Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0db8a5ad-6e19-407f-b91f-9eb6e305bc35.roa
File:                     0db8a5ad-6e19-407f-b91f-9eb6e305bc35.roa (raw, json)
Hash identifier:          EgViGy3kPKcJIIKigPotKiJ27xlnhG5ELIczH44nqCg=
Subject key identifier:   F9:85:2E:CA:95:95:46:EC:B7:E0:E9:B5:FD:93:78:47:A3:08:C4:04
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       140DD075EA36CDCDD3110B35D4642CCADBDAA49E
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0db8a5ad-6e19-407f-b91f-9eb6e305bc35.roa
Signing time:             Fri 31 Oct 2025 04:41:22 +0000
ROA not before:           Fri 31 Oct 2025 04:41:22 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3bf0::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:0d:d0:75:ea:36:cd:cd:d3:11:0b:35:d4:64:2c:ca:db:da:a4:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 04:41:22 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=537552a1acdb942e838fa2236fcd07dfd2c0056fdb28e9aa7fa9e7d573d8493f, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:51:42:10:57:5c:87:c0:07:cf:10:88:29:87:
                    35:18:18:6f:26:a7:30:e2:8f:ca:4e:92:c6:61:03:
                    e2:2f:92:52:6c:2e:25:56:e2:07:46:e9:73:b1:bb:
                    fd:d6:60:02:da:60:05:d7:b5:0d:48:07:21:b1:6f:
                    0b:5d:cf:54:e4:44:79:d9:7e:62:50:63:06:aa:39:
                    1b:d8:2d:17:f5:c8:47:26:0a:26:2a:3a:89:ef:67:
                    bd:6d:ce:d7:2c:42:ef:3a:ba:73:c6:59:7d:48:0f:
                    05:a1:de:13:85:38:33:6e:3a:9a:e7:82:1c:3a:b0:
                    c4:f5:e1:fa:e3:dc:d0:d5:15:a1:83:ae:74:19:27:
                    66:fe:0c:5f:d1:45:c2:53:f6:f1:73:44:bc:ec:45:
                    b6:42:d1:3a:e0:0c:c5:b5:5c:9f:e3:85:f5:11:71:
                    18:7a:06:d1:73:c3:1e:83:c6:50:4b:80:02:81:5b:
                    ae:55:94:b9:ba:26:9e:a4:f8:e9:a8:e4:c4:2f:17:
                    86:c3:db:68:82:5e:36:65:94:93:4d:0a:b6:ea:99:
                    f5:53:3b:5b:df:59:f1:34:7d:f9:e8:7b:4d:49:91:
                    04:c5:06:eb:b7:e4:2a:1b:32:a0:e9:32:29:b2:87:
                    d3:c8:a1:8c:ff:40:2a:f0:d7:60:d9:0c:fa:04:58:
                    ba:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:85:2E:CA:95:95:46:EC:B7:E0:E9:B5:FD:93:78:47:A3:08:C4:04
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0db8a5ad-6e19-407f-b91f-9eb6e305bc35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3bf0::/46

    Signature Algorithm: sha256WithRSAEncryption
         79:38:fb:dd:81:5a:cc:1f:04:8c:2e:91:72:6a:32:f7:b7:3f:
         36:23:6c:cc:50:98:0d:14:62:86:fc:1e:8e:01:ef:b5:90:eb:
         84:f8:f2:f8:78:d0:c7:ec:45:f6:f2:34:91:9c:66:1d:9e:b0:
         58:6e:ab:36:ae:bc:b6:23:59:54:2d:3c:3f:a0:0c:68:a3:4a:
         af:cf:bf:a0:ca:e5:21:f6:f8:3f:94:3b:63:41:be:82:15:a7:
         39:85:1c:93:57:d6:0c:bf:40:a1:ad:a4:10:17:06:5e:e2:a5:
         8b:d8:6d:cd:70:e3:1b:4a:61:ac:26:a5:e5:05:3c:3c:d1:3e:
         eb:42:86:1c:4c:4f:66:eb:04:f2:9b:23:90:dd:a8:0d:36:0a:
         66:66:85:43:36:11:d1:3d:53:e0:dd:f2:cb:eb:bb:f4:29:12:
         75:8c:2e:d2:45:cb:f6:42:eb:11:40:cc:c0:4c:19:c7:c8:68:
         9a:e2:d2:b3:fd:5a:73:29:53:aa:92:34:4f:3f:d0:bf:4e:84:
         72:cd:97:c2:5a:8e:18:37:8f:d1:4b:01:ec:46:45:9b:cd:1a:
         67:8c:8b:54:50:ab:d8:a1:87:5e:b4:75:48:62:f6:f5:60:ac:
         07:bb:62:92:1b:9f:87:ff:f9:14:13:03:7b:53:12:fe:42:9e:
         80:ff:dd:e5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:27:33 2025 by rpki-client