Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/00d4d2d0-fdf0-4ea8-bb60-ecb0dee784f3.roa
File:                     00d4d2d0-fdf0-4ea8-bb60-ecb0dee784f3.roa (raw, json)
Hash identifier:          PNAqjc3SzQJuZKDU/O3nQvHVK1ovDNQY/NPMRrQF1jI=
Subject key identifier:   C8:0E:07:36:95:CC:8F:95:AE:D5:2D:0B:8B:FA:32:73:1A:34:95:15
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       269AE88DE2E855D63B5FB734B94557282A734F9A
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/00d4d2d0-fdf0-4ea8-bb60-ecb0dee784f3.roa
Signing time:             Fri 31 Oct 2025 06:13:40 +0000
ROA not before:           Fri 31 Oct 2025 06:13:40 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3b88::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:9a:e8:8d:e2:e8:55:d6:3b:5f:b7:34:b9:45:57:28:2a:73:4f:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 06:13:40 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=db7d7736d9036d2a59368e4806cfc2a07d3f5459d953ff6ca7a1026d9271bf72, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:9a:74:4d:ad:c1:9e:fb:9f:48:e9:dc:e8:aa:
                    f9:60:8c:2b:7f:c8:10:d0:cd:81:66:6f:01:04:2b:
                    d8:38:53:47:80:ec:b5:95:5a:50:8b:9b:bc:38:d3:
                    70:f0:c3:57:a2:c0:8f:99:31:c1:bc:b0:af:13:9e:
                    f0:b3:06:2f:d3:97:ac:e2:77:b1:99:a2:21:b6:97:
                    28:f7:f0:eb:21:e0:35:af:39:e6:12:ed:ac:8f:b4:
                    c4:c2:4d:b6:35:40:ac:ce:f4:94:28:9e:c9:f7:04:
                    16:34:e4:8a:79:ab:cf:4e:83:22:7b:fa:57:a4:40:
                    88:92:2f:d1:4b:2a:6c:e5:b3:95:a9:5d:94:83:c2:
                    7a:b0:51:91:87:0d:16:fe:07:bd:01:32:1b:57:3c:
                    75:b0:5f:aa:8f:88:3f:83:88:13:2c:7c:34:cc:d2:
                    42:ff:d5:bb:e3:56:a2:f3:0f:73:10:6d:b1:98:a7:
                    64:05:23:f3:80:9c:51:1d:03:d9:6c:06:0c:ee:32:
                    ca:ed:ea:74:4b:09:37:2d:16:3e:e1:1e:78:3a:01:
                    64:66:ec:65:a6:cf:5a:09:4d:d0:7a:54:34:54:d2:
                    72:7e:b3:70:d6:14:fa:de:c7:a4:9e:17:47:71:e1:
                    8f:bd:dc:b3:b1:49:d8:82:b3:55:48:ee:4f:e4:d9:
                    bc:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:0E:07:36:95:CC:8F:95:AE:D5:2D:0B:8B:FA:32:73:1A:34:95:15
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/00d4d2d0-fdf0-4ea8-bb60-ecb0dee784f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3b88::/45

    Signature Algorithm: sha256WithRSAEncryption
         ab:78:d4:2a:6b:65:e6:86:76:f8:81:6a:c3:0a:4b:6a:06:07:
         60:49:94:a8:43:db:c0:9b:85:fc:cf:cb:de:31:ab:b9:0b:5d:
         df:01:ec:46:db:3d:9d:ab:e4:6c:ab:d0:8f:5a:76:22:81:fc:
         70:ad:e7:0a:18:e2:e3:8a:9e:93:34:d7:a5:c5:14:b9:52:81:
         46:d3:a3:fe:29:ab:7b:8f:25:a7:50:ce:cb:eb:c2:5d:e9:af:
         12:06:b3:a8:76:5a:af:a3:08:98:d5:09:bf:0c:1d:d2:09:c9:
         8b:01:04:4d:9f:ce:68:8c:de:9d:40:7b:98:7e:6d:e6:47:aa:
         6a:4d:48:6a:14:f6:d4:ea:3f:7a:a7:e7:54:b4:db:44:ff:a2:
         b4:22:68:2f:1d:f7:ca:b2:f2:f8:cb:1e:11:1b:b9:00:54:4d:
         4e:b7:7b:ec:76:67:50:da:0d:45:4b:0e:95:36:5b:3d:10:3c:
         70:22:6b:56:73:fc:a4:0e:99:3a:82:83:86:81:d8:08:01:01:
         e4:32:29:a8:59:71:54:fb:9a:23:40:89:20:2b:ef:cc:79:66:
         38:03:10:2b:46:07:fd:61:a4:af:12:08:5e:42:6a:55:db:01:
         ee:bb:0f:4b:6d:19:c5:56:65:de:c4:67:af:58:62:91:69:0c:
         5d:7b:9e:99
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:55:38 2025 by rpki-client