Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/08d8e085-eb0f-4903-ae63-0b05f7fc5ffb.roa
File:                     08d8e085-eb0f-4903-ae63-0b05f7fc5ffb.roa (raw, json)
Hash identifier:          N6LPQeARIQsPrvunJCyEBUddQcu1l4Rt0r0dXlta+os=
Subject key identifier:   EF:71:70:D7:C1:15:93:D1:0E:8C:D1:DF:7F:00:FE:28:86:59:43:7E
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       35A48C09A838D8009D31D1D033168B8246800EB0
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/08d8e085-eb0f-4903-ae63-0b05f7fc5ffb.roa
Signing time:             Fri 31 Oct 2025 04:55:05 +0000
ROA not before:           Fri 31 Oct 2025 04:55:05 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3e5c::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:a4:8c:09:a8:38:d8:00:9d:31:d1:d0:33:16:8b:82:46:80:0e:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 04:55:05 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=e9d9253727d24150f4a0d86f184cd74626bed012593a49667b039d86c9b8741d, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:36:a7:0e:8e:5c:77:54:f7:97:ab:4c:42:0d:
                    45:8e:56:92:90:6e:2d:24:3b:5c:80:db:8e:35:f8:
                    f8:7a:e3:61:e9:d7:39:cb:26:c9:01:a1:22:c2:ea:
                    14:95:8f:dd:15:91:e4:76:f4:12:cb:e1:d3:71:34:
                    51:87:78:b6:9b:77:cb:45:7d:9f:84:2e:7e:8a:b9:
                    69:f7:4b:4b:5f:16:04:e1:ee:df:cc:6d:77:c1:de:
                    f5:5b:e9:4a:1e:45:67:d9:8d:7b:86:f5:7b:4b:fc:
                    2d:5f:a2:7f:07:ed:e2:a9:ef:11:31:31:58:68:c8:
                    ee:fa:8e:84:6b:bc:62:39:2d:83:4d:32:35:9f:54:
                    51:78:85:f2:12:39:b1:e1:8c:32:60:49:8d:ec:c5:
                    01:d6:11:84:08:8e:cd:a0:06:98:42:61:dd:fd:50:
                    25:0f:f3:b6:58:3c:04:5e:e1:9d:f3:18:9f:44:17:
                    01:bb:03:80:f1:79:65:c2:57:69:47:ea:96:bd:22:
                    49:ad:46:3b:61:83:24:09:cd:3d:b5:59:44:d8:0f:
                    a8:5c:cf:5e:d0:d8:9d:39:eb:f1:1a:ef:6f:20:3f:
                    e4:df:45:4a:8b:e8:d4:3e:39:68:ac:d6:8f:ff:a6:
                    dc:bf:56:f9:f3:7b:65:a1:d2:22:03:59:02:be:f9:
                    6a:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:71:70:D7:C1:15:93:D1:0E:8C:D1:DF:7F:00:FE:28:86:59:43:7E
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/08d8e085-eb0f-4903-ae63-0b05f7fc5ffb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3e5c::/46

    Signature Algorithm: sha256WithRSAEncryption
         37:e0:56:e8:9f:7a:3c:7e:95:76:ed:9a:7b:33:3a:86:b7:bd:
         86:ad:aa:a1:65:e7:5c:3a:ab:6f:2f:51:38:68:24:9b:66:05:
         12:22:f4:f6:8f:a0:25:1f:3a:a6:2d:1c:ec:30:7c:04:68:27:
         60:22:0c:c7:71:d1:e3:99:35:07:c1:4d:e1:b7:6f:65:47:ec:
         a0:cc:51:d8:89:60:1c:80:19:62:74:35:43:81:e2:e3:6d:42:
         7b:d4:ca:44:2e:8a:a8:e3:3a:a4:6c:a1:4d:0a:f5:42:fb:54:
         f0:06:1d:55:f2:02:d7:b6:af:e6:64:db:d6:ac:06:4d:64:5f:
         05:7b:e0:4e:70:9c:7e:df:39:4d:2c:91:44:c8:70:ae:b7:6e:
         bd:c4:79:ad:cf:4d:fd:e1:be:94:66:1e:28:35:7a:d9:3e:d6:
         8d:9b:5a:f8:dc:45:24:2c:cd:83:59:42:36:fa:20:5f:8a:d2:
         3c:0a:7b:09:79:76:98:c8:15:76:bf:14:53:8b:a4:d4:bb:68:
         f5:e2:9b:2c:05:dc:0d:d9:bc:8a:9a:85:8f:9a:a4:c7:18:29:
         3c:64:61:34:68:c0:1b:e5:4d:54:79:32:d4:33:7f:39:aa:5a:
         55:44:f6:fb:19:b4:0b:da:85:9a:8f:d4:8f:46:39:cb:b5:c9:
         90:34:7c:3d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:34:01 2025 by rpki-client