Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2da1938a-3182-4b1e-be70-0ab574af7cec.roa
File:                     2da1938a-3182-4b1e-be70-0ab574af7cec.roa (raw, json)
Hash identifier:          zRdIPNyjYN7XgnXNVYOBVQvBpB3QOT1wVeTF5NXCBaE=
Subject key identifier:   51:74:77:CB:17:62:38:94:1B:E1:5F:EE:B5:7E:F9:5E:92:71:7C:28
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       7B7D87F70FD9022507F38D2B78410FC4045A61AA
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2da1938a-3182-4b1e-be70-0ab574af7cec.roa
Signing time:             Thu 30 Oct 2025 22:53:52 +0000
ROA not before:           Thu 30 Oct 2025 22:53:52 +0000
ROA not after:            Thu 04 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:29b4::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:7d:87:f7:0f:d9:02:25:07:f3:8d:2b:78:41:0f:c4:04:5a:61:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 30 22:53:52 2025 GMT
            Not After : Dec  4 23:59:59 2025 GMT
        Subject: serialNumber=347197aab1d4885a8d53a17d43073e77ebdda2cd456f8443eb39ecb8d21e9de3, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:29:ec:b6:c6:d7:79:8c:cf:e1:62:f8:ba:d9:
                    80:e7:53:bb:e0:db:8d:36:6b:dd:47:f9:54:b8:a4:
                    c8:d1:3d:92:24:c7:04:b9:ea:4a:f9:ea:9b:a7:ac:
                    04:25:67:df:b3:3a:e1:9f:ca:4c:03:f9:47:83:af:
                    b4:36:48:a5:4f:7b:f9:1c:bd:23:e8:18:51:cd:29:
                    c2:3e:3f:48:59:08:f3:f3:c6:86:6d:e8:40:16:80:
                    03:3d:cc:d8:73:49:97:99:07:aa:ff:72:62:cf:7e:
                    e4:27:3d:7f:1a:9d:ff:b9:2b:20:da:a2:2e:af:20:
                    d5:11:db:23:5a:06:1d:d7:99:58:82:76:6c:f1:cb:
                    24:02:73:09:68:41:3f:18:e4:d5:f4:02:9b:b4:c4:
                    ae:de:41:b5:a5:6b:7e:0b:cd:3d:11:77:2a:a1:cb:
                    5a:cb:3b:25:24:a3:2c:ef:58:fd:c1:2e:27:eb:35:
                    f0:06:a5:bf:21:47:0f:42:3b:1b:95:b1:00:8f:9e:
                    03:c0:79:e8:87:9f:af:4b:14:20:07:1b:5d:20:fb:
                    90:11:b7:64:77:8d:63:28:90:13:38:b5:47:9f:1e:
                    7b:23:ee:17:42:01:3a:08:09:5c:bd:ea:2f:a2:36:
                    02:7e:3b:bf:a1:08:dd:2b:a4:a8:ac:44:9e:0a:b6:
                    c7:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:74:77:CB:17:62:38:94:1B:E1:5F:EE:B5:7E:F9:5E:92:71:7C:28
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2da1938a-3182-4b1e-be70-0ab574af7cec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:29b4::/47

    Signature Algorithm: sha256WithRSAEncryption
         4b:0d:a8:c8:28:60:c3:0a:33:db:bb:3c:1f:5a:85:e0:e3:0b:
         93:0d:e6:4e:c3:72:05:60:d4:c9:bc:c5:72:83:c3:67:8d:65:
         60:d3:b4:8e:4f:c4:65:8e:19:af:a6:e6:2b:5d:19:32:20:16:
         ad:d7:fc:29:bf:0f:97:24:39:a3:cf:e5:e3:68:32:d9:15:ad:
         97:a1:ee:18:17:49:04:11:ce:b0:ca:93:89:bc:ab:ae:e6:33:
         44:ea:a6:b6:06:05:4d:f0:63:5c:b0:f5:f4:6a:db:74:ed:31:
         a3:89:76:ce:42:f7:78:7c:e3:20:4b:fc:9f:8f:19:2d:de:d9:
         97:f1:74:48:64:1c:68:04:53:de:2a:25:eb:2a:5d:62:88:e5:
         04:5e:cf:5f:ea:63:37:58:56:ce:c2:8f:f6:b0:31:86:5f:fe:
         d3:75:93:6f:2e:c2:0b:04:0e:71:4e:9f:0e:fe:8b:50:7c:c9:
         a8:27:8f:56:2c:b0:63:6c:44:10:fd:4b:6e:0a:bc:6e:1d:02:
         63:90:94:c6:60:4d:b0:44:57:09:4d:73:b1:70:d5:34:5b:f4:
         f6:b1:4b:3e:47:65:6b:60:8f:3c:49:02:16:54:61:ab:8a:03:
         fe:ba:8d:70:20:ee:07:fb:f4:40:0c:17:76:a1:f1:b2:85:92:
         30:d3:02:6c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:38:24 2025 by rpki-client