Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1b0bb7d7-ac91-43ce-8fdb-fc1f94e8cbc9.roa
File:                     1b0bb7d7-ac91-43ce-8fdb-fc1f94e8cbc9.roa (raw, json)
Hash identifier:          5GV3PkEFyKNimAV7pkrl36iehAbMygdFLnK+w8RqGF4=
Subject key identifier:   4E:55:E8:7B:60:E6:C7:96:D1:84:E1:17:3B:7C:CC:94:B9:5D:B0:E3
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       091BEBC988549983FAF4862F525BD452E585D00C
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1b0bb7d7-ac91-43ce-8fdb-fc1f94e8cbc9.roa
Signing time:             Thu 30 Oct 2025 22:41:58 +0000
ROA not before:           Thu 30 Oct 2025 22:41:58 +0000
ROA not after:            Thu 04 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1f9e::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:1b:eb:c9:88:54:99:83:fa:f4:86:2f:52:5b:d4:52:e5:85:d0:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 30 22:41:58 2025 GMT
            Not After : Dec  4 23:59:59 2025 GMT
        Subject: serialNumber=35a232ae8f85c3d4fc327d69b7adbc5441c9fa7d73afe807d9fdf349f11b1c34, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:2a:13:85:ff:46:d5:43:b7:36:ad:e9:b0:16:
                    03:9f:d6:4b:df:c6:51:c2:8b:05:70:15:0f:63:28:
                    32:92:ac:48:bb:b2:e9:c6:bc:80:e1:db:eb:bb:86:
                    4b:aa:e1:d2:ee:f7:73:ba:aa:e2:7b:e5:10:69:b1:
                    0a:42:ab:f9:30:4d:20:a7:06:d1:1c:84:4b:2e:6e:
                    81:df:ef:d4:09:73:20:1a:54:11:f0:90:08:b3:93:
                    0f:9d:09:d3:bf:78:ac:db:7e:7f:0b:40:0b:16:56:
                    23:0b:bd:5a:22:20:f8:f2:46:d3:df:76:4f:b6:c1:
                    2c:5e:e4:76:78:d5:96:97:92:64:8e:b1:6a:85:9b:
                    c1:e9:fa:ec:f9:b9:25:0d:bd:fa:b7:ac:f7:97:39:
                    98:c4:e3:34:05:c2:e8:1e:49:1b:aa:95:85:3d:dd:
                    d7:ce:a5:82:57:0a:3a:d7:b2:97:0c:63:2e:0e:7a:
                    de:e7:f0:85:18:d5:38:be:16:4e:84:dd:30:c7:bb:
                    6b:70:a4:86:cb:e3:43:fc:1f:f5:3d:8b:b2:f6:26:
                    fd:37:36:fd:02:70:c7:3f:b0:f4:f4:c3:da:e2:0c:
                    41:8b:7a:fc:0b:b8:3a:6a:66:3c:e2:15:8a:75:87:
                    00:0a:da:21:e4:ab:c0:6a:c3:c3:89:e8:f4:fe:8e:
                    20:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:55:E8:7B:60:E6:C7:96:D1:84:E1:17:3B:7C:CC:94:B9:5D:B0:E3
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1b0bb7d7-ac91-43ce-8fdb-fc1f94e8cbc9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1f9e::/47

    Signature Algorithm: sha256WithRSAEncryption
         bc:32:57:eb:3b:a1:00:26:a4:de:cb:94:12:b7:ea:f6:f4:eb:
         a4:53:c2:01:9e:fe:5b:70:9e:cc:f3:7d:b4:ef:dc:2d:96:48:
         ea:68:7a:8e:1a:9b:ec:25:72:1c:f7:ef:a9:17:b8:c5:e0:dc:
         d3:9d:c5:08:d8:e7:58:a9:48:c5:ee:e0:07:e3:16:ba:d9:2d:
         53:97:b3:df:5e:01:33:0b:b1:25:98:34:8c:2d:86:2c:50:47:
         ee:4c:ed:b5:9b:22:c0:3a:4b:5c:51:f5:3e:10:8e:c3:af:75:
         79:33:94:21:85:c6:75:1b:51:60:9d:14:c4:63:d6:93:0f:6a:
         41:a5:44:ee:82:5b:66:dd:51:6f:c8:2b:50:be:2a:af:1b:d8:
         e4:c9:d2:b0:7b:34:b0:ca:a1:4e:af:3b:89:40:57:c0:5a:16:
         46:26:f8:51:75:ff:c8:c6:ed:10:c5:4a:d1:02:9f:5a:13:c5:
         59:cf:fa:ac:da:30:b1:aa:3d:ce:16:4b:ef:4c:0d:b3:b6:cb:
         a1:a7:fd:5f:06:34:06:8a:9b:78:f8:54:1f:53:a7:1b:b7:da:
         be:e8:7c:47:37:dd:1a:d4:00:86:90:76:f2:bf:d7:ee:a9:28:
         d5:fb:41:59:11:dd:7a:59:df:07:b4:f8:42:6f:a3:09:5c:0d:
         2b:cb:ad:9f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 15:20:12 2025 by rpki-client