Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/081d7a85-5e79-4ab0-ba8e-65e1b3d70789.roa
File:                     081d7a85-5e79-4ab0-ba8e-65e1b3d70789.roa (raw, json)
Hash identifier:          /VttBCO/XvIx9afENQkOZBpi3yw7NHu47sd856fQdy8=
Subject key identifier:   7B:FD:97:2B:F6:8F:6D:EF:57:BF:4A:8A:EB:24:07:A0:66:70:30:AF
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       58141E132AB440C4D05D3AF5241C5AA8BDD8E031
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/081d7a85-5e79-4ab0-ba8e-65e1b3d70789.roa
Signing time:             Fri 31 Oct 2025 05:08:47 +0000
ROA not before:           Fri 31 Oct 2025 05:08:47 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1358::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:14:1e:13:2a:b4:40:c4:d0:5d:3a:f5:24:1c:5a:a8:bd:d8:e0:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 05:08:47 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=cc1f21bac8e724a3ff59cb5cefb74194289403af43f6cf3e8c801d1f8ec43cd3, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:01:68:f9:f5:c8:d1:a0:59:ca:06:f4:dc:1b:
                    cc:4d:98:7a:8d:20:5c:00:bf:92:c2:41:81:4e:48:
                    54:e9:cf:25:38:26:f4:71:a6:75:9d:40:31:9a:06:
                    ba:cf:6f:0a:22:9b:ad:92:5c:39:81:d2:57:ba:ed:
                    0c:2f:47:14:d4:a8:0f:1b:ef:67:66:c7:a3:dc:0b:
                    77:eb:62:73:89:db:67:e3:dc:27:0e:74:b8:2d:2c:
                    a6:9d:5f:65:64:cb:09:67:c1:a5:b6:84:ca:0f:23:
                    69:b4:e6:96:f3:39:64:94:1c:4d:35:c8:30:e6:29:
                    3c:1e:ea:f6:56:ae:17:4a:df:06:5f:69:f3:b2:d6:
                    19:a2:50:0d:c4:dd:01:14:ce:e0:a5:43:9c:01:1e:
                    25:2b:79:54:7b:f4:2a:a0:1a:65:0e:c1:b7:f4:8b:
                    0a:e0:c2:e0:d8:e7:28:ee:96:0b:19:bc:4b:29:8c:
                    19:e7:5c:a9:d7:36:72:c0:6d:f9:8a:7a:ff:53:e9:
                    70:fb:28:ff:87:d3:55:17:a1:49:61:b3:4f:62:67:
                    c5:34:6e:ce:d6:eb:23:88:ba:01:22:da:a9:cc:19:
                    0d:62:3b:2d:39:76:ce:de:9e:d8:60:dd:60:e0:69:
                    53:a9:33:01:49:9a:c7:32:b3:a7:69:5b:e7:97:80:
                    b0:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:FD:97:2B:F6:8F:6D:EF:57:BF:4A:8A:EB:24:07:A0:66:70:30:AF
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/081d7a85-5e79-4ab0-ba8e-65e1b3d70789.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1358::/45

    Signature Algorithm: sha256WithRSAEncryption
         37:c2:bb:63:bc:3a:bd:da:4a:18:41:a4:23:77:77:ee:06:93:
         99:40:ad:9b:03:f1:bd:33:0c:fb:0c:ef:33:4c:d7:5a:12:b8:
         44:92:49:09:40:94:49:26:e3:de:21:09:b8:11:9e:a4:d8:7d:
         51:b6:4c:1d:60:05:ab:17:5e:d6:3b:ab:0a:9e:de:0a:f3:6e:
         c0:ba:36:e4:28:a8:ef:e3:2a:50:09:05:0d:9e:5b:f4:5e:6e:
         18:90:63:6f:f0:3f:fc:50:5c:63:29:73:19:6c:d0:e0:51:92:
         de:0d:6b:31:97:fc:d7:ef:a8:ce:a6:5b:ab:19:7c:2b:fd:cd:
         d9:65:cb:a9:11:bf:08:81:45:ca:cc:e2:02:9c:80:9f:10:e4:
         39:54:e1:8f:a4:0f:92:f6:06:5b:0c:68:0b:c7:34:dc:5f:2d:
         a2:96:ce:67:d7:c8:7f:51:89:12:e3:1c:b5:5f:71:81:7c:f5:
         b2:90:92:b7:32:a8:2f:b3:69:45:4c:c7:14:14:b6:5f:b3:8c:
         14:30:98:b5:da:8d:23:45:39:9b:f0:e9:0e:6e:45:40:f4:53:
         40:04:39:8d:42:1f:db:46:86:f0:e8:9a:ef:e9:eb:4c:fa:e2:
         e8:40:bd:21:50:04:83:ed:52:74:9b:77:85:82:13:0b:1a:b9:
         ba:f8:9c:f1
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:54:26 2025 by rpki-client