Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1ee57736-539a-4e9f-8dd4-4ec06b255b5c.roa
File:                     1ee57736-539a-4e9f-8dd4-4ec06b255b5c.roa (raw, json)
Hash identifier:          Lu7LFtOFhdcKeg1pKIpaWLQccOuyOH7QaOBK5kQ6fCw=
Subject key identifier:   11:17:F7:CE:9C:78:6A:A8:75:8C:17:62:D8:BD:42:38:F4:8E:1B:13
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       0EEB2381ED7E2EA554BB9ACD2D29BBB5703729B8
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1ee57736-539a-4e9f-8dd4-4ec06b255b5c.roa
Signing time:             Fri 31 Oct 2025 01:38:25 +0000
ROA not before:           Fri 31 Oct 2025 01:38:25 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3cd2::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:eb:23:81:ed:7e:2e:a5:54:bb:9a:cd:2d:29:bb:b5:70:37:29:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 01:38:25 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=4e21509a817c230a6e64f960c19322774429d4f91867f3f92932cfef5be2a15e, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d4:02:31:40:29:67:a0:5e:8a:63:7b:3b:67:
                    16:9c:02:26:a4:55:ef:9d:9c:d3:ce:5e:37:61:f5:
                    fb:f6:c2:b0:bb:ee:0e:c5:1d:22:67:e4:15:d6:70:
                    1a:c4:61:02:91:ee:d8:01:27:28:1e:e6:05:3c:50:
                    55:4a:14:97:bd:f5:98:c7:ed:0c:20:ca:27:19:26:
                    4f:44:a5:40:bb:62:99:be:33:2a:95:fd:33:6d:5d:
                    f1:a7:bc:eb:e4:00:06:8a:4b:64:59:9e:95:96:2f:
                    67:1e:dd:6a:6d:e1:07:28:a3:06:00:a9:8d:36:d1:
                    73:9e:65:d3:d9:ab:4f:47:97:c1:22:93:16:73:63:
                    00:c9:fe:40:16:90:70:73:7f:3b:8e:e6:52:0c:25:
                    f3:1b:77:3b:ff:d8:21:33:3b:31:a0:9d:40:a0:9d:
                    0c:5a:98:5c:34:85:58:5e:07:96:8f:37:da:e8:44:
                    13:a2:bd:1d:0b:b3:04:7d:31:b9:c6:01:c6:5d:87:
                    ca:4a:10:a3:fa:30:a1:35:64:8f:ed:85:45:f3:f3:
                    f2:94:60:30:ef:7b:63:24:57:7f:7a:ac:db:aa:f3:
                    31:4d:29:19:e9:f9:3c:c2:a6:b5:0e:47:4c:ef:a5:
                    71:15:99:22:36:d8:6b:fc:c1:0e:99:b5:e6:3a:91:
                    ac:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:17:F7:CE:9C:78:6A:A8:75:8C:17:62:D8:BD:42:38:F4:8E:1B:13
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1ee57736-539a-4e9f-8dd4-4ec06b255b5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3cd2::/47

    Signature Algorithm: sha256WithRSAEncryption
         b4:cf:35:88:83:fc:32:6e:8c:4d:64:ab:c6:db:41:d2:94:c4:
         bc:d4:6f:87:62:e7:ca:2d:a1:18:b6:21:50:3f:fb:d9:33:27:
         d8:1a:3d:a3:8e:5a:4a:bb:6e:b7:2d:73:02:4f:58:7a:84:8a:
         97:02:0f:f2:0a:59:d2:de:9f:af:51:2b:f9:fe:6c:9b:98:03:
         39:a8:59:ff:89:08:85:48:61:0d:06:f8:b5:a3:3d:35:5a:a6:
         6a:12:c1:ba:ca:fe:9f:c7:0b:94:e2:85:5a:73:80:2b:e5:a2:
         c0:d0:7f:3b:31:96:59:8b:13:a5:14:dd:8e:de:b7:1b:9f:f2:
         fb:7e:30:16:bd:80:3c:ae:bf:8a:cb:b6:cc:59:52:94:d5:56:
         8d:46:c6:3f:44:4c:b1:4a:a7:db:4f:7d:42:ec:65:86:cd:38:
         3c:6a:87:19:e3:e0:e9:d7:3c:17:cc:9a:87:f6:16:4b:d6:e9:
         20:58:83:e2:90:2a:81:a3:f7:a6:c9:39:b0:22:bb:8c:26:78:
         2b:4d:30:7e:6b:07:ae:1a:0d:86:fe:2b:d9:06:34:9e:39:df:
         77:88:54:8b:56:fd:58:6b:a6:02:a6:a2:52:9a:b4:87:e7:fa:
         8f:23:b1:ff:ea:0e:5b:a9:06:a9:91:a8:13:f4:8d:b2:dc:91:
         40:6f:8c:a2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:27:59 2025 by rpki-client