Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1975696e-fb7b-455c-9143-1df0d6b4e75c.roa
File:                     1975696e-fb7b-455c-9143-1df0d6b4e75c.roa (raw, json)
Hash identifier:          Vo9m2KkAjvrLn4FR2KazgMzSjYWYXPNG1CwcsHzAQes=
Subject key identifier:   FE:50:D5:C9:DE:15:A9:58:81:47:20:2B:18:8E:B5:FD:95:1E:A0:2F
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       5A9C8E8968F700F391135FEC061C1F1A88BE6DB1
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1975696e-fb7b-455c-9143-1df0d6b4e75c.roa
Signing time:             Thu 30 Oct 2025 20:51:56 +0000
ROA not before:           Thu 30 Oct 2025 20:51:56 +0000
ROA not after:            Thu 04 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1340::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:9c:8e:89:68:f7:00:f3:91:13:5f:ec:06:1c:1f:1a:88:be:6d:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 30 20:51:56 2025 GMT
            Not After : Dec  4 23:59:59 2025 GMT
        Subject: serialNumber=233b9cd702fe53ef1d4cffc848fb0bcf97e5541dac09e0221dfe86694da31deb, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ea:73:fa:16:ba:d3:e0:fb:6b:02:63:ca:a0:
                    e0:92:97:d1:fc:01:3a:aa:a7:03:dd:fd:c8:94:1f:
                    3f:c5:e2:58:8a:3f:88:0e:74:9e:9b:5c:31:9b:a8:
                    34:5d:ed:e3:ef:0c:09:2b:5f:a4:58:8f:54:b5:bd:
                    9f:24:ef:c4:fc:05:c8:da:33:c9:84:22:40:c4:b0:
                    2d:e0:01:b3:4c:1e:b5:83:d2:11:e6:0c:e7:ee:ae:
                    e2:35:1a:a3:a6:25:c5:e1:ea:4f:3b:ad:85:a6:86:
                    01:9c:3d:0d:23:fb:18:78:40:31:5b:3f:dd:70:c3:
                    33:3f:c1:fb:6e:53:2f:18:42:91:10:8c:d5:6a:da:
                    9a:d3:47:74:19:4e:8d:8b:d7:21:ea:5a:33:f0:2f:
                    a1:67:9b:5e:45:b6:b5:78:2a:5f:22:89:10:91:82:
                    30:54:bd:0a:ac:6e:a9:ff:25:68:87:14:02:bb:a3:
                    c2:25:1d:ac:f2:28:90:11:4c:a3:c2:69:a8:e4:0a:
                    de:d3:9a:ce:33:7a:2b:24:00:b2:da:18:0e:11:3a:
                    f7:b6:d2:99:74:a7:71:ab:3c:51:8c:6c:3e:a1:b0:
                    86:c3:1d:00:8a:3e:9f:d9:ea:ff:b5:76:e3:f3:f4:
                    e1:5c:6d:f4:c7:d2:77:ac:90:7f:31:81:9d:bc:ca:
                    a8:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:50:D5:C9:DE:15:A9:58:81:47:20:2B:18:8E:B5:FD:95:1E:A0:2F
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1975696e-fb7b-455c-9143-1df0d6b4e75c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1340::/47

    Signature Algorithm: sha256WithRSAEncryption
         66:b0:6d:dd:2a:8f:72:07:ca:7d:49:d5:9e:d7:8d:b3:22:23:
         da:0d:04:f4:ab:4e:11:f8:de:6b:c0:0f:d3:86:05:ac:66:b0:
         0c:2f:ce:85:df:00:52:5b:eb:66:80:9d:24:c8:eb:35:13:fa:
         ac:d1:d7:eb:7c:11:af:07:2a:70:66:d6:0b:18:76:5b:7f:9e:
         27:52:bf:d5:4e:34:9e:2e:5d:9d:2a:67:08:22:bb:da:2f:b5:
         2b:9d:77:a9:46:40:95:ed:4f:a5:f4:90:94:26:e4:b8:5c:44:
         29:4a:d6:31:e7:fa:ca:8b:f4:3f:f4:e6:1e:86:05:27:f3:8c:
         4b:b5:1d:0c:4d:b7:c0:7f:5e:6c:6d:f8:f9:25:1a:0c:00:e1:
         ab:05:95:e8:d2:e8:f5:dd:06:bb:14:c3:ba:f1:8f:e1:2c:78:
         06:c8:28:79:e6:80:2a:69:13:6d:47:24:50:85:cb:f5:62:e4:
         aa:fc:2a:78:2c:11:d4:d3:f3:7b:b5:f6:8c:2b:62:e7:2a:52:
         c2:67:09:75:43:19:b8:59:b4:31:d3:e2:77:36:1a:1e:c9:42:
         c3:65:0e:4c:68:1a:6b:ed:e5:f7:91:5d:cf:17:7a:43:fc:0c:
         e5:db:6e:69:4c:48:5e:6d:c5:09:e6:ad:9f:f5:38:42:90:bf:
         f7:f4:da:9e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 11:07:46 2025 by rpki-client