Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1fb2c56a-a790-4af4-bfc9-b93f1389d655.roa
File:                     1fb2c56a-a790-4af4-bfc9-b93f1389d655.roa (raw, json)
Hash identifier:          mG6vGGDCmjFL2qDEUL2kalOC078UP/8itIN48Bt2WCs=
Subject key identifier:   50:68:5F:CF:1B:9F:96:50:E0:B5:09:46:4F:A3:DC:B7:B5:05:D1:95
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       764B71EC29CACBAE4EB1D844557B40862899DF83
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1fb2c56a-a790-4af4-bfc9-b93f1389d655.roa
Signing time:             Thu 30 Oct 2025 23:40:26 +0000
ROA not before:           Thu 30 Oct 2025 23:40:26 +0000
ROA not after:            Thu 04 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2e9a::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:4b:71:ec:29:ca:cb:ae:4e:b1:d8:44:55:7b:40:86:28:99:df:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 30 23:40:26 2025 GMT
            Not After : Dec  4 23:59:59 2025 GMT
        Subject: serialNumber=d2aa884f37e23bc6a6a362174d3eccbc82464cb6ffdd9df8d821f463f52badb5, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:c4:fd:4f:fd:49:ed:5e:a2:03:a2:b9:bd:50:
                    65:7d:c4:3d:d3:67:89:59:ae:46:c2:7d:c5:45:70:
                    9a:79:25:f2:f7:11:be:88:7a:28:1e:87:a3:ee:0d:
                    2d:fb:ef:07:93:da:17:a7:ce:8e:d8:1e:cf:a9:50:
                    c0:b3:df:31:eb:57:f7:70:7c:13:ec:ac:db:3b:a8:
                    40:18:62:79:ed:b2:ee:c8:f4:1e:20:5e:fa:3c:20:
                    b6:0f:5f:6a:a2:38:4f:8d:8d:82:0e:8b:e8:e2:c4:
                    dc:66:6d:88:16:85:98:fe:40:57:dc:82:ab:4b:5c:
                    38:82:d1:b5:35:3d:30:f3:3a:4d:48:a4:74:9a:24:
                    c7:69:a9:db:55:2a:90:42:19:09:d5:c2:93:16:63:
                    14:a6:7d:67:07:1f:e0:c2:25:9e:01:f8:47:ed:74:
                    7b:4e:cf:c4:98:ff:aa:2e:20:63:c9:16:34:8f:63:
                    3f:2a:9d:93:ff:87:7c:77:43:0b:77:3c:5a:30:64:
                    55:78:c4:63:e2:c7:35:f0:a1:55:50:7e:ac:dc:0e:
                    7a:14:8f:d2:de:f9:f6:a6:87:98:ed:31:d8:70:b7:
                    52:d8:91:4a:a6:ac:2d:ad:00:79:92:9e:e7:3f:39:
                    15:d8:23:ec:8d:ae:1d:10:aa:67:13:47:96:52:0b:
                    41:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:68:5F:CF:1B:9F:96:50:E0:B5:09:46:4F:A3:DC:B7:B5:05:D1:95
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1fb2c56a-a790-4af4-bfc9-b93f1389d655.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2e9a::/47

    Signature Algorithm: sha256WithRSAEncryption
         b9:4e:5a:e0:79:31:52:a0:b4:76:e2:0d:67:b3:df:77:a2:df:
         02:d9:66:43:ce:32:5c:06:f6:3d:cd:86:81:ce:61:6e:61:a4:
         b8:7d:05:31:bf:66:9f:42:21:4c:b7:eb:57:12:16:d5:1b:bb:
         c5:5f:e3:7d:5c:99:b3:eb:cf:0d:d5:25:a4:33:1e:ca:9b:11:
         8b:78:30:5f:92:69:00:ff:c4:20:32:73:5c:96:6a:f4:83:e2:
         ec:3a:d5:42:43:e8:d0:98:7f:4a:e9:80:80:13:2b:f1:8f:cb:
         70:6a:f5:c9:02:4a:d7:4a:23:a3:5e:1a:2d:c6:0c:db:63:90:
         65:fb:9f:a1:e8:f5:69:22:c9:7a:23:34:3d:ad:e0:2a:c7:4d:
         a2:c4:9c:85:fc:c4:be:26:dc:5a:3a:ec:56:1f:48:c0:47:fd:
         0e:c3:a2:68:82:49:78:e5:63:37:22:7e:22:37:97:fd:d7:01:
         20:11:40:a4:eb:f5:c6:53:07:0d:44:c8:7f:21:c3:79:5d:2b:
         4e:55:86:b9:3a:10:dd:a4:27:46:e7:c0:01:11:7a:ca:57:62:
         21:ce:cb:05:f4:3f:78:d0:0f:0b:de:3c:fe:ba:2c:c9:d2:19:
         59:27:70:99:0f:e4:4e:64:0f:f4:08:d8:41:29:c4:c7:e9:a9:
         e7:16:1e:0c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:46:43 2025 by rpki-client