Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2fe1b21b-1f44-49ae-a7dc-416e7be304f9.roa
File:                     2fe1b21b-1f44-49ae-a7dc-416e7be304f9.roa (raw, json)
Hash identifier:          ogTuAAvEnNjFjjAz6m2FHcA+gWfa/HwZ5R32nfZW+AU=
Subject key identifier:   AE:44:0C:28:26:DA:A3:F8:B5:EF:23:0B:15:21:E0:F9:E8:8D:CD:B0
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       76C29B8DE1B03A06BD5E96AC1051B8E39F2DE770
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2fe1b21b-1f44-49ae-a7dc-416e7be304f9.roa
Signing time:             Fri 31 Oct 2025 01:23:12 +0000
ROA not before:           Fri 31 Oct 2025 01:23:12 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3afc::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Nov 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:c2:9b:8d:e1:b0:3a:06:bd:5e:96:ac:10:51:b8:e3:9f:2d:e7:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 01:23:12 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=ce641830dcd98eca005eb5860c2914549052bb2211ede9b5e71a1dfefcd400d2, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:21:cf:96:f1:93:59:d7:34:ce:b7:c8:50:d4:
                    91:9b:b8:3a:94:14:18:b5:7f:18:fe:bf:6a:ee:82:
                    6a:17:f1:4c:bd:3f:ea:3e:2a:e1:71:8c:b3:ba:93:
                    88:84:a6:99:62:06:4c:2e:26:02:72:85:d2:21:6d:
                    32:a5:45:8d:1c:22:d3:d8:f6:eb:1b:32:f7:ca:30:
                    a4:a4:e6:19:bd:01:22:52:7b:38:e7:90:ba:ac:b5:
                    70:ac:8b:52:f2:5d:25:5b:b2:ef:9a:97:e6:9d:cd:
                    92:52:75:db:9e:25:2e:21:3c:8a:84:34:da:b6:b8:
                    0b:e2:97:0e:e7:d3:93:95:57:4a:a3:79:1d:37:c2:
                    01:fd:c8:96:18:37:25:c9:6b:21:4a:ac:06:b9:bf:
                    0e:61:29:dd:43:46:50:3a:37:d0:13:96:87:cb:f6:
                    07:8a:d7:3a:4e:48:53:40:fd:30:10:73:03:1a:5c:
                    66:04:18:b0:d8:13:5e:af:d5:df:f7:bc:63:93:b2:
                    8c:24:71:83:04:e6:6b:0b:df:c8:a9:fe:46:a6:05:
                    58:52:23:58:9e:1a:1a:bf:8f:74:b5:1a:bc:b9:c6:
                    55:50:af:07:00:62:1f:77:c6:f4:92:5e:b0:d1:66:
                    c8:17:0e:f1:00:9e:d1:c7:89:5d:c6:a0:b7:15:05:
                    25:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:44:0C:28:26:DA:A3:F8:B5:EF:23:0B:15:21:E0:F9:E8:8D:CD:B0
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2fe1b21b-1f44-49ae-a7dc-416e7be304f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3afc::/47

    Signature Algorithm: sha256WithRSAEncryption
         34:11:46:ec:a6:48:8d:d5:03:aa:c9:3b:71:51:73:e0:2f:fa:
         c6:00:c1:86:4d:1a:08:ab:9a:e1:a4:93:3a:71:62:08:d6:81:
         e1:dc:9a:26:22:f9:8b:a4:a6:1b:87:58:34:5b:a9:a0:57:6c:
         50:09:f6:0f:bf:a2:2d:a2:14:62:17:f2:84:77:94:4a:4b:42:
         17:f3:2c:d5:34:a4:99:ac:38:5c:b0:5c:d2:59:7c:aa:59:6c:
         4e:d0:38:d3:4b:27:15:ba:ed:69:fa:b9:39:74:75:21:1e:16:
         dc:31:27:a8:d2:0b:8f:7a:eb:e6:31:c1:06:58:ae:da:92:80:
         bc:72:38:89:42:06:09:24:2a:6c:f7:50:b9:26:89:c0:45:98:
         fc:60:67:66:f7:ad:21:6d:dd:f1:b6:5c:71:b5:89:2d:b3:a9:
         dc:93:1f:ab:01:4a:1e:30:d3:4f:37:73:9b:54:d9:d5:b2:8a:
         69:7f:15:2f:0e:53:cb:56:bf:05:74:1c:43:5b:16:70:f3:9c:
         4a:c4:d4:1b:7b:71:ea:d4:37:7e:75:05:7a:00:d6:c1:ba:c1:
         46:a3:b1:6c:88:73:43:d8:f3:e0:85:2a:53:25:c3:1e:9c:a9:
         d6:6a:17:28:89:c6:44:4d:9f:bd:80:15:6c:15:31:60:1f:41:
         fc:a1:6e:bc
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 17:26:46 2025 by rpki-client