Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/25d85fc2-f189-4d1e-8d7e-5e4ce547fd8f.roa
File:                     25d85fc2-f189-4d1e-8d7e-5e4ce547fd8f.roa (raw, json)
Hash identifier:          NWgxzCigvHaVTD38jrIYDg2IlsE8f5WCo/sjESFZfqc=
Subject key identifier:   76:4B:0F:A9:FD:D9:63:03:5B:86:D2:92:41:B6:8F:E5:64:3A:03:20
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       7DF273C18E55225CAD7AF193E890DD12CEDDB645
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/25d85fc2-f189-4d1e-8d7e-5e4ce547fd8f.roa
Signing time:             Thu 30 Oct 2025 20:57:24 +0000
ROA not before:           Thu 30 Oct 2025 20:57:24 +0000
ROA not after:            Thu 04 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1446::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:f2:73:c1:8e:55:22:5c:ad:7a:f1:93:e8:90:dd:12:ce:dd:b6:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 30 20:57:24 2025 GMT
            Not After : Dec  4 23:59:59 2025 GMT
        Subject: serialNumber=723419610c74fb5b4470f18d8250a9c9593d42ce8e61a838740eaa31acef58ae, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:01:85:5f:47:89:3c:18:11:c8:38:bb:c8:9b:
                    26:84:31:47:89:6a:42:2f:ab:31:54:20:d1:05:10:
                    22:d7:b4:6d:d2:53:4c:87:74:4e:67:38:b6:68:b4:
                    7f:15:bc:90:a5:16:9f:fc:47:78:1b:48:ad:50:7e:
                    91:af:af:8f:be:49:3e:77:eb:84:18:b1:75:cb:55:
                    01:74:ca:9b:bb:d9:fd:d3:71:b6:e5:40:04:b5:d6:
                    98:70:bf:30:a2:c2:08:74:d5:3c:b6:ef:2c:f5:fb:
                    bc:5e:fa:fe:05:b2:d5:28:cd:2a:e9:68:ab:d5:74:
                    a9:f7:44:e2:bb:2e:8e:0d:c3:24:d1:1e:6d:3b:c3:
                    f1:7d:e6:22:cf:9b:14:18:08:7b:49:12:bc:c1:20:
                    60:a8:7b:f9:12:da:2a:0a:72:67:77:96:15:7c:c1:
                    a3:3c:67:8d:97:58:46:8f:8a:b3:c4:01:e8:52:10:
                    22:d2:15:80:7e:bf:94:7d:e7:33:88:8e:38:4a:b7:
                    13:ff:6f:0c:13:58:91:f1:ce:d3:f9:c4:ff:3c:03:
                    80:80:29:99:ad:0c:f1:ce:7f:2f:fc:61:8c:32:1c:
                    14:fa:a5:b7:06:87:57:1f:2c:1f:d0:75:15:be:2c:
                    88:ff:f9:c3:1c:31:8a:f2:32:b0:17:da:b1:4d:ca:
                    af:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:4B:0F:A9:FD:D9:63:03:5B:86:D2:92:41:B6:8F:E5:64:3A:03:20
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/25d85fc2-f189-4d1e-8d7e-5e4ce547fd8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1446::/47

    Signature Algorithm: sha256WithRSAEncryption
         0a:2b:67:5b:07:80:91:e2:d0:51:bc:4d:89:75:72:b2:f3:22:
         10:1f:01:34:ed:50:ca:7e:ce:26:69:58:b4:c3:66:93:7b:e9:
         4d:9d:19:91:66:1e:b7:e7:a2:6d:d8:95:c8:3f:f5:5a:b3:71:
         a7:ca:47:8c:7d:c1:5e:22:17:d8:ac:4c:f4:48:96:22:4a:9c:
         87:72:0e:29:45:75:47:a9:df:f7:aa:ca:48:ba:57:86:5d:c5:
         3c:a2:54:24:20:7f:a5:36:d9:d2:93:17:82:51:38:6c:66:30:
         51:55:d3:9f:ae:c0:f8:ba:9b:de:8c:71:d1:81:f7:18:f6:d5:
         4b:e9:dc:25:1a:d6:55:80:89:d2:d1:55:a8:5b:49:bf:ce:7f:
         80:0a:b7:fc:6b:b6:a6:c9:ac:e3:50:cb:08:01:99:2e:83:77:
         ce:2a:84:4f:a9:b5:b8:08:3b:88:ad:0c:60:aa:1f:02:a3:ae:
         0d:b7:e6:93:d3:76:67:b4:81:3e:8a:a9:18:b6:e6:14:e5:71:
         ad:38:7e:ba:41:97:33:35:de:91:fe:95:eb:9b:e4:2e:10:0a:
         52:36:09:06:5c:0b:20:2e:49:dc:28:77:22:7e:1d:ee:76:b4:
         05:2d:30:4b:de:5b:00:7c:12:67:82:1d:1f:9f:e5:4b:d7:ea:
         10:68:48:bc
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:39:06 2025 by rpki-client