Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1dccf380-71d5-42c4-bd58-e8bbebb27715.roa
File:                     1dccf380-71d5-42c4-bd58-e8bbebb27715.roa (raw, json)
Hash identifier:          MmTiYQRyj7B+NF/nCbR6d6k/hAxwiaAGPGIG94RvgwQ=
Subject key identifier:   EF:19:64:86:26:53:B7:1C:5E:C1:9B:29:2C:DA:60:D8:69:8F:50:21
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       1D4C9DA4D767BD3711680CB03360B3A71ECDA53A
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1dccf380-71d5-42c4-bd58-e8bbebb27715.roa
Signing time:             Fri 31 Oct 2025 07:37:05 +0000
ROA not before:           Fri 31 Oct 2025 07:37:05 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1c80::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:4c:9d:a4:d7:67:bd:37:11:68:0c:b0:33:60:b3:a7:1e:cd:a5:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 07:37:05 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=928cb8d60036d5e5beabaa9ba275a0a89f608c2887e2bf64047f64bc5104c8f0, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:52:58:06:5d:26:0f:3a:fe:34:d9:08:64:2e:
                    b4:23:a2:48:1c:ae:c0:59:2a:00:e0:b8:e5:da:e6:
                    6e:60:e4:6b:2c:a5:40:8c:68:56:c9:8c:80:ed:fc:
                    19:a3:1f:f1:6c:51:74:9d:05:b9:cb:17:9b:45:a0:
                    2b:6b:c6:b9:92:c4:c3:52:78:a5:74:c4:98:c5:75:
                    51:a8:99:5e:de:a8:2d:2c:96:88:42:a1:c7:bd:81:
                    f9:aa:a5:0d:99:07:9d:bb:58:58:5b:b2:65:76:6e:
                    f2:bc:06:b9:2f:47:b5:be:bd:0c:59:38:53:9a:3f:
                    f2:64:77:7b:fa:2e:1f:fb:b8:59:36:04:1e:94:8a:
                    c8:36:8c:e9:a0:0f:f2:da:11:e1:24:6e:77:cc:99:
                    4e:fe:7e:f3:ce:b3:d2:18:77:b5:76:6d:90:f9:16:
                    43:b8:8d:45:7d:e3:37:ed:c2:c0:c3:52:72:3e:64:
                    0a:06:3f:14:0b:1d:fd:c4:00:8b:da:9b:87:7a:1a:
                    b1:2e:3f:bd:e2:92:be:67:e0:76:07:42:a1:45:9d:
                    5c:88:3f:f1:b2:78:dd:89:34:07:d0:d9:9e:5a:cc:
                    2b:59:d5:7a:45:3c:fe:8d:1b:92:81:f8:c1:2f:95:
                    53:60:5a:32:8e:39:27:bc:47:46:5c:e5:44:b0:53:
                    a4:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:19:64:86:26:53:B7:1C:5E:C1:9B:29:2C:DA:60:D8:69:8F:50:21
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1dccf380-71d5-42c4-bd58-e8bbebb27715.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1c80::/42

    Signature Algorithm: sha256WithRSAEncryption
         5e:5c:32:f3:68:91:3f:b7:2d:df:91:dc:5a:44:d8:74:3b:ad:
         3f:7a:da:e4:d8:be:c2:42:4f:c8:c6:9f:74:d0:45:3f:57:6d:
         bf:73:62:07:45:86:31:7f:2c:13:53:c6:48:b1:e0:d1:52:fb:
         e3:c3:ca:e4:fd:20:e2:9c:86:06:cf:bd:e2:52:d6:b2:ab:67:
         9c:a5:97:a9:79:a1:aa:10:ce:89:69:68:69:ec:0a:a5:71:00:
         95:74:ae:2c:7e:30:a1:5b:5c:47:75:d4:b5:00:68:de:48:d9:
         bf:67:50:f3:7e:eb:a6:c2:eb:b4:b2:0f:5f:3f:02:19:6f:5e:
         ac:a4:ea:04:0a:dd:65:e2:b0:4d:24:e5:92:51:0a:b0:fe:22:
         b1:e5:da:88:77:08:b5:0b:5e:b6:43:df:df:bb:68:a6:c0:3d:
         96:8b:0a:71:65:1f:84:78:96:b2:47:2d:f5:d6:ae:28:cb:f8:
         fb:73:d3:24:1e:6e:f9:5c:23:f4:98:11:08:51:67:f5:26:4f:
         67:87:76:8f:be:5a:80:9b:a6:ed:6c:d1:21:6c:d9:e3:22:90:
         3a:28:90:93:af:90:7d:c8:c7:6b:be:19:d8:21:6c:c7:04:6c:
         fe:27:2f:a8:e3:68:e3:f1:fe:20:7b:dc:44:10:cf:4d:f9:2a:
         e2:b4:02:89
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:55:07 2025 by rpki-client