Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3a30e91c-7384-4eb1-833b-4cc5a879a5d6.roa
File:                     3a30e91c-7384-4eb1-833b-4cc5a879a5d6.roa (raw, json)
Hash identifier:          FrxNC+Qld/jNaf+c+4+CiYeQZvsIQRVG4D9TKkS44Ks=
Subject key identifier:   1E:6C:FE:7B:A0:20:E7:6D:B0:B6:70:84:AD:9D:C5:03:41:B2:FC:B9
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       17205B2ABB6AC019ABF3A40A1243456017A54E74
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3a30e91c-7384-4eb1-833b-4cc5a879a5d6.roa
Signing time:             Fri 31 Oct 2025 05:07:01 +0000
ROA not before:           Fri 31 Oct 2025 05:07:01 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1270::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:20:5b:2a:bb:6a:c0:19:ab:f3:a4:0a:12:43:45:60:17:a5:4e:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 05:07:01 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=d108dd764f09abf20d1fc5ec1b60d6bed62f591013f1ee24b0eb8b12b8c14372, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:ad:9a:d4:d3:73:80:3e:ec:47:f2:0d:96:3a:
                    c3:0b:16:56:62:f4:aa:d9:bb:2a:59:ef:91:95:04:
                    ca:52:46:c1:36:7d:0b:3f:13:ce:87:c9:ba:58:1b:
                    81:6e:ba:fe:a1:3f:5a:c8:8e:db:75:8e:38:c4:2c:
                    c7:33:e9:0c:bb:c9:5e:61:9a:42:1a:bf:b2:48:d1:
                    8e:a0:3f:db:d9:0e:67:20:d3:63:f0:2e:64:a7:f4:
                    7c:fd:cb:93:5b:77:00:69:13:89:75:80:d5:43:d4:
                    05:8a:99:32:ea:1a:8e:ed:dd:3a:82:88:e1:cb:b4:
                    be:ab:3d:2d:e4:f9:37:32:20:73:39:0c:fa:78:93:
                    11:df:58:7d:07:b0:58:e6:d5:9a:a1:b6:21:f3:ae:
                    61:89:eb:9e:17:76:72:80:03:57:e1:75:03:d3:cc:
                    26:8d:3b:c8:fd:55:81:b0:dd:d2:af:f7:2b:07:1f:
                    7a:f2:0a:14:3b:31:1c:77:77:c1:ee:4c:67:ff:68:
                    f2:6d:68:0a:70:8c:9a:33:b3:10:74:68:3f:45:3a:
                    75:33:b3:9a:0c:ec:b5:5a:91:1a:51:72:e4:52:8e:
                    7b:ab:72:66:2b:a4:1e:92:1d:11:24:a4:f5:86:5a:
                    6f:ef:4b:c4:fd:f7:81:91:b7:21:09:ab:37:ad:0b:
                    98:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:6C:FE:7B:A0:20:E7:6D:B0:B6:70:84:AD:9D:C5:03:41:B2:FC:B9
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3a30e91c-7384-4eb1-833b-4cc5a879a5d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1270::/45

    Signature Algorithm: sha256WithRSAEncryption
         11:34:d3:d2:d9:60:55:3e:11:c5:b1:82:31:d4:7c:f8:40:f2:
         b1:d8:cd:dd:69:ae:01:ee:da:53:47:a8:59:c3:4c:51:4b:47:
         17:a8:86:4b:e7:cc:32:82:01:4c:93:54:4b:6c:68:76:86:b1:
         f7:75:0b:49:4a:c0:93:75:77:ed:68:46:4a:c0:31:7d:7a:d0:
         78:e7:e1:3f:5b:7c:db:a5:1e:af:fb:bf:4c:e6:95:10:6c:a1:
         53:74:b1:27:d6:dd:c9:53:aa:3e:f6:13:e9:88:6d:f9:7a:42:
         21:ce:cf:26:2d:53:d2:89:c2:28:24:30:20:05:ac:ae:d2:69:
         8a:9a:5a:a1:c3:9f:01:d7:02:03:ba:32:1e:9a:cf:a1:eb:c6:
         8c:48:e1:12:f8:a1:18:3d:9a:d1:f8:2f:00:0f:76:b1:3f:8e:
         4b:75:0a:52:bb:a5:72:eb:6d:6f:66:0c:66:28:e4:0a:d1:bc:
         33:d4:07:8f:43:0c:e3:f9:62:8b:dd:26:6b:0f:1b:11:d7:56:
         6a:34:0a:e5:cb:25:93:aa:da:f6:a6:fe:09:b4:20:b8:80:ff:
         69:26:08:e4:36:38:02:77:f5:87:d8:35:38:9a:55:f4:bd:fd:
         bf:59:0e:d8:26:36:94:ad:e0:aa:eb:fc:0e:cc:48:9b:aa:83:
         0b:ed:50:cc
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:38:49 2025 by rpki-client