Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3112c4ba-35c6-4680-a255-6cb08f899efa.roa
File:                     3112c4ba-35c6-4680-a255-6cb08f899efa.roa (raw, json)
Hash identifier:          VNjIPnioPIJzQBuUB6DwElzFsx9PqZO/aRXB8H0XPFo=
Subject key identifier:   9B:58:59:7D:3C:9D:25:E8:C4:F5:ED:38:75:99:5E:5B:53:D8:8C:5E
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       3D885FD72D842AF1B3936B0222DD7CDB9F7A6213
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3112c4ba-35c6-4680-a255-6cb08f899efa.roa
Signing time:             Thu 30 Oct 2025 22:25:27 +0000
ROA not before:           Thu 30 Oct 2025 22:25:27 +0000
ROA not after:            Thu 04 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1cf8::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:88:5f:d7:2d:84:2a:f1:b3:93:6b:02:22:dd:7c:db:9f:7a:62:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 30 22:25:27 2025 GMT
            Not After : Dec  4 23:59:59 2025 GMT
        Subject: serialNumber=d22d57a27360fcfcb0fac195751e7c66adac1e1db779aa2c5b2c98ed85d85a73, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:dd:69:70:8e:22:58:80:e0:dc:95:2f:30:ed:
                    10:33:ab:e5:37:4b:8e:3a:c0:bd:f0:81:97:39:1b:
                    d3:ff:7b:36:2a:dc:26:63:d1:40:95:98:33:a1:14:
                    f4:5e:a4:32:12:88:f9:6d:0e:3c:89:fc:32:73:2e:
                    45:41:14:84:2d:f1:5c:72:8b:48:56:89:01:09:64:
                    a5:56:3e:50:fc:26:02:a4:05:fd:7b:8a:7d:c5:5c:
                    1b:69:59:3f:14:7a:0c:cd:de:46:ed:de:5e:0b:52:
                    4e:f1:1a:99:7d:b0:71:51:72:1b:34:ac:13:ae:cf:
                    66:b2:8f:54:7c:60:30:5c:d2:42:5f:db:a0:2c:a9:
                    d1:7f:5c:f8:73:e8:f5:43:c3:e2:e5:62:33:73:e9:
                    12:43:cf:91:7c:c6:43:e5:f4:4a:bb:d3:b7:6e:08:
                    f8:7b:ce:6c:09:cc:cc:59:a7:e1:00:ae:53:5f:fd:
                    b5:b4:c7:0b:d3:fb:7f:fc:bc:c3:45:d6:3e:3b:17:
                    a0:be:60:8c:14:9f:df:43:63:d1:26:e6:21:ec:d9:
                    da:56:21:15:6b:99:23:37:f4:cb:ee:ee:70:29:c3:
                    f3:9a:f3:1d:39:fd:f6:53:f3:e5:2d:f5:03:83:9e:
                    80:a3:bd:15:49:cb:9c:1a:4a:c1:bf:a9:83:5d:a7:
                    58:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:58:59:7D:3C:9D:25:E8:C4:F5:ED:38:75:99:5E:5B:53:D8:8C:5E
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3112c4ba-35c6-4680-a255-6cb08f899efa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1cf8::/47

    Signature Algorithm: sha256WithRSAEncryption
         05:33:34:f0:da:7c:49:f0:0b:e1:ce:f0:27:fb:8e:58:4a:68:
         ee:b5:a9:bc:31:6d:a4:ec:9b:42:16:e8:d3:32:98:62:d2:12:
         e1:f1:31:8a:94:8f:de:08:b8:12:12:f5:a8:ed:64:cb:95:1f:
         12:b5:2a:cc:35:7e:49:72:9e:fc:cc:a0:dd:74:2b:15:4e:18:
         a6:e7:04:db:92:f3:a1:9d:c8:05:0b:04:c6:ae:8d:4e:b1:38:
         5b:d9:13:08:ed:cd:14:39:8d:4b:aa:96:31:33:d1:85:90:3e:
         7f:7d:9c:8b:72:89:21:39:0a:58:70:cd:6d:b6:72:61:3a:a3:
         bc:1b:0b:00:30:2b:67:e2:3f:1c:cc:3d:4f:a5:15:df:43:cd:
         6d:78:04:54:ca:65:59:8a:27:9b:cc:37:18:dd:f7:3c:06:c9:
         ff:61:e5:af:df:99:0c:47:90:fb:38:9b:de:39:96:dd:e3:30:
         5d:3a:9a:80:c4:db:f1:f7:2b:7f:40:ba:64:d6:bb:38:0c:3c:
         21:71:d6:08:84:2a:a0:cd:08:de:a4:61:12:21:7c:f6:11:52:
         ea:65:c1:19:99:df:0b:74:30:17:28:dd:0d:fa:11:67:d9:b9:
         ad:8a:2d:38:79:a9:92:a7:7f:3e:0e:98:55:26:21:7a:1a:4b:
         34:24:0c:22
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:32:52 2025 by rpki-client