Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1c7012fe-e6d2-4f10-ac01-181e047f810b.roa
File:                     1c7012fe-e6d2-4f10-ac01-181e047f810b.roa (raw, json)
Hash identifier:          YLcVgeR2OYtgeij1unoZxe6Xt6h1vCOFNyON8VsXZwM=
Subject key identifier:   DA:C2:FE:CB:34:97:83:60:8A:86:0F:F8:11:69:EA:29:DD:E1:18:B0
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       1091C7F241DA08BAB8C35C3D1AE6207630DC6F
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1c7012fe-e6d2-4f10-ac01-181e047f810b.roa
Signing time:             Fri 31 Oct 2025 07:10:10 +0000
ROA not before:           Fri 31 Oct 2025 07:10:10 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:14e0::/43 maxlen: 43
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:91:c7:f2:41:da:08:ba:b8:c3:5c:3d:1a:e6:20:76:30:dc:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 07:10:10 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=abdbe75dd33e6b15478298cb3e01ddcf5f7c1b48c086a5f6e6065d1832af09f3, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:49:16:a8:55:c2:49:fc:56:ab:c1:06:f2:76:
                    1c:f0:b9:97:52:e5:be:a3:dd:d2:13:fc:63:bb:09:
                    13:45:6d:40:c7:18:7a:2f:97:df:bc:b6:c6:ba:24:
                    ec:34:cf:6b:b6:52:92:b7:41:a5:70:3a:45:bc:ba:
                    06:e6:0c:d3:55:64:76:72:8d:a3:86:58:4f:d8:8f:
                    95:c7:7b:1e:7a:a3:d9:92:96:60:9d:70:ef:e1:61:
                    32:20:bf:4b:97:1a:47:f8:48:aa:bc:3c:01:77:94:
                    88:45:c5:02:fb:f4:0c:c3:39:c8:e7:83:5d:02:0f:
                    6b:0c:6d:9d:cc:25:60:73:e5:6a:45:9f:37:30:08:
                    d0:51:b3:cb:c8:e4:7c:0d:d0:24:06:f5:de:89:68:
                    69:d0:4d:b5:00:5a:07:d7:7f:85:18:09:46:ff:65:
                    27:4c:28:db:02:c1:8b:7f:15:3b:90:ce:38:34:6b:
                    ae:ff:11:41:10:4f:92:1d:e9:11:d8:1b:ac:14:53:
                    33:06:ec:20:01:65:0e:82:82:68:ce:46:61:b6:f8:
                    86:50:fe:24:46:ee:6e:72:1f:83:f5:4b:26:a8:d3:
                    8e:72:f2:64:50:0e:41:69:5c:2b:aa:92:50:c6:42:
                    1c:02:08:37:30:77:46:86:f4:e8:f0:1d:e0:fa:c5:
                    a1:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:C2:FE:CB:34:97:83:60:8A:86:0F:F8:11:69:EA:29:DD:E1:18:B0
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1c7012fe-e6d2-4f10-ac01-181e047f810b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:14e0::/43

    Signature Algorithm: sha256WithRSAEncryption
         b4:8a:1a:22:a0:a9:fb:15:22:7a:3b:eb:81:79:3c:43:f0:bf:
         7c:43:3f:37:77:75:5f:8e:15:93:96:0d:b8:8c:fa:fd:c8:d6:
         78:18:a5:be:c5:a8:12:eb:39:d1:66:d5:d0:02:23:ac:77:07:
         a4:57:51:29:53:f0:51:9b:3f:e0:32:4d:33:63:c7:95:d2:00:
         18:e3:12:89:c5:03:3a:be:e2:2e:f8:a1:af:51:95:ae:15:1b:
         0a:8f:19:6a:fc:68:f1:8b:c8:7d:65:2e:f6:b8:6b:46:43:c7:
         01:c4:5f:a4:09:d5:87:4b:a3:94:77:b6:90:39:e5:18:34:79:
         ca:34:80:df:59:7b:c1:b6:08:38:22:2d:5b:01:2e:e6:e4:20:
         f3:07:be:7d:e7:3a:2d:5a:d9:fd:55:fb:a8:6b:34:79:0b:91:
         e7:1f:13:7c:f2:c9:e0:0d:05:15:f7:f0:18:d1:f0:a4:bd:bb:
         e6:24:69:24:b3:e7:99:fa:76:72:4c:38:07:1f:32:3e:87:5b:
         49:c7:89:e9:ce:23:53:49:6a:92:be:53:1a:27:64:a9:da:25:
         3b:7f:b1:d8:3c:9e:85:9b:94:13:72:ba:a0:9f:22:73:f4:1e:
         69:cd:d3:9b:82:20:32:13:7a:8e:d3:30:98:6c:a4:b6:51:8d:
         1a:e3:a0:ed
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:34:11 2025 by rpki-client