Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/096bfd2b-b402-4c0e-99cb-c87936877dc0.roa
File:                     096bfd2b-b402-4c0e-99cb-c87936877dc0.roa (raw, json)
Hash identifier:          fVHBVgdXrfa5xdIz3HlOk5pKoSGy+HpXx50Zz/apzJo=
Subject key identifier:   C8:C6:4A:B7:B9:8F:DE:F0:0F:63:C8:09:84:81:CE:F9:03:E0:8C:A8
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       5A1B5B64AD6E38916DB78E0F4C345D9D5ED0B200
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/096bfd2b-b402-4c0e-99cb-c87936877dc0.roa
Signing time:             Thu 30 Oct 2025 23:12:07 +0000
ROA not before:           Thu 30 Oct 2025 23:12:07 +0000
ROA not after:            Thu 04 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2bc6::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:1b:5b:64:ad:6e:38:91:6d:b7:8e:0f:4c:34:5d:9d:5e:d0:b2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 30 23:12:07 2025 GMT
            Not After : Dec  4 23:59:59 2025 GMT
        Subject: serialNumber=771ca46b0c2543cee6b63a024d1a237ebdc2b035f1dfa731a717b1b76bbb5335, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:39:66:85:ea:e6:d6:07:65:ec:38:06:38:12:
                    9a:23:06:6e:84:ce:c9:39:82:4a:ff:8c:72:68:d9:
                    36:19:70:d8:67:d2:db:1b:1f:7b:63:da:c4:a2:24:
                    3f:fd:82:64:a6:c7:e3:46:e1:06:77:01:21:d9:55:
                    60:d6:b2:f5:18:67:05:02:41:ff:af:9a:13:46:2e:
                    db:f7:b6:c9:88:84:63:dd:e0:b7:11:86:f6:d4:0c:
                    19:25:cd:c7:9b:4d:a1:d4:98:d2:86:c3:86:07:b7:
                    81:34:c2:71:08:99:df:bf:42:3c:fb:f3:73:ca:47:
                    91:a6:57:57:12:92:41:ce:9a:14:28:39:26:7c:2a:
                    04:22:e7:bb:1e:48:95:50:da:2e:d2:c5:93:97:61:
                    1c:a3:38:cc:72:4f:e1:15:f7:af:e2:8c:39:d4:bf:
                    69:b4:2d:8a:13:91:64:fb:07:8f:06:91:62:2f:c8:
                    e7:fe:15:0f:e6:a0:59:28:a3:19:fa:d3:17:bf:69:
                    b7:1a:ca:de:3b:5d:b4:cd:f6:10:c4:3e:c2:62:82:
                    a5:bd:e7:53:66:14:83:6b:f4:d5:e1:95:a7:c1:13:
                    f4:07:fe:e1:df:a7:89:4a:e6:15:ae:98:bf:0f:1c:
                    af:f9:e1:7a:21:f8:dd:f5:4e:64:11:4f:3f:08:f7:
                    8c:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:C6:4A:B7:B9:8F:DE:F0:0F:63:C8:09:84:81:CE:F9:03:E0:8C:A8
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/096bfd2b-b402-4c0e-99cb-c87936877dc0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2bc6::/47

    Signature Algorithm: sha256WithRSAEncryption
         1e:97:1d:ba:de:9f:d7:ba:3a:6d:4e:3d:40:f5:91:30:cd:3e:
         88:7c:45:10:7f:9a:c9:ca:9d:9f:b8:81:74:6c:47:f7:82:65:
         f2:1a:f5:cd:c1:ff:1e:0a:47:51:66:0d:28:ac:36:43:6f:b5:
         10:42:8e:27:57:cb:4e:f4:6e:61:96:2e:6f:83:fa:74:8e:57:
         1f:69:a4:db:bf:02:1c:dd:30:0a:69:34:6f:7d:88:6f:96:bb:
         d3:d6:ed:e9:89:ba:d3:05:cd:12:82:d9:25:95:b0:13:1b:73:
         55:a5:6f:70:4c:3b:80:b6:26:a3:97:b4:67:e7:5a:94:df:7e:
         ef:c0:ba:bd:a0:5c:0b:04:19:6c:aa:b4:70:0e:a8:4b:45:c9:
         3b:9f:c3:67:1b:c6:9e:6b:2e:40:bd:bb:13:c5:ea:cb:28:0c:
         9c:a9:09:ed:2d:96:8e:d6:53:8a:64:cc:d3:b7:69:16:cd:9b:
         a1:9f:c9:95:5c:81:d7:69:25:16:77:89:07:3d:08:76:3d:32:
         ce:3a:13:2e:e4:81:93:e3:c5:7d:1a:79:b9:c9:94:1f:4e:24:
         3b:6c:c3:4d:a2:eb:7e:13:57:49:2e:67:47:44:72:68:8b:72:
         a7:57:88:45:e4:3f:29:ff:2b:e3:3a:57:f2:82:1a:5d:b2:0c:
         34:e7:33:9d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:45:36 2025 by rpki-client