Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1175f4d5-e066-4302-9a37-78775d49ea55.roa
File:                     1175f4d5-e066-4302-9a37-78775d49ea55.roa (raw, json)
Hash identifier:          IcFbMCdpXAyAItNRZZMzetCbHgKAKncPCaPUE5hPE8Y=
Subject key identifier:   42:25:98:70:67:A9:EE:E6:A2:1D:15:2D:75:76:0A:8E:B5:E6:0C:BE
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       703B9A1762195579D34990C2C74BE377AC43AB25
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1175f4d5-e066-4302-9a37-78775d49ea55.roa
Signing time:             Thu 30 Oct 2025 20:36:59 +0000
ROA not before:           Thu 30 Oct 2025 20:36:59 +0000
ROA not after:            Thu 04 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2922::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Nov 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:3b:9a:17:62:19:55:79:d3:49:90:c2:c7:4b:e3:77:ac:43:ab:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 30 20:36:59 2025 GMT
            Not After : Dec  4 23:59:59 2025 GMT
        Subject: serialNumber=4f05ee31ee79001b11a35cde21feaa68fed3217142cc94e380025a9d756bb713, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:af:7a:a1:bd:97:cb:71:d7:9c:85:81:7a:90:
                    69:dd:85:1c:db:84:04:8d:70:d6:2a:b3:3b:4e:44:
                    2b:c3:ef:d3:e7:40:9a:d3:28:43:c1:8f:94:66:23:
                    45:51:bb:27:55:23:99:26:66:ef:35:61:91:8b:23:
                    ca:58:27:ff:5c:89:ca:ad:ee:64:cd:14:60:5d:53:
                    5d:91:0c:c4:6e:d6:8c:2f:46:c1:84:82:35:bc:e7:
                    5a:8d:d5:47:a0:f5:25:39:0c:94:eb:57:09:7c:5c:
                    50:83:9c:64:0a:49:e4:27:e5:25:81:b3:72:2d:4d:
                    45:48:23:06:6a:e4:34:d8:ea:7b:1e:69:f5:4d:8f:
                    5e:4d:1f:0a:f9:47:fb:55:7b:bf:4d:67:dd:59:62:
                    c1:2d:48:1a:d6:d3:d3:4b:1b:af:ea:a8:65:74:80:
                    5a:01:2d:e6:f1:91:ee:ed:58:08:b5:7c:c3:fa:a0:
                    7c:29:92:3b:c7:eb:f1:f1:ae:7f:73:c8:ce:33:0b:
                    f8:ff:a0:b2:0c:c4:19:cc:ad:f3:01:34:8a:35:dc:
                    4e:1d:39:85:df:99:53:05:7b:c1:2d:6d:67:e1:80:
                    28:1f:2e:b5:fe:4d:4d:2b:d9:f4:14:cb:ff:46:f2:
                    9a:47:11:d6:57:b9:bd:fd:96:64:5c:bc:51:92:0f:
                    41:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:25:98:70:67:A9:EE:E6:A2:1D:15:2D:75:76:0A:8E:B5:E6:0C:BE
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1175f4d5-e066-4302-9a37-78775d49ea55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2922::/48

    Signature Algorithm: sha256WithRSAEncryption
         11:43:32:c7:4c:99:02:bd:56:6a:4c:f4:1e:2e:44:d7:d5:d8:
         09:45:03:69:c8:ae:39:b2:66:ae:95:dd:f0:66:4f:ca:00:5b:
         d5:5b:f6:eb:79:19:30:a5:7b:44:f1:f2:12:34:aa:75:a1:e8:
         de:8a:18:ca:79:68:26:b6:46:28:33:f1:fa:08:13:c7:7f:05:
         63:35:dd:82:e4:f0:dd:bf:89:d9:dc:61:7c:e5:ac:49:79:7f:
         44:ac:5b:5d:7f:87:4a:3d:37:4c:ea:46:6a:79:7a:a2:89:72:
         0c:af:3d:51:82:bf:90:56:b5:20:ac:b9:b4:73:e8:98:49:e0:
         9b:e6:e1:cc:a2:67:61:62:a3:72:e1:87:29:17:a2:40:59:cb:
         e1:5b:b7:be:c3:f8:f3:63:4e:59:4f:9b:a9:44:6e:0c:ab:45:
         4e:9d:6a:06:23:82:3b:98:40:0d:25:6e:1c:b1:a1:f8:bc:15:
         8e:de:20:05:9e:4c:d5:3e:02:fd:38:60:e7:31:ab:aa:b3:14:
         28:f5:b5:2a:77:8e:05:8c:b9:de:9a:02:67:39:aa:39:07:99:
         95:97:28:93:c8:ea:5c:25:5e:86:d8:53:77:61:ce:14:c9:6c:
         f8:e9:d0:98:b9:ac:8d:17:85:42:e3:16:92:bc:10:37:2e:cb:
         94:3b:88:c5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 16:56:55 2025 by rpki-client