Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/270197bf-270e-4be0-ab45-fad3225779f4.roa
File:                     270197bf-270e-4be0-ab45-fad3225779f4.roa (raw, json)
Hash identifier:          v0Qfb/SfajurJLxyT8Q2LRqbmREMajXlaPcyk5/zUvo=
Subject key identifier:   0B:74:60:0C:FE:61:D4:80:76:BC:8C:AC:D2:BD:E0:EF:B2:22:1C:14
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       43AE52B39D042605CF431653836B1E8A1A81B0AE
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/270197bf-270e-4be0-ab45-fad3225779f4.roa
Signing time:             Fri 31 Oct 2025 03:42:02 +0000
ROA not before:           Fri 31 Oct 2025 03:42:02 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2d80::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:ae:52:b3:9d:04:26:05:cf:43:16:53:83:6b:1e:8a:1a:81:b0:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 03:42:02 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=8e74b8c41fbdaf3afdc85152468db851197c2206cd8e4beba985edd54da402ae, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:33:bf:46:60:b3:50:1b:d1:08:3c:d5:61:26:
                    bc:aa:5f:85:65:52:ab:a1:ef:71:7b:a3:19:6c:18:
                    bd:58:9e:95:47:3e:b3:7a:a7:a7:cd:85:37:f6:d1:
                    19:b6:eb:cc:e2:52:41:ee:0f:72:79:ad:ae:43:ee:
                    50:6d:28:bf:ea:9b:24:92:49:0e:7e:40:0a:9b:30:
                    72:e4:4a:f5:0c:e4:c2:fe:0d:5e:77:36:5c:aa:0b:
                    16:2b:3e:e5:4c:f8:9c:02:7f:5e:cf:25:df:d0:8c:
                    44:dc:2a:98:ac:9e:90:9e:ec:bc:03:db:01:28:a4:
                    57:5b:8f:28:ed:6f:d8:f5:e3:19:76:f4:83:62:bb:
                    b1:43:8d:20:b8:3e:89:d9:79:7d:67:5b:18:31:a3:
                    2e:5e:7a:4b:b8:82:3a:8f:35:66:c3:e4:9d:ff:28:
                    4e:32:bd:9e:5a:ab:c7:64:cb:ed:21:04:53:19:4f:
                    4e:79:e1:ca:ec:92:29:7c:34:16:e5:85:b4:a4:94:
                    f5:36:83:cc:9d:cd:47:7d:49:dd:50:80:7f:53:b6:
                    3b:36:4c:08:5d:4a:49:da:4b:21:c4:1b:5d:09:dc:
                    39:ce:a8:e1:ef:1b:ea:6e:c1:e5:e9:7f:f6:69:b2:
                    fb:7b:57:61:a1:b8:db:55:23:47:f5:af:32:f5:b9:
                    c0:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:74:60:0C:FE:61:D4:80:76:BC:8C:AC:D2:BD:E0:EF:B2:22:1C:14
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/270197bf-270e-4be0-ab45-fad3225779f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2d80::/46

    Signature Algorithm: sha256WithRSAEncryption
         79:09:cd:c2:ad:84:36:33:8f:a9:2c:37:e4:bc:66:f8:bc:8d:
         9d:c2:39:77:86:c0:7a:1e:cd:91:05:d7:bc:12:b4:73:ea:c9:
         ae:f6:c6:9b:c7:8b:24:b9:00:f3:ee:29:e6:6e:08:8e:4d:c9:
         59:07:8d:03:92:31:08:40:61:3d:c5:10:b0:4b:00:1e:31:55:
         5d:f5:2a:c4:13:40:a8:24:76:f2:a0:3a:5e:0b:92:84:79:27:
         d8:b3:a8:f2:1f:ac:25:1a:fd:89:a7:e4:dc:f6:83:bf:26:a1:
         48:ff:73:cb:bf:c0:cf:9a:35:42:9f:5c:09:f0:27:d1:b8:5b:
         cb:14:ad:b6:ef:cb:89:a5:2d:81:2e:30:b8:28:a7:36:44:3a:
         38:ab:9a:81:1d:38:da:3c:d6:d9:fe:b4:40:be:eb:aa:59:81:
         92:99:1f:98:f5:85:a1:fe:5b:59:ad:28:54:7e:f5:b9:0a:73:
         37:7a:2a:f7:59:76:3f:98:fe:42:28:86:1e:55:e6:84:c3:b8:
         e5:a6:75:eb:97:8e:c6:e9:14:61:6b:e4:e7:cc:fb:ae:62:3e:
         ed:93:52:4f:91:9e:79:d6:06:27:33:53:85:14:db:30:54:80:
         6f:3d:42:a1:1d:99:ed:bc:24:ec:e1:04:a6:72:a0:5c:f5:39:
         1e:5d:50:6f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:40:18 2025 by rpki-client