Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/044bf4b3-78aa-41ca-a708-8fc5b55e8a99.roa
File:                     044bf4b3-78aa-41ca-a708-8fc5b55e8a99.roa (raw, json)
Hash identifier:          j8KbsjfqlGYAhYhO6edS/urqhFweUa9rCCBYBJT6iZ4=
Subject key identifier:   82:63:24:7C:42:3B:B3:88:CA:8B:F7:C4:77:6B:E7:63:1A:6F:BE:7F
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       27D7841085FA8C3EDBF4C39C688EB152C24E2917
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/044bf4b3-78aa-41ca-a708-8fc5b55e8a99.roa
Signing time:             Thu 30 Oct 2025 22:43:48 +0000
ROA not before:           Thu 30 Oct 2025 22:43:48 +0000
ROA not after:            Thu 04 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:267a::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Nov 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:d7:84:10:85:fa:8c:3e:db:f4:c3:9c:68:8e:b1:52:c2:4e:29:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 30 22:43:48 2025 GMT
            Not After : Dec  4 23:59:59 2025 GMT
        Subject: serialNumber=c955d3577aa912da81e8bac7e598e7b862544ed4e6f6faffafb70eba05812617, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:fb:52:54:d0:ea:c0:a8:3a:37:b3:f1:38:4f:
                    fa:46:42:b4:ca:7d:42:8b:b1:88:85:e4:57:f1:92:
                    d2:e8:b0:35:65:4e:f4:0f:83:44:66:b6:7f:51:c0:
                    b4:e5:2f:b7:79:18:f5:bd:c9:41:b3:37:9f:a6:43:
                    cc:13:3b:8a:28:25:18:09:ed:20:4c:06:c8:43:5a:
                    10:ea:8b:2a:5c:b3:77:d5:8b:8e:1f:45:f5:61:bc:
                    e3:fd:b3:9f:22:cd:ca:a8:19:f6:a4:f8:df:57:66:
                    ce:b5:f0:36:3b:0c:53:32:96:31:ea:e6:bb:9f:52:
                    a9:28:05:ba:39:20:9b:69:38:c9:aa:1d:e9:f5:51:
                    2e:e4:00:56:b0:21:57:89:65:37:4d:93:be:8c:8c:
                    08:8d:bb:2d:65:79:4d:90:fa:eb:4e:ba:37:dd:86:
                    79:5a:ba:9b:46:27:6b:1f:6b:46:9d:e4:9d:a7:eb:
                    21:40:b4:35:c3:ff:eb:9b:0a:93:64:94:93:78:02:
                    59:7d:39:3f:e9:09:1f:ee:b8:03:ed:4a:6d:84:08:
                    2b:39:43:0d:fa:a7:e3:29:46:89:6f:2a:bf:65:22:
                    56:a3:29:9b:c9:72:82:d0:3a:f7:f6:dc:0c:89:dd:
                    de:98:21:7e:e3:e0:10:fe:52:e5:80:86:36:f8:6a:
                    46:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:63:24:7C:42:3B:B3:88:CA:8B:F7:C4:77:6B:E7:63:1A:6F:BE:7F
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/044bf4b3-78aa-41ca-a708-8fc5b55e8a99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:267a::/47

    Signature Algorithm: sha256WithRSAEncryption
         60:2c:b4:78:4f:c9:8a:33:76:90:2c:8b:d8:29:6a:67:2e:30:
         46:b6:74:c3:e4:5a:84:13:09:2c:71:9b:b5:79:79:0c:9c:94:
         2a:ca:bc:da:4e:23:f4:c6:c1:00:3d:de:35:ab:69:75:e1:cf:
         f3:bf:d3:df:5e:cf:0f:69:7f:16:ea:ee:71:7c:42:83:a8:c3:
         be:e0:56:54:cb:36:65:20:6f:23:76:3f:1b:c0:5d:60:5a:16:
         73:b2:34:fd:0b:5f:71:e0:f2:c3:78:a6:be:eb:92:9f:93:36:
         a6:00:b9:3f:e0:76:3a:65:a8:7f:f0:6f:03:ac:dc:af:f8:d4:
         78:5b:61:43:73:80:c2:8b:03:ad:a1:c9:e4:d0:7e:92:0e:fb:
         1e:5b:7b:30:8c:0a:e5:3a:86:ed:e2:b7:92:a1:c6:1d:3e:45:
         41:6d:ae:7c:da:16:cf:c8:17:11:45:a6:4b:58:1b:b9:a4:81:
         10:3b:a2:62:e8:84:4d:fd:9e:92:1b:1a:6a:2d:a8:92:e8:b2:
         3e:9f:4b:a0:df:30:a6:37:de:03:dc:26:c3:8b:0e:bd:8f:0b:
         c2:de:b0:99:f3:fb:00:18:14:18:6c:6f:92:45:72:6a:79:fe:
         8e:b7:54:35:22:43:97:6e:a8:2a:35:b3:7b:34:16:fb:c8:8d:
         60:f4:ee:15
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 16:54:40 2025 by rpki-client