Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3d86ea06-f3f0-4c02-b4f4-3c1894429f95.roa
File:                     3d86ea06-f3f0-4c02-b4f4-3c1894429f95.roa (raw, json)
Hash identifier:          zPhjtMgBzoYm5PVYGy96e1xSkIHAVePSPPgYb2l/CBc=
Subject key identifier:   76:FF:F3:D6:C1:0C:09:E7:E8:27:38:9F:4D:72:5D:B4:4F:38:ED:64
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       65127427BA0939CCDB23CDDA69B690ACCD926037
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3d86ea06-f3f0-4c02-b4f4-3c1894429f95.roa
Signing time:             Fri 31 Oct 2025 07:36:47 +0000
ROA not before:           Fri 31 Oct 2025 07:36:47 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:13c0::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:12:74:27:ba:09:39:cc:db:23:cd:da:69:b6:90:ac:cd:92:60:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 07:36:47 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=703df921737c5131c80ba2595239e577ee5fb564bf703d202fda5f9bf5443c7d, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:2f:34:ce:00:53:fa:e0:9e:c7:64:ec:94:fb:
                    c6:2b:36:a1:d5:4d:10:ca:ee:0c:47:4b:5d:13:b9:
                    40:98:8c:7e:fc:f9:cb:0f:dc:44:59:28:e5:95:34:
                    01:7d:2a:67:a7:73:6d:c7:65:92:7b:61:0f:be:23:
                    3f:84:01:0c:7a:a6:d4:d0:94:f4:60:10:27:75:c3:
                    63:ff:39:7c:c3:71:80:31:fe:26:26:01:13:a9:63:
                    0c:7d:5d:28:2b:a9:1b:e1:96:50:24:1d:8c:b6:fc:
                    34:9e:67:35:64:43:3b:de:6b:fe:ad:f0:b8:bb:5f:
                    6e:8a:b0:bb:29:c0:a5:15:8b:62:6f:57:d8:33:ac:
                    24:29:f3:fa:a0:f1:10:63:34:bd:dd:9f:e9:28:a8:
                    2c:03:c4:f1:33:29:56:bc:72:45:4f:77:0f:9b:ed:
                    8c:88:be:e6:cc:14:e3:db:3d:e0:6f:70:3a:db:27:
                    13:4e:df:7e:e1:94:7f:8b:b4:bd:99:21:53:bd:15:
                    8b:29:0a:c4:7a:76:4f:2d:30:f3:87:af:84:2a:61:
                    bf:7f:2e:76:c1:96:e4:44:52:ad:78:31:50:27:31:
                    22:0f:6b:a1:49:ba:f5:96:49:93:86:9e:33:b9:b2:
                    7f:16:08:c0:47:09:2a:c0:ef:8c:4b:d2:fd:e6:f0:
                    2a:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:FF:F3:D6:C1:0C:09:E7:E8:27:38:9F:4D:72:5D:B4:4F:38:ED:64
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3d86ea06-f3f0-4c02-b4f4-3c1894429f95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:13c0::/42

    Signature Algorithm: sha256WithRSAEncryption
         59:f3:d2:ac:a3:f2:00:5e:fb:35:5b:e7:fd:5d:2f:7e:de:c9:
         7a:97:c5:71:e3:22:d0:dd:67:99:e6:61:b8:17:49:34:96:3d:
         e2:f3:d4:80:af:fc:66:28:7f:97:f5:08:af:5d:6f:b2:f9:49:
         7d:e4:68:1d:b3:ca:49:ae:ac:57:66:ea:c5:dd:13:c1:6d:52:
         83:ba:98:e2:aa:9e:d5:47:18:16:eb:9f:3b:b0:d3:18:22:34:
         03:d8:72:fa:7e:25:db:b3:e3:1e:16:52:d7:fc:96:96:9e:51:
         a6:67:06:77:04:ba:6e:67:a7:fa:6a:39:39:e2:4f:84:fd:4a:
         3c:e6:19:96:57:b4:ca:c0:d8:e4:fd:50:d3:d8:d1:a8:b3:d9:
         1d:8d:7a:9b:49:aa:9d:b7:1a:7f:ba:11:b7:2a:c5:00:22:4e:
         24:95:b0:3c:ec:bd:09:a3:8e:6f:de:8a:63:d5:e9:4c:86:78:
         9f:59:6a:0b:7b:57:4c:61:38:d0:ff:e0:04:47:c4:64:7d:67:
         ce:ca:2b:b6:6a:21:7e:cc:c1:00:36:c2:6f:38:c8:e6:ce:5e:
         98:78:10:d4:71:c2:0f:b0:07:97:62:3e:4d:a8:ce:29:46:6a:
         3d:f9:49:0b:79:81:27:9a:b1:a9:58:9d:fe:64:a2:67:83:1c:
         38:1f:e8:3b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:34:08 2025 by rpki-client