Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/043b5ba0-0881-4d23-a75b-f741e68f56e5.roa
File:                     043b5ba0-0881-4d23-a75b-f741e68f56e5.roa (raw, json)
Hash identifier:          3IQ8uQcP+olmPtvkNV1OatmA2yJ8qEuGqkfJu3v34No=
Subject key identifier:   C3:7E:78:EA:03:9C:76:81:6B:70:98:57:16:09:69:2C:4A:3F:5B:2C
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       76308B1DBE2C04E7A73E133B9D465E8EBFE80682
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/043b5ba0-0881-4d23-a75b-f741e68f56e5.roa
Signing time:             Fri 31 Oct 2025 21:53:32 +0000
ROA not before:           Fri 31 Oct 2025 21:53:32 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:a1e0::/43 maxlen: 43
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:30:8b:1d:be:2c:04:e7:a7:3e:13:3b:9d:46:5e:8e:bf:e8:06:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 21:53:32 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=ae7fce235af7da0607413253fe3517587cf6d2613d678e5a3a45d22b7d7fdc9b, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:8a:b6:50:db:56:df:db:3b:96:49:43:19:32:
                    7d:b0:dc:f8:05:8a:b7:7c:7f:82:3b:e5:75:85:e9:
                    e9:9f:6c:3f:33:a0:4e:91:ad:0e:b9:cb:cd:00:b5:
                    86:7a:24:b8:52:48:ba:27:23:ea:f8:1a:2f:2d:72:
                    1d:36:8e:a9:60:9b:58:75:71:cf:54:ac:62:8f:f4:
                    b5:5a:ee:f9:00:67:ed:72:20:db:c5:6e:c5:86:5c:
                    5c:97:c2:05:be:ea:8d:89:e2:b5:2c:e4:b0:dc:d3:
                    1d:53:f8:5a:91:6e:63:0c:e0:03:1c:d8:e5:04:e7:
                    c4:ae:97:eb:f0:f6:4c:c4:50:13:3c:1e:57:7c:9b:
                    2c:19:6b:12:9e:5a:3a:26:63:41:a5:42:5b:e7:be:
                    01:3c:2d:bf:43:82:0c:1e:a5:f9:4f:48:5e:79:e2:
                    04:b5:25:cb:ec:1f:74:67:9c:2d:9e:2f:03:24:09:
                    69:cb:ba:2d:70:19:47:5a:e3:7a:38:9e:dd:11:73:
                    e1:a0:96:8c:ba:3f:bc:f2:7a:87:5a:40:59:20:c0:
                    80:5f:7c:09:a4:70:aa:ac:53:0f:df:ca:51:cd:92:
                    6f:84:a8:e7:b2:d1:75:c9:d6:56:ee:c0:79:5e:c5:
                    3b:90:b9:e4:52:5f:f8:87:0f:60:8d:a6:1b:73:7d:
                    88:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:7E:78:EA:03:9C:76:81:6B:70:98:57:16:09:69:2C:4A:3F:5B:2C
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/043b5ba0-0881-4d23-a75b-f741e68f56e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:a1e0::/43

    Signature Algorithm: sha256WithRSAEncryption
         3c:c7:cb:59:ce:c2:e8:32:34:48:8a:4d:8d:bd:ea:4f:db:80:
         a3:75:ed:48:84:bc:18:be:46:78:f1:70:54:5f:29:fa:cf:b2:
         17:a3:59:41:f5:9a:8e:ec:f7:2f:48:81:07:68:92:f6:ad:59:
         62:12:c5:76:e5:e6:30:5b:26:d2:50:39:7f:79:fa:ab:a0:aa:
         cd:f2:a4:61:a7:bb:19:b0:c7:b8:85:b8:7e:eb:ee:00:73:0a:
         93:c9:e8:0b:ec:41:91:2a:f1:52:28:67:fa:d9:04:b1:a5:75:
         8c:c0:ca:0e:c1:10:65:6b:27:11:85:9d:0f:40:1c:93:24:de:
         c6:13:b8:cb:7a:4d:6f:2d:ad:0e:a2:03:68:4a:d8:80:3b:ba:
         93:79:75:b6:bf:cd:9c:50:8e:fe:94:80:94:66:8f:60:96:5e:
         ed:69:e1:54:f3:67:14:25:78:af:96:b0:7a:96:93:4f:c5:df:
         f2:48:b2:a3:59:71:e8:a5:3d:a1:c7:79:c3:24:fb:ba:ee:6a:
         e6:6d:ad:0e:90:25:00:e5:bf:c1:f8:fd:eb:9a:09:fa:b7:b2:
         1c:2e:6f:b3:cf:04:85:05:f2:45:0a:fc:ec:65:a9:7a:08:c2:
         7a:bd:c5:7c:18:eb:59:c4:db:c2:59:fa:35:b7:4c:38:7b:da:
         30:40:b3:c0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:42:51 2025 by rpki-client