Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0afef2b7-4025-41e0-9282-547b140c7fd9.roa
File:                     0afef2b7-4025-41e0-9282-547b140c7fd9.roa (raw, json)
Hash identifier:          IqBH6ebbpr1YbDOqmAEFIrKnj9WcH9ndyc+E+XCHSqk=
Subject key identifier:   6F:DB:8B:07:5D:1C:1D:FF:4D:BE:F7:7F:05:46:CF:C5:FC:B7:76:84
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       66EF907976CEFAFB5682EBE45B4C8FBD226B57D9
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0afef2b7-4025-41e0-9282-547b140c7fd9.roa
Signing time:             Fri 31 Oct 2025 06:25:29 +0000
ROA not before:           Fri 31 Oct 2025 06:25:29 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3f30::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:ef:90:79:76:ce:fa:fb:56:82:eb:e4:5b:4c:8f:bd:22:6b:57:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 06:25:29 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=846eea99d925f43cf709ca25c11f3affb7c5497bc154700b4aea49f2ec5edb5d, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:4c:1c:c2:15:71:ca:57:25:cc:26:a0:76:a9:
                    a5:e1:84:8e:55:be:92:75:59:82:27:02:59:7c:4f:
                    a5:6f:24:55:e5:af:d1:7f:fa:f5:df:4c:6d:a2:19:
                    54:13:2d:04:3d:46:78:41:93:e7:11:ec:0d:52:d4:
                    0d:91:86:75:3e:7f:8d:4c:64:48:66:c8:3b:ba:bf:
                    85:93:fe:bd:df:24:82:7e:1a:30:ad:0c:ad:8b:e7:
                    04:bc:11:88:21:83:44:4c:e4:be:ba:31:60:f3:dc:
                    dd:77:22:67:4d:39:30:7b:12:f3:43:c2:d8:ca:24:
                    c2:eb:38:ed:12:cb:3a:1e:2c:85:bd:11:97:37:fd:
                    7d:32:34:0c:a5:26:72:04:f6:93:8c:28:4e:32:83:
                    08:ed:e4:23:3a:b7:50:c2:17:8c:f9:7b:52:81:d1:
                    e4:82:34:a9:fe:af:ce:bc:22:7d:d2:35:87:5b:7a:
                    d3:81:a0:a6:1b:0d:d2:bd:e2:ba:37:c8:9f:52:a1:
                    10:d9:3a:f3:9e:49:f6:02:ae:39:55:67:1e:f6:71:
                    26:4c:80:53:f4:3e:dc:89:32:69:79:51:53:2c:43:
                    28:3d:09:80:1d:e7:5c:01:e4:fd:f7:2a:64:ca:b9:
                    15:30:3c:ad:78:6b:37:54:c3:2e:56:9b:cd:05:20:
                    11:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:DB:8B:07:5D:1C:1D:FF:4D:BE:F7:7F:05:46:CF:C5:FC:B7:76:84
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0afef2b7-4025-41e0-9282-547b140c7fd9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3f30::/45

    Signature Algorithm: sha256WithRSAEncryption
         47:fa:c8:16:c3:dc:3a:82:bb:42:ef:ff:4f:00:dc:d0:ea:4e:
         29:b5:f0:58:e9:91:71:f4:81:62:fc:3a:3d:d9:96:2c:82:2b:
         1f:ae:e7:65:f5:3f:40:4a:ae:88:2d:40:e6:13:00:a7:e0:68:
         42:78:45:3b:46:46:7c:4e:ff:44:93:ba:80:7b:35:7c:ec:13:
         ff:3f:57:d8:3b:bd:c8:b3:eb:36:d2:83:6f:99:13:73:0f:d0:
         df:ab:08:8e:00:59:83:c7:09:f9:a4:6b:95:e5:11:a5:21:a5:
         a8:0c:07:c5:2e:0c:c5:b8:d4:c8:f7:27:2e:35:af:9f:02:7d:
         06:52:ab:d7:10:8f:1f:90:a6:6b:ff:d6:ce:bd:b9:b8:fb:7f:
         c0:5e:3d:c2:a6:f2:0e:1a:85:fb:01:20:d0:5b:2b:c3:a8:c5:
         ac:ea:83:f0:b3:c3:8a:40:be:60:d2:31:34:d2:81:da:d9:ea:
         50:3f:e9:26:56:f2:60:b1:28:91:1e:64:96:27:83:30:99:d0:
         e2:2b:a7:51:5c:db:40:b8:06:c9:02:30:92:bc:1e:33:52:a9:
         9b:8b:e8:b3:30:49:24:1b:23:03:23:5c:ee:ba:62:2e:f2:7a:
         ab:39:28:3d:37:53:47:dd:0f:b5:0e:34:45:16:2a:ac:a6:7f:
         f2:ca:f5:5a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:29:18 2025 by rpki-client