Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1c95dcd8-5bb7-4e25-8f05-cfb2f426f184.roa
File:                     1c95dcd8-5bb7-4e25-8f05-cfb2f426f184.roa (raw, json)
Hash identifier:          airCCni/pBHlIPgVoRXo87QW50Lrjd6mHJrZRvPau5Q=
Subject key identifier:   C1:75:17:C5:C3:E2:28:EF:2C:68:8E:B4:33:9B:0B:F4:A0:91:66:A7
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       3E73E2001E9AD9BF6D7CDA9564CF43FD8C026009
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1c95dcd8-5bb7-4e25-8f05-cfb2f426f184.roa
Signing time:             Fri 31 Oct 2025 07:52:05 +0000
ROA not before:           Fri 31 Oct 2025 07:52:05 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3c00::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:73:e2:00:1e:9a:d9:bf:6d:7c:da:95:64:cf:43:fd:8c:02:60:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 07:52:05 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=0c75a8ebfc906431579025d96264aa6acc0924190bcbb5d78a068e41f2bb1e40, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:e7:4c:60:cf:36:b2:8c:2a:45:be:46:51:35:
                    1c:ed:e3:10:e2:15:52:a6:df:b7:bd:e3:14:e4:01:
                    61:c4:d2:18:3b:6c:a1:09:0f:a2:82:18:e4:d2:ef:
                    3b:4f:f0:cd:b9:ee:88:fa:cf:dd:ed:fd:e0:2d:e4:
                    33:27:8c:27:ff:0d:eb:89:86:d2:c2:e0:ba:3b:5e:
                    74:7d:87:43:c8:b1:2e:5a:1e:16:04:66:48:03:f7:
                    5b:e9:9c:dd:ae:75:96:93:48:dd:26:5f:f1:03:ba:
                    5e:fe:fc:a2:0a:d7:d1:80:db:f3:ef:8c:69:c1:a1:
                    b5:a0:50:71:8e:25:58:4e:6b:a8:a9:01:8d:7c:99:
                    c5:15:7d:22:ae:7d:5c:f8:1d:4f:46:f3:98:86:13:
                    99:e9:57:87:ac:0f:93:d3:7f:24:0a:71:c8:4b:8b:
                    56:65:1b:d2:b0:81:88:f0:5b:fb:98:8f:cf:6d:db:
                    63:bf:51:77:0d:98:fd:9c:65:4d:c0:dc:0c:1e:e6:
                    5d:88:a2:b3:9d:d4:d7:6f:24:b0:21:02:41:81:e8:
                    b4:61:6f:b9:c2:05:3a:7f:6c:3a:e0:40:e0:ed:79:
                    ef:b4:cc:07:68:a7:79:b4:72:a2:be:8d:17:2a:80:
                    12:26:5f:c3:af:d0:93:fc:18:a4:4a:cf:01:16:09:
                    12:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:75:17:C5:C3:E2:28:EF:2C:68:8E:B4:33:9B:0B:F4:A0:91:66:A7
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1c95dcd8-5bb7-4e25-8f05-cfb2f426f184.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3c00::/41

    Signature Algorithm: sha256WithRSAEncryption
         90:e7:31:84:11:7d:61:7f:2d:de:8c:bf:3d:6e:e2:df:c7:dd:
         09:fe:9d:ec:31:a1:14:89:ae:c2:2c:65:3a:c2:25:be:cb:8c:
         c4:75:59:e4:98:67:e1:fd:45:ca:03:e8:3c:e0:08:2d:15:99:
         00:d9:03:a3:42:43:ce:d6:ec:bc:bc:e2:a7:c5:4b:87:5d:3f:
         da:0d:77:18:08:cd:e8:4d:3c:05:00:16:fc:8c:39:d6:1c:a3:
         b9:fe:14:f3:aa:82:f0:3f:e0:9a:a5:b7:78:1b:4e:27:58:9f:
         6f:1a:a6:62:4a:3a:a0:3b:61:bb:64:5e:9e:cc:31:8f:b0:13:
         1c:38:04:63:e3:25:56:4c:62:81:98:1a:84:e0:10:92:9e:9f:
         45:e1:ae:3d:ad:03:71:15:da:5a:a7:07:39:6c:fd:11:3f:1d:
         2c:af:42:b1:d5:2c:39:15:50:35:d3:7f:cc:10:5f:b6:f6:d7:
         ed:5c:e4:82:4b:df:7a:93:53:04:a4:2a:22:5d:6e:b4:22:b6:
         76:64:c1:9e:82:e2:87:f1:67:ca:db:ec:ac:08:f5:1a:17:d1:
         14:4c:b0:c8:14:44:40:76:4f:d3:8e:76:24:9b:b5:a0:8a:b8:
         ad:88:68:35:69:36:41:da:7f:df:f1:68:1f:d6:a1:6d:18:77:
         85:60:36:2c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:46:03 2025 by rpki-client