Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1c01fa4b-6ddc-4111-9124-2bcc784e562d.roa
File:                     1c01fa4b-6ddc-4111-9124-2bcc784e562d.roa (raw, json)
Hash identifier:          wObtSeD4KTn0EGpg2E5DkPip1WfXQ5ZmSaLOj55fJ1o=
Subject key identifier:   0D:8D:11:E3:9C:E0:E4:F3:CF:4F:1B:50:20:72:3F:E0:10:E7:02:E0
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       07D3541CD3EF89FF5204DCBDD2A4745EC3385E00
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1c01fa4b-6ddc-4111-9124-2bcc784e562d.roa
Signing time:             Fri 31 Oct 2025 02:27:12 +0000
ROA not before:           Fri 31 Oct 2025 02:27:12 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1468::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:d3:54:1c:d3:ef:89:ff:52:04:dc:bd:d2:a4:74:5e:c3:38:5e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 02:27:12 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=21d5e948c238d4c114a930100302419e1cebc00ab7543b3ffcd0083a7688b27b, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:49:37:4d:66:e1:0d:50:de:49:eb:d5:a1:cb:
                    3f:fe:49:74:e2:16:f5:68:a8:fe:a8:05:15:57:1f:
                    e5:11:43:99:f7:f7:6f:ae:f9:d8:65:e6:ea:fc:18:
                    84:14:fe:60:3a:44:56:f6:ac:41:09:05:d9:44:93:
                    ee:3d:81:55:94:58:e1:60:94:c3:e1:7c:24:e7:89:
                    ac:3b:2f:b6:de:51:98:73:11:e9:ba:db:c1:b7:1a:
                    cc:8c:ce:ed:a0:6b:36:27:26:f0:ac:e5:cb:4a:85:
                    7b:dd:ec:6d:50:48:d5:a0:8e:97:d4:29:23:2f:a0:
                    44:e7:3f:8a:b3:4e:9a:ed:b2:46:ad:31:54:6c:b9:
                    df:c0:3e:a2:ef:92:8e:9a:8e:a6:12:58:a6:da:90:
                    e9:bb:39:91:42:31:ec:1e:0d:2b:8e:8c:4b:9a:2e:
                    df:2e:de:a9:2c:94:2e:97:e1:84:13:29:36:f2:70:
                    60:be:0a:60:05:17:6c:fb:e8:0f:3f:43:bb:43:e1:
                    21:24:a6:91:f0:3c:68:b3:6f:af:31:93:7b:76:9d:
                    01:54:16:26:1b:e9:e5:59:a2:6d:b6:76:14:84:4b:
                    a7:fb:52:9d:7d:0d:84:c2:ca:15:48:b3:57:82:2a:
                    60:ef:89:dd:32:85:6f:55:f5:75:79:dc:31:98:9f:
                    2b:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:8D:11:E3:9C:E0:E4:F3:CF:4F:1B:50:20:72:3F:E0:10:E7:02:E0
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1c01fa4b-6ddc-4111-9124-2bcc784e562d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1468::/46

    Signature Algorithm: sha256WithRSAEncryption
         32:66:94:17:bb:dc:5e:e6:03:ae:3f:10:2e:8e:cb:6b:6f:da:
         58:aa:a5:bf:b7:ab:7c:8d:95:54:24:6a:b6:75:88:bc:59:38:
         6c:d8:79:d7:f4:4a:aa:0e:f3:e1:a7:c8:74:db:91:88:50:21:
         42:13:7c:b1:03:6c:8d:7e:ed:40:3e:2b:1b:85:cb:04:08:7d:
         3f:54:ba:00:36:e7:ad:33:77:0a:be:1d:2a:ac:e8:42:df:cf:
         b2:18:e0:3d:df:4f:77:18:75:e9:6c:6f:8f:cb:11:91:d8:71:
         9b:e7:a3:de:d0:f6:c8:04:95:b8:f1:f0:0a:3c:e8:ec:d1:4a:
         a9:67:61:18:a3:d9:ea:d7:00:7e:d2:a4:56:55:4a:6e:47:2f:
         dd:5c:0d:6c:35:00:32:a9:61:74:25:a8:1c:2b:54:40:39:92:
         5c:ee:73:99:d8:46:8a:d1:f4:03:84:dc:80:5c:b2:e3:05:f7:
         3b:39:68:d6:69:7f:19:8c:c5:d9:9d:e3:fd:80:6a:ae:aa:b2:
         b7:9c:cc:8b:7a:a8:3e:bf:e4:e8:28:ab:44:f1:c6:24:8b:1c:
         04:21:26:b6:d5:44:7f:9c:92:c6:44:c8:44:3d:3e:9b:e5:87:
         ca:d1:1f:20:ca:93:f8:b1:82:a6:5e:d0:76:62:db:eb:d7:2d:
         db:c1:6c:16
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:27:19 2025 by rpki-client