Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/293d9f55-726f-4e1c-9083-af3a4d9f619a.roa
File:                     293d9f55-726f-4e1c-9083-af3a4d9f619a.roa (raw, json)
Hash identifier:          DaVIwVnP7hv11Vl84E9zLmOBmL534gbMgOO3HaVYz2Y=
Subject key identifier:   A8:0F:BE:C7:B2:D9:78:67:42:F2:AF:DB:CF:00:81:AB:42:53:7F:83
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       3276FE9DA7272AD4C28684BACEDEC7023A56B7B0
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/293d9f55-726f-4e1c-9083-af3a4d9f619a.roa
Signing time:             Fri 31 Oct 2025 01:24:54 +0000
ROA not before:           Fri 31 Oct 2025 01:24:54 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3b80::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:76:fe:9d:a7:27:2a:d4:c2:86:84:ba:ce:de:c7:02:3a:56:b7:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 01:24:54 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=54cfdbe8ac519a739e4252b56f17c82c6c5ed41d1e599ba1ed9dc96e47ee265e, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:71:b4:76:05:d3:c1:2a:ed:6b:10:25:1c:98:
                    40:d6:a4:52:df:8b:76:5c:78:5e:1d:87:87:e6:96:
                    fb:5e:9e:f0:ac:7a:4b:5b:06:53:0d:5f:a3:46:5e:
                    2c:13:45:f0:13:f6:59:bd:b8:0c:a0:bb:7f:98:dd:
                    99:aa:e5:3e:8e:ed:26:4e:10:4e:ae:1d:91:07:f4:
                    9e:be:2b:0b:bb:6d:05:cb:b4:ed:91:80:6e:3c:87:
                    bc:b6:93:08:f1:c5:8e:3f:ce:f5:4d:37:c9:fd:14:
                    3c:fb:ef:f1:d3:2a:68:ef:8e:aa:94:45:2d:1f:28:
                    18:ab:83:8b:ae:ca:33:9e:4f:0a:16:80:5c:e0:42:
                    ea:ac:be:f0:48:80:83:df:3f:a6:b9:55:62:81:8e:
                    d3:12:4d:ff:0e:42:64:05:bd:55:1b:1a:a7:9c:19:
                    c3:1a:ec:af:38:c5:38:44:7f:51:94:bb:fa:a7:12:
                    84:be:b0:3a:d5:02:16:82:1f:fa:96:d5:7b:99:06:
                    cb:ec:bf:64:be:6e:8e:c6:a9:b4:66:aa:24:83:ff:
                    60:ec:e7:63:eb:4e:61:5b:60:78:72:58:54:2b:80:
                    c6:5a:f4:67:4d:c4:54:96:66:6d:d4:ba:c5:b9:7e:
                    2b:00:6d:07:24:87:c8:5d:6f:1b:ed:ca:e1:99:5f:
                    0a:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:0F:BE:C7:B2:D9:78:67:42:F2:AF:DB:CF:00:81:AB:42:53:7F:83
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/293d9f55-726f-4e1c-9083-af3a4d9f619a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3b80::/47

    Signature Algorithm: sha256WithRSAEncryption
         27:13:de:e7:bd:8c:81:a1:c6:1f:be:17:ea:3b:20:c1:fd:a2:
         42:7e:5f:61:e0:4d:cd:a5:ea:2e:74:cd:0e:c1:6e:73:89:a7:
         07:a9:5e:6e:a1:87:b8:ec:4c:1f:d7:83:18:86:10:ed:a0:06:
         58:5e:aa:21:17:ad:8c:5f:59:e3:df:13:0b:45:a2:af:44:cf:
         fc:c2:eb:99:0d:30:81:5d:49:6d:68:f0:36:56:cf:92:0d:5f:
         cd:7f:12:12:e4:67:9c:7d:e4:b2:49:e8:7c:70:9e:d1:a3:da:
         b0:c4:22:61:09:fc:fd:8f:52:01:e1:3f:f2:a4:aa:df:ca:0f:
         50:a6:38:9a:c6:cf:81:94:79:39:78:16:ef:b6:fe:31:39:5c:
         32:13:f3:d7:44:bb:63:5b:4d:a8:d9:7f:5c:bd:fa:ec:23:b0:
         a7:19:49:96:b4:40:b4:37:f2:d8:11:ee:3a:fa:e7:2a:67:d1:
         5b:1a:5f:ee:d7:dc:a1:43:49:c5:a3:a8:9f:ca:e0:4a:1a:ee:
         d9:fe:30:ba:9d:a4:4d:71:03:c0:4e:8c:80:00:9c:18:87:78:
         aa:5a:32:73:19:de:36:b3:8a:ac:cb:f3:1f:99:27:81:9d:3e:
         10:d3:82:da:01:e7:17:9b:61:20:8f:cc:7e:92:c3:1d:a0:e4:
         0b:4d:9b:30
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:38:25 2025 by rpki-client