Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2f00775a-8e77-4fa5-88f2-7f3c8b3af055.roa
File:                     2f00775a-8e77-4fa5-88f2-7f3c8b3af055.roa (raw, json)
Hash identifier:          ZDvVUIVyESKk/VU/Ibd2smhGKp1HwMRajCEQlXcuimQ=
Subject key identifier:   2C:86:D4:4B:4C:7C:70:49:76:39:2C:9B:C5:3E:3E:55:1B:7D:8A:49
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       300AFC8559B907BE226364243B36E9A4BE98AECA
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2f00775a-8e77-4fa5-88f2-7f3c8b3af055.roa
Signing time:             Thu 30 Oct 2025 20:21:55 +0000
ROA not before:           Thu 30 Oct 2025 20:21:55 +0000
ROA not after:            Thu 04 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2924::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:0a:fc:85:59:b9:07:be:22:63:64:24:3b:36:e9:a4:be:98:ae:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 30 20:21:55 2025 GMT
            Not After : Dec  4 23:59:59 2025 GMT
        Subject: serialNumber=862be49a999c2ecb6a5ba3fcfc73e1e8a9285a554f57c4459abf4816296ba208, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:7d:a4:08:06:cf:02:da:1e:33:18:c0:1c:17:
                    46:28:3c:b2:d7:42:a8:c3:15:0e:fa:39:01:b1:e1:
                    4e:5c:b6:b7:b6:57:f0:8e:7d:a2:01:72:36:1d:66:
                    e4:88:28:8f:f0:40:40:11:46:c6:78:c6:08:7a:e2:
                    cc:1f:74:d5:fb:c6:21:6b:0c:08:82:61:7c:b3:1c:
                    75:54:34:b4:01:ba:05:39:4a:8c:b9:9f:f4:09:8b:
                    2f:aa:01:ab:97:ec:ea:5b:0b:fc:c6:c3:b4:5d:ac:
                    20:60:de:82:b0:7a:73:46:8b:6e:72:05:2e:21:ee:
                    f8:e8:92:29:07:82:38:fa:60:9b:aa:19:77:07:5c:
                    b9:71:4d:48:e0:4f:04:c4:e2:53:b0:78:09:68:b4:
                    56:de:40:69:47:a9:e2:f1:2d:94:b3:a0:ba:38:d1:
                    64:f2:7c:18:47:d4:78:4d:a9:6f:ed:08:9c:4a:35:
                    09:13:5d:be:14:de:67:90:39:0e:b3:58:92:34:c7:
                    3c:7b:6c:8c:b7:19:64:43:46:68:fb:d4:9f:7e:54:
                    5b:75:04:8c:ca:17:b6:d0:40:a2:1e:ae:69:b7:9c:
                    b2:19:85:b7:f4:65:02:1d:43:c7:19:55:44:93:59:
                    78:b0:c6:fa:8b:af:05:cc:90:84:85:15:3a:8c:c7:
                    a3:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:86:D4:4B:4C:7C:70:49:76:39:2C:9B:C5:3E:3E:55:1B:7D:8A:49
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2f00775a-8e77-4fa5-88f2-7f3c8b3af055.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2924::/46

    Signature Algorithm: sha256WithRSAEncryption
         3e:0d:4c:9d:10:0b:5e:05:78:f2:e3:bd:fc:44:7d:ca:5d:0f:
         28:fb:91:6f:57:cf:c8:13:25:06:fc:ae:6c:0b:c8:be:b4:6f:
         ed:81:55:31:1b:8d:44:43:f5:d0:32:6c:87:ba:f4:6e:d6:05:
         d3:09:76:af:3d:50:e7:62:7a:e4:d9:f0:09:eb:15:a2:ea:55:
         46:03:2b:f3:60:82:b1:8f:90:fc:ea:1b:85:77:6a:12:a0:05:
         37:19:a9:f0:35:8f:54:6d:4a:fc:79:18:d3:96:91:21:a9:61:
         fd:e3:0c:fd:2e:7f:71:92:07:c0:26:d2:28:b4:5f:55:1a:21:
         c3:78:08:1c:52:1a:35:26:fb:63:35:ec:12:b4:02:fc:31:f7:
         c4:f7:7d:80:f8:e9:73:10:dd:e2:79:0a:32:b9:f3:fa:7d:4a:
         da:e5:f4:ba:cf:17:f5:ef:44:0f:88:8e:49:8f:8b:77:e5:46:
         45:0f:82:38:35:66:c1:09:c6:19:79:2d:8e:66:f8:48:eb:c7:
         33:bc:d1:a4:8d:4d:6a:4d:23:e5:3f:54:5e:04:5e:7b:ba:ed:
         ef:ac:a6:c3:15:c5:20:80:6d:d4:51:20:51:ac:d4:81:36:62:
         35:1b:38:0b:34:ed:12:11:1d:03:7b:af:d8:09:45:33:70:48:
         08:b9:2c:13
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:38:41 2025 by rpki-client