Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/250607e2-cdd4-4354-aa52-f690d71ca4da.roa
File:                     250607e2-cdd4-4354-aa52-f690d71ca4da.roa (raw, json)
Hash identifier:          cXwRDgDtthDKj9qDFdKIoVbNs1VSeiGX2B9VznIc4zA=
Subject key identifier:   18:E0:A5:F0:DE:1B:24:AC:2F:29:18:0D:D5:76:9D:BF:B4:51:08:35
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       1AA7C5E91671F1279D78DD71692A5B743C9A5595
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/250607e2-cdd4-4354-aa52-f690d71ca4da.roa
Signing time:             Fri 31 Oct 2025 01:13:19 +0000
ROA not before:           Fri 31 Oct 2025 01:13:19 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3a92::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:a7:c5:e9:16:71:f1:27:9d:78:dd:71:69:2a:5b:74:3c:9a:55:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 01:13:19 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=179cc590482d5a11b9bd99c78c2b2d28e41eb68793883111ce10932c9ec91acd, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c4:6e:db:7f:f0:27:6f:31:60:b6:d3:ad:08:
                    07:b0:fe:d2:9a:e4:19:11:50:d9:a0:56:19:4c:48:
                    e1:d2:37:96:18:32:c2:d3:b1:ec:f9:4b:15:b5:74:
                    11:5b:89:c5:c2:64:aa:ec:7b:69:35:d3:02:af:2d:
                    a9:6b:99:b0:e8:1d:f2:25:1e:9f:82:8a:73:05:23:
                    5b:22:ee:2b:43:ff:31:4e:03:ea:3b:a7:fb:6d:8d:
                    c2:9d:83:50:fa:c3:f7:d0:b3:84:4e:2a:23:21:2e:
                    3b:a6:50:94:48:8c:d1:77:60:b3:aa:e7:58:5c:d0:
                    99:a0:16:78:37:1c:2b:d1:42:75:8d:f3:b9:8c:89:
                    5a:45:9c:b2:b7:21:1e:91:0b:4a:68:e9:f3:9f:80:
                    ff:6a:70:c0:ee:2a:2e:76:a7:73:12:62:70:62:ac:
                    41:8a:b6:ac:80:29:fb:e5:2f:f4:bb:d2:50:7b:74:
                    02:b4:df:96:8b:98:e1:3e:ab:f5:37:be:e1:ea:5e:
                    b7:23:93:ee:5f:b0:f1:d1:4c:68:2a:25:d7:40:35:
                    a5:e9:7c:9b:1a:cc:4c:64:45:e3:6d:16:5d:3f:d7:
                    87:86:90:10:98:f0:99:af:b9:47:71:65:42:38:04:
                    f4:54:d1:df:bf:29:11:75:47:70:5a:6b:ec:cf:bf:
                    7a:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:E0:A5:F0:DE:1B:24:AC:2F:29:18:0D:D5:76:9D:BF:B4:51:08:35
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/250607e2-cdd4-4354-aa52-f690d71ca4da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3a92::/47

    Signature Algorithm: sha256WithRSAEncryption
         ab:2e:15:85:27:cc:53:4a:5c:31:77:6a:1c:ed:28:91:2a:2b:
         a8:92:f3:1d:eb:7c:5a:5a:82:88:cc:ce:a3:3d:89:d6:fe:70:
         fa:4d:d9:2a:1d:3b:95:ac:1a:52:89:ce:0d:6d:19:76:8e:b9:
         b7:d0:05:bf:c8:92:b1:41:32:66:f2:ad:a3:98:1b:06:d1:6f:
         29:b1:03:88:4c:63:5f:15:66:22:89:5a:88:ed:3b:15:95:fe:
         9a:19:2c:4c:f8:40:81:e9:d2:fb:11:f1:7a:11:6b:cd:b4:78:
         02:70:c0:25:de:05:3a:d8:78:5a:63:28:d0:d6:bd:81:53:0e:
         3b:5a:e4:45:93:a4:79:08:dc:3f:a9:b6:0e:1d:08:40:05:c9:
         32:97:44:ec:a2:50:0d:ac:0a:53:92:11:8b:84:a4:21:5d:3a:
         ec:06:bf:65:35:dd:a6:bf:31:2c:ac:ef:c6:07:44:ba:e7:7e:
         ac:07:61:d1:82:2e:a1:1f:a6:74:b8:50:ad:c9:0c:ad:91:e4:
         b0:c9:74:78:4f:0b:69:91:e8:f3:63:0a:2e:69:66:37:8f:c3:
         0e:7f:84:a3:f0:33:83:52:a8:08:bb:49:ea:aa:36:cb:7d:b4:
         5e:5f:09:1b:5a:9d:14:f2:f9:46:45:eb:5c:be:1b:7b:17:2a:
         23:93:89:e4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:37:02 2025 by rpki-client