Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/23e5e1f3-0b62-40ee-ba32-6416e2c3df3a.roa
File:                     23e5e1f3-0b62-40ee-ba32-6416e2c3df3a.roa (raw, json)
Hash identifier:          7ts+5iD+CjjGc81LUIvTyAenWZAtC7PbXP4FcMMTzgc=
Subject key identifier:   2E:4C:65:00:61:C5:50:95:EB:8D:3D:FA:9B:CA:6F:71:78:A7:66:46
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       31C5446F8037B8EB07F5685A4F822281444163DC
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/23e5e1f3-0b62-40ee-ba32-6416e2c3df3a.roa
Signing time:             Thu 30 Oct 2025 23:27:05 +0000
ROA not before:           Thu 30 Oct 2025 23:27:05 +0000
ROA not after:            Thu 04 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2d4e::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:c5:44:6f:80:37:b8:eb:07:f5:68:5a:4f:82:22:81:44:41:63:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 30 23:27:05 2025 GMT
            Not After : Dec  4 23:59:59 2025 GMT
        Subject: serialNumber=1a5dae67265b67f1c073981075136046b1ca054a8619f22d991584a4249e1578, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:fc:3f:84:5d:f3:7c:26:92:a1:dc:8e:e7:70:
                    5d:74:fe:97:92:1d:9f:9b:42:3d:0a:4d:5e:bd:b5:
                    e2:e8:26:91:07:17:0c:2e:c5:95:54:ea:a3:67:b4:
                    9e:1c:56:aa:f4:2c:48:a3:be:0e:5e:a7:38:16:c3:
                    20:cf:58:ac:bf:ed:81:d3:b2:ba:43:d4:b1:38:0e:
                    72:1b:bb:fb:dc:23:ec:c9:c4:49:a8:15:2f:97:99:
                    0f:1a:a8:65:0d:da:15:99:66:a8:a5:56:ab:98:05:
                    88:cd:9e:3c:f2:91:67:e7:2d:77:af:2f:d4:47:4e:
                    13:98:26:e9:19:9b:20:d2:f0:78:1f:7f:ee:4a:8c:
                    08:36:cf:ff:76:97:7f:8c:07:96:f2:84:fe:07:b7:
                    70:4a:e1:03:53:a2:c3:3e:5b:cf:34:0f:9d:e6:16:
                    b3:08:3d:e9:73:33:0a:27:8d:3b:84:58:23:66:3a:
                    b4:52:fa:f3:e2:0e:62:d7:64:a7:d1:77:f1:b6:37:
                    70:dd:8c:30:27:3f:ff:40:b6:56:75:04:93:ef:00:
                    79:e6:57:c6:3b:48:59:65:02:0f:59:ef:c7:d3:43:
                    cc:11:01:e7:ba:93:dd:8a:07:7f:ea:e8:58:61:72:
                    c5:25:03:31:32:f0:21:2a:e8:56:6f:13:40:62:47:
                    f7:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:4C:65:00:61:C5:50:95:EB:8D:3D:FA:9B:CA:6F:71:78:A7:66:46
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/23e5e1f3-0b62-40ee-ba32-6416e2c3df3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2d4e::/47

    Signature Algorithm: sha256WithRSAEncryption
         29:77:f6:40:1b:a3:36:0d:3e:b9:c2:61:71:92:2a:00:36:0c:
         1d:75:85:77:4a:c0:2a:58:4a:0f:55:57:c3:35:9c:18:8e:c3:
         b6:c3:ea:98:94:91:b3:c9:fd:76:b5:26:1e:7d:ea:ac:3e:5b:
         e6:9f:07:4f:1a:6e:92:45:8a:f9:ff:14:6f:59:87:b8:a3:0f:
         ed:58:17:0b:3e:b0:48:b9:5d:64:db:5b:da:41:bf:ad:87:22:
         6b:3f:05:85:52:41:64:5f:97:4c:86:00:a6:79:1c:82:12:5b:
         5d:3b:ef:64:92:4d:c5:bf:4f:34:90:8e:cd:e7:b3:32:13:91:
         a1:04:c3:ba:0a:22:94:64:38:a7:11:0a:6c:41:9d:3c:d7:5a:
         19:05:c4:02:e1:35:6e:88:8f:ae:11:ac:07:c1:b9:24:27:1d:
         0c:22:16:89:3e:02:ad:a3:ca:2a:49:00:de:91:28:b7:38:58:
         21:af:4a:87:a8:23:66:a9:3d:0a:3b:96:65:fe:7a:67:b9:fb:
         6a:dc:3f:e2:f1:9f:b7:8e:a9:52:c1:06:c9:46:23:26:25:9d:
         a4:b0:e4:2e:8f:d1:e5:d9:8b:6d:b8:7e:bd:e0:a5:7d:62:6f:
         47:8b:17:e0:58:a3:a0:ae:e1:50:43:0b:a2:01:aa:f2:a0:55:
         83:fa:4e:23
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:53:38 2025 by rpki-client