Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/09f94754-bbe5-4004-9a60-84347f1e3fc5.roa
File:                     09f94754-bbe5-4004-9a60-84347f1e3fc5.roa (raw, json)
Hash identifier:          alptHLjK/BxweENbVXjawU8gGjJQmR8ZmK0b57unORM=
Subject key identifier:   A8:35:AE:10:9B:C2:E4:E2:26:DE:54:0B:72:7F:6C:88:B1:0F:7D:0D
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       17611A2CFF96F84C9143A03081199E514D5BC2AF
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/09f94754-bbe5-4004-9a60-84347f1e3fc5.roa
Signing time:             Fri 31 Oct 2025 03:08:36 +0000
ROA not before:           Fri 31 Oct 2025 03:08:36 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1ca4::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:61:1a:2c:ff:96:f8:4c:91:43:a0:30:81:19:9e:51:4d:5b:c2:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 03:08:36 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=3ac71420b8e0019a3ce78bd0608d650a7d6f6779c1672df9e8b0dc136d63d063, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:02:3b:00:fd:45:01:21:03:5c:aa:0e:59:8d:
                    e2:34:e0:ee:1a:3c:95:32:6a:93:30:8c:ed:1f:a4:
                    70:ff:ce:3a:3c:77:c5:cc:f6:97:5c:94:dd:2f:76:
                    de:9f:66:12:cc:c4:85:5c:5c:5f:1a:9e:d0:90:f0:
                    05:07:2a:3b:8b:7c:95:ac:7a:c0:50:0b:ac:b3:57:
                    57:2f:40:51:d1:20:1d:85:8c:eb:24:f7:8e:43:a8:
                    09:78:e0:8f:9a:80:66:94:b6:ab:c9:13:7a:10:91:
                    5f:3f:fb:f4:01:8a:37:d9:5d:52:ac:a5:ca:8d:ee:
                    ed:24:69:a1:b6:ea:93:51:cc:5d:e6:d3:9c:49:27:
                    07:2d:55:0c:4a:ea:cf:82:fa:10:c9:b7:4f:8f:cb:
                    84:73:6e:b2:c6:cd:fc:4e:9e:b0:6f:14:9a:69:21:
                    6e:9d:35:76:81:9a:d1:26:d8:b8:fd:f8:56:89:1b:
                    54:94:98:95:4e:6c:d2:62:d8:e8:e8:dd:df:3d:22:
                    35:a9:cd:2d:ec:ad:58:7e:43:2d:81:c1:00:eb:a6:
                    82:ad:24:9d:ea:b8:fb:a8:cb:22:71:d8:1d:5e:81:
                    3a:4f:2e:31:dd:4d:19:df:b4:62:97:8e:e4:10:d7:
                    24:f7:98:58:cf:e3:a4:d2:2d:46:42:33:bd:23:38:
                    a0:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:35:AE:10:9B:C2:E4:E2:26:DE:54:0B:72:7F:6C:88:B1:0F:7D:0D
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/09f94754-bbe5-4004-9a60-84347f1e3fc5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1ca4::/46

    Signature Algorithm: sha256WithRSAEncryption
         9e:52:b5:df:96:7c:45:f8:c2:84:ef:24:43:61:73:3e:fa:27:
         b8:4a:4f:8d:4c:ed:a8:3a:60:a7:76:ca:64:41:bf:39:6f:7a:
         b0:b2:b8:20:6f:f7:65:4d:ae:56:1b:b4:c4:01:c0:fa:17:f6:
         e5:50:5b:3d:c7:86:5f:e2:dc:53:c8:87:46:99:c0:ff:23:5e:
         c3:ad:26:b5:f4:b5:24:21:b8:58:97:3e:e9:54:74:53:df:c2:
         d3:0c:14:dd:dc:f0:c4:a1:64:93:fa:40:93:98:55:f4:23:22:
         62:60:43:26:22:35:df:84:05:8b:97:08:fc:31:ca:ed:69:87:
         ae:7b:de:65:9b:30:4e:3d:02:0f:e4:fc:3a:fb:62:1e:8b:7f:
         5c:f8:d7:09:71:e3:0e:1b:a9:32:6d:94:ba:2f:ce:5e:b2:d3:
         c1:91:08:77:c3:67:45:53:42:b8:e9:aa:87:20:42:1e:08:8e:
         61:cf:fa:5e:12:03:d8:67:f9:ed:d5:61:59:cc:73:13:68:b3:
         84:07:11:70:8c:b2:3c:60:a5:86:b2:12:5e:d4:67:7e:8f:d4:
         93:a5:58:a9:ac:45:fc:05:96:9c:8f:76:c4:06:b4:20:a7:23:
         9f:8b:4c:d2:6d:18:b5:3f:eb:d7:df:42:96:f9:00:4b:67:60:
         c0:0e:12:c5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:32:23 2025 by rpki-client