf:58:01:ce:
                    c7:a4:5b:5f:3c:9c:09:b7:0e:e2:c1:be:d6:03:60:
                    1c:6c:94:1a:d2:8f:eb:79:1c:d4:d4:d3:cf:d6:c4:
                    84:77:2f:32:34:0f:9d:4b:b6:69:a2:51:1b:81:73:
                    ba:00:f6:61:f1:18:02:76:48:83:b8:d0:07:90:e8:
                    f9:96:8a:0e:e0:d5:e6:48:3f:3c:e7:37:f9:30:b0:
                    cc:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:77:F3:C4:41:8E:11:54:C3:C0:58:B2:54:3C:1B:1F:A4:85:E1:8C
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/007caf5e-976d-4adc-a2bf-15e48deac745.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2a70::/47

    Signature Algorithm: sha256WithRSAEncryption
         bb:00:d2:ad:2e:00:f1:a3:66:f4:27:70:00:c3:d8:0d:65:2e:
         26:0a:03:67:c0:a4:08:38:52:91:24:56:5e:25:81:13:ca:df:
         1a:39:15:98:46:c1:d8:a9:9b:b0:c1:e8:1a:ab:e9:d8:46:4a:
         99:6c:76:89:73:c5:91:40:cb:bb:24:bf:e8:a6:51:14:7f:63:
         e9:12:bd:8d:9c:11:72:1f:3d:22:d2:79:29:7f:11:17:e8:e8:
         ef:e6:b5:35:00:f1:a1:bd:42:6a:79:b7:77:83:2b:da:6a:96:
         1e:13:80:93:cd:9d:ab:59:af:44:f5:e1:58:a6:ae:34:e8:29:
         a9:8a:c4:0b:e6:99:24:cb:3d:a2:e2:e9:2d:4c:8f:2f:b9:0d:
         1f:45:ff:ad:24:4b:d7:9e:e5:a6:21:1b:66:fb:08:27:8a:41:
         01:f8:9d:ce:e0:65:4e:8b:ea:57:18:20:60:16:dd:19:b2:97:
         0e:c4:01:4a:16:a0:20:76:e2:1d:39:a2:2d:fc:03:fc:26:7c:
         a5:a0:b0:56:c1:fd:13:9f:39:96:3c:54:dc:33:77:11:25:80:
         b2:62:ab:bf:f6:39:d4:8e:05:40:15:13:30:68:15:c1:05:13:
         5c:f3:f8:d1:e3:79:21:0d:66:32:76:29:06:f6:35:1b:c8:76:
         cc:ff:ba:2e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:36:34 2025 by rpki-client