Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/101113c6-c5d8-4a69-9e1c-ce87a6b93916.roa
File:                     101113c6-c5d8-4a69-9e1c-ce87a6b93916.roa (raw, json)
Hash identifier:          u/HESW19YQv/pdtC6xDxV4KfT/gY1K8vEcSx1VVzfm0=
Subject key identifier:   D1:9A:71:A4:41:09:C8:E5:5D:4E:B4:22:C4:38:72:6B:5A:FB:00:92
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       4432BBD67AABB9730F6CC33D3371E4B1EE721866
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/101113c6-c5d8-4a69-9e1c-ce87a6b93916.roa
Signing time:             Fri 31 Oct 2025 04:55:06 +0000
ROA not before:           Fri 31 Oct 2025 04:55:06 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3e64::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:32:bb:d6:7a:ab:b9:73:0f:6c:c3:3d:33:71:e4:b1:ee:72:18:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 04:55:06 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=2ec964480c9bb62647e43719469c8cc73d6272ae7d3f820ad0a40e10d4aa1058, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:97:11:89:e0:92:5f:13:f4:db:6f:98:9b:57:
                    23:b6:01:22:7f:5e:eb:43:d4:d0:ad:f1:44:ed:45:
                    49:99:57:24:7e:e8:6f:30:f8:aa:79:2b:ed:25:a8:
                    b7:b4:9b:13:9d:e6:f5:f3:7c:ed:d3:a2:9e:b9:50:
                    f1:bd:8e:11:e5:5c:ce:98:51:3b:05:04:a2:0c:21:
                    36:30:79:53:2a:77:73:4a:80:b8:5e:b1:cb:2b:11:
                    37:ce:93:32:80:34:88:d9:de:82:d2:bd:92:11:21:
                    e3:80:65:c9:ca:15:03:6f:e6:0e:5d:68:7d:0d:bd:
                    57:31:8c:c8:34:23:bd:00:34:2b:bd:43:a5:c4:3d:
                    4b:f1:21:f0:ce:cf:aa:9c:12:38:e2:38:71:81:44:
                    7f:7e:0a:76:b6:77:e1:8a:bb:d2:d5:d3:dc:ce:e2:
                    49:7e:41:ab:58:25:c5:37:8d:a1:04:10:06:b9:3a:
                    fa:c0:62:a2:43:c0:b0:85:be:c2:7d:b4:0d:f0:46:
                    f3:2a:fe:6b:21:db:b6:3f:f4:47:24:f2:da:41:be:
                    c8:3c:8e:a9:3f:39:54:92:36:7c:21:29:5b:12:cd:
                    cf:0b:d5:06:4a:10:bd:88:d2:8b:94:63:cd:4a:d6:
                    12:bf:6b:de:84:ce:47:af:56:3b:eb:87:31:f4:63:
                    19:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:9A:71:A4:41:09:C8:E5:5D:4E:B4:22:C4:38:72:6B:5A:FB:00:92
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/101113c6-c5d8-4a69-9e1c-ce87a6b93916.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3e64::/46

    Signature Algorithm: sha256WithRSAEncryption
         48:84:34:ee:3d:e8:18:fb:e9:d9:69:df:e6:8a:41:77:f6:b6:
         85:9d:a0:1e:80:27:ca:3b:2a:3c:ec:85:c3:df:d1:20:a6:38:
         e5:fc:2b:73:8d:29:58:ed:d6:95:8f:1f:b7:f5:c6:80:64:79:
         2e:86:d4:9f:90:6f:a9:a1:ce:b6:72:6e:aa:80:6a:0f:e7:74:
         5a:07:16:42:15:31:12:dc:97:00:a3:b7:14:ff:3a:21:fb:0a:
         b2:4e:ca:6d:38:13:34:fc:73:1f:49:1e:54:74:38:63:d2:59:
         fe:5a:bc:6e:99:1f:9e:f3:c5:1c:92:5b:24:d0:db:db:ce:ef:
         21:c5:c0:15:0e:de:61:c8:ad:ab:60:60:02:9e:79:88:ea:7f:
         8e:5e:5c:df:53:ce:34:30:21:ec:be:b7:49:60:59:3a:a0:cc:
         79:41:bd:95:9f:d6:3c:9e:d6:92:85:c6:7a:c1:b9:51:50:c9:
         c2:51:8b:c5:ec:ef:04:e5:b8:2c:53:7a:00:fd:b3:10:4b:12:
         e1:62:a7:f9:92:ad:f9:86:b3:43:19:18:7d:a4:8e:4c:53:1a:
         35:e1:60:fc:66:ac:d1:7f:d6:7d:4b:87:23:97:a8:d4:5e:82:
         95:8f:11:aa:57:40:78:06:7f:41:61:fe:08:b0:eb:15:68:bf:
         5f:36:30:8e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 12:57:33 2025 by rpki-client