Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2f3bc258-26bb-4147-9558-dc29c8a57e1e.roa
File:                     2f3bc258-26bb-4147-9558-dc29c8a57e1e.roa (raw, json)
Hash identifier:          PEf/7SZwk0UTZwUhyFbC/Wu7/jBmjKIyVjN10U+aKAs=
Subject key identifier:   AB:93:25:AC:F4:4F:AD:8C:68:16:6A:47:D1:ED:3D:64:E1:2C:C2:2C
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       345BEFFC545CD36E81AFDBBBE2E5D226CA04A71D
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2f3bc258-26bb-4147-9558-dc29c8a57e1e.roa
Signing time:             Fri 31 Oct 2025 00:24:54 +0000
ROA not before:           Fri 31 Oct 2025 00:24:54 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:350a::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:5b:ef:fc:54:5c:d3:6e:81:af:db:bb:e2:e5:d2:26:ca:04:a7:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 00:24:54 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=18c996500de4ad05d41687e807f20624f1579ece13bec51a02aef3749cd940d1, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:ee:9e:14:88:e1:56:94:90:da:b3:01:38:31:
                    30:93:34:0a:c3:29:54:0c:63:f0:43:88:97:9c:71:
                    15:53:71:93:36:6b:ef:10:83:45:00:20:a9:82:f8:
                    12:84:9e:3d:1d:f8:07:f0:d5:8f:80:a4:18:4d:93:
                    d2:97:2b:c7:85:5c:d9:3d:0c:f3:1c:e4:af:43:95:
                    21:21:90:0c:61:25:71:79:42:2f:6c:2f:4f:8c:34:
                    1f:60:30:95:58:9e:21:df:81:1f:82:81:47:a2:27:
                    84:fb:fd:11:1c:44:a3:30:4a:92:38:50:66:c5:52:
                    80:f6:07:45:54:3f:ba:dc:5f:ac:e3:de:42:0c:67:
                    26:c1:f2:49:5e:45:63:0f:9a:d8:10:ac:af:d0:3e:
                    60:55:12:cb:56:db:2f:e5:b9:c1:ba:77:bf:2e:cf:
                    01:a3:ab:9a:fc:01:69:77:4c:8b:f5:3c:fa:d0:57:
                    75:43:99:a9:d8:08:7b:1a:92:34:a7:48:76:36:38:
                    d4:ed:85:e3:c6:ba:99:7c:b7:d7:fa:03:3e:d8:b7:
                    8a:0f:14:8b:98:27:14:12:5a:83:16:43:05:ef:1f:
                    ff:ac:9e:42:f5:68:db:25:11:2d:5b:39:5f:87:c3:
                    be:00:e1:6d:08:b1:45:4f:1f:35:d5:2f:62:59:19:
                    10:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:93:25:AC:F4:4F:AD:8C:68:16:6A:47:D1:ED:3D:64:E1:2C:C2:2C
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2f3bc258-26bb-4147-9558-dc29c8a57e1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:350a::/47

    Signature Algorithm: sha256WithRSAEncryption
         1b:c8:a4:12:e5:a1:89:ea:d5:f3:20:32:0f:b7:6c:b2:45:32:
         ac:8d:bd:85:60:70:4d:bc:86:fe:89:1c:3b:1b:3d:84:58:f0:
         31:e2:30:70:c3:70:b1:5f:38:5b:09:e0:51:26:34:22:97:31:
         16:51:7a:22:8d:95:66:b9:e6:f1:14:97:32:0c:c6:84:23:d1:
         68:f8:b0:9d:5f:a8:50:61:98:19:87:83:4f:87:48:72:a1:7e:
         e3:0d:e5:1e:99:b0:b3:3f:12:b1:da:e4:4f:43:48:4e:0d:80:
         02:2e:c4:2c:42:95:0b:c6:6e:68:2f:7a:d3:f7:3d:1d:f7:90:
         b6:c6:ef:13:78:40:9a:b3:4d:46:72:b5:ca:c0:61:bb:ce:4d:
         91:33:d3:e6:15:11:6e:98:0a:24:cf:45:12:54:2a:0a:78:56:
         81:9f:96:a3:20:8a:ad:ed:e3:04:df:3e:79:11:0d:1a:1e:27:
         0f:be:2b:62:95:32:bd:42:ff:09:cd:3c:e4:62:e3:c6:3b:6d:
         d4:85:21:ff:bb:1d:23:00:94:77:b3:8f:7e:f2:ee:24:54:8d:
         1e:9f:23:08:97:14:dc:6e:80:0a:0c:e5:c9:a6:20:7d:af:fa:
         62:b2:a2:9e:a1:82:50:82:91:67:dd:21:9a:f2:c7:2f:b7:7c:
         e2:8c:37:a9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 12:30:34 2025 by rpki-client