Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/053abbe1-c9a3-4c34-8761-d097f4b64f37.roa
File:                     053abbe1-c9a3-4c34-8761-d097f4b64f37.roa (raw, json)
Hash identifier:          b5ipSeR/tb8B7xug5rPQBwOAFJC9vI/MBzTibYminTQ=
Subject key identifier:   DF:7D:2F:B2:89:13:05:AA:9C:94:DF:BA:81:CA:04:7F:77:54:92:1C
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       15E209D6596B0E8CAB15014019B33C1EAD81B3D0
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/053abbe1-c9a3-4c34-8761-d097f4b64f37.roa
Signing time:             Thu 30 Oct 2025 23:10:32 +0000
ROA not before:           Thu 30 Oct 2025 23:10:32 +0000
ROA not after:            Thu 04 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2b9a::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:e2:09:d6:59:6b:0e:8c:ab:15:01:40:19:b3:3c:1e:ad:81:b3:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 30 23:10:32 2025 GMT
            Not After : Dec  4 23:59:59 2025 GMT
        Subject: serialNumber=a57aa73a1a63ba77489726eeabe63b3dc3c6490a4bf89941a50c5bf0804e4dfe, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:7f:d2:81:3b:f0:cb:f8:81:fc:ac:8a:ab:61:
                    e2:0d:13:2b:bb:37:3c:69:5c:dd:c1:fb:a0:be:b8:
                    e7:c9:cb:cf:4e:5a:30:a1:a4:fd:7e:ec:6f:1a:e7:
                    a4:89:b7:2b:40:11:80:da:27:e3:0b:05:ed:74:fa:
                    49:96:a5:08:38:3a:ce:b2:02:8c:d9:3b:21:8f:59:
                    30:07:e8:03:8a:a6:f9:ed:c5:53:40:57:6b:6e:82:
                    36:18:62:ab:74:a3:59:4a:36:ba:ae:0d:68:35:12:
                    15:8a:1f:2f:01:49:67:e0:e3:87:04:82:24:3b:00:
                    81:40:46:b5:3c:23:1a:22:3b:a1:88:27:ae:67:13:
                    76:e8:14:6c:c7:a0:f1:b9:d6:a0:ad:08:6f:05:ea:
                    8c:3e:f2:a6:69:02:85:89:2c:34:1e:d4:f5:e0:bc:
                    80:08:45:5f:7f:7e:a7:c0:c0:b6:1c:ef:2a:13:a3:
                    a0:e5:e6:41:ab:76:cb:6a:62:8f:ba:90:c1:98:95:
                    48:7c:5d:40:2c:8a:b4:09:ea:53:dc:cf:f3:46:14:
                    11:74:df:72:82:91:7e:67:b2:85:ba:a2:98:c0:35:
                    30:ac:e7:69:68:1c:cb:9b:19:38:73:29:d5:c3:1d:
                    83:80:93:41:21:22:17:65:87:bd:7c:72:2d:18:df:
                    dd:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:7D:2F:B2:89:13:05:AA:9C:94:DF:BA:81:CA:04:7F:77:54:92:1C
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/053abbe1-c9a3-4c34-8761-d097f4b64f37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2b9a::/47

    Signature Algorithm: sha256WithRSAEncryption
         18:77:d0:22:e5:c0:88:64:90:eb:94:1d:bd:0f:c8:4e:30:bc:
         b9:19:5f:7e:72:6e:42:38:ce:d0:d7:87:a0:59:6d:18:a3:a6:
         c5:5c:75:a7:4e:20:83:7a:64:c6:3e:bb:62:f0:1b:30:04:cf:
         09:ea:b3:90:27:ca:d8:85:39:e8:fc:85:47:7e:ef:68:3a:e3:
         ec:e6:62:44:6d:18:7a:e9:c7:a7:1b:16:d2:fd:a6:15:5b:73:
         13:9b:ef:79:fe:a7:bb:f9:78:86:a7:f3:aa:98:72:44:22:79:
         a0:7a:f4:ab:09:e7:5f:49:ae:ac:fb:8c:95:ce:a7:3c:05:49:
         85:e4:30:27:d3:ff:23:19:f1:50:03:a6:6b:8c:67:df:b6:c5:
         3a:5b:d5:ed:8e:9f:22:f6:55:58:cf:8a:3a:7a:21:39:bb:c0:
         f7:dc:0c:3b:00:cb:3c:d6:96:bf:43:17:83:9f:74:11:46:6d:
         dc:9a:ae:55:2e:e6:44:5d:09:98:d0:99:41:63:2e:48:cc:62:
         b6:7f:b4:ec:37:73:bd:d7:f9:8c:30:a5:6f:c0:a4:7e:8a:d1:
         80:15:aa:4d:03:1b:ab:c7:b2:0c:4c:b9:aa:9e:25:fe:17:f9:
         4a:7d:31:55:6e:b4:3f:13:1a:de:d6:69:e6:ce:02:67:91:e6:
         0a:5f:9f:79
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:55:12 2025 by rpki-client