Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/407ef1b8-a90c-4b54-ae68-14f62140aa9c.roa
File:                     407ef1b8-a90c-4b54-ae68-14f62140aa9c.roa (raw, json)
Hash identifier:          xrOB4+ArR2o9Rh5adK0G0jymBEbCZsqSBIzAKHhyLUw=
Subject key identifier:   D4:41:4B:EB:84:58:5C:C2:26:60:CC:BD:73:30:24:96:36:F6:02:77
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       15784637049DF978A6330CBF8F5026D88EEC45CD
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/407ef1b8-a90c-4b54-ae68-14f62140aa9c.roa
Signing time:             Fri 31 Oct 2025 06:27:16 +0000
ROA not before:           Fri 31 Oct 2025 06:27:16 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1330::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:78:46:37:04:9d:f9:78:a6:33:0c:bf:8f:50:26:d8:8e:ec:45:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 06:27:16 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=945fa2b8bf14be757648c890c38399150f2c65cc84a6ca9d839fb18f5b475740, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:79:b6:96:64:65:8a:55:5d:3b:f3:66:81:c1:
                    49:71:e0:9b:e0:8f:54:2c:a2:d4:64:f5:9b:ee:b9:
                    83:19:5f:15:0e:19:63:fc:bd:43:75:ed:30:e6:bc:
                    c4:83:5f:09:bb:66:2c:79:4a:1b:9c:b8:02:62:b2:
                    3e:ac:c2:e9:42:73:47:ef:78:ad:8b:f2:23:13:a7:
                    5a:3a:74:89:5a:7b:43:a9:af:3a:85:0f:ef:1e:82:
                    00:52:2f:a5:df:d3:63:5d:2f:cb:70:a2:c0:49:df:
                    e0:bf:26:ce:38:34:d7:f1:62:bf:7b:d6:75:f4:33:
                    fc:4c:19:e0:80:37:53:dc:ee:f6:dd:77:67:bd:ee:
                    a2:53:b6:4f:c0:10:c5:b8:71:ce:15:28:4d:e4:39:
                    a4:2d:04:8c:84:dd:a6:ec:fa:3c:ae:f3:73:92:4b:
                    c7:d8:bf:d0:88:81:1e:ac:ec:ba:e1:50:bc:cc:27:
                    82:2f:30:40:20:e6:86:c7:88:75:f5:c5:8a:fd:75:
                    6e:51:02:51:af:3c:74:ba:19:66:b9:db:54:2e:a1:
                    3d:4c:dd:b4:29:bc:bd:af:24:46:c5:90:7d:95:34:
                    f2:77:39:3d:94:78:6b:08:a9:46:3c:64:ae:d1:3a:
                    41:c7:c3:8d:48:9a:ef:b7:24:5c:99:38:65:40:bc:
                    0c:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:41:4B:EB:84:58:5C:C2:26:60:CC:BD:73:30:24:96:36:F6:02:77
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/407ef1b8-a90c-4b54-ae68-14f62140aa9c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1330::/44

    Signature Algorithm: sha256WithRSAEncryption
         48:5f:98:f8:ab:d8:35:50:63:7a:e9:67:6c:c4:93:81:03:7a:
         f0:3f:76:27:e5:cc:7c:0e:8c:03:4d:71:6a:1c:af:94:fa:76:
         75:63:f7:8a:7a:cd:fc:cf:33:7c:ae:9a:f9:1d:22:28:8e:b4:
         c8:c3:cc:72:43:0a:6a:c5:c6:ba:9f:58:8b:f6:50:b6:4f:57:
         03:83:04:be:0c:12:ee:37:49:9b:4b:70:13:f0:e9:6f:95:8d:
         ab:9c:4c:87:f7:86:6d:59:4e:cf:ff:7d:9d:f8:16:2b:b6:71:
         bc:d1:9b:e2:45:07:9c:04:6c:aa:b9:e6:ac:13:c6:e7:59:5c:
         d6:63:b7:75:a9:49:e7:a8:8c:76:53:f5:f3:67:1d:1b:b9:6d:
         52:86:66:de:b3:7a:1f:60:4a:ca:ac:b3:89:24:83:e5:ed:ae:
         1b:e5:f5:42:f5:b5:b8:27:64:04:9d:2a:22:b3:7f:30:24:d5:
         b4:ae:bc:de:81:4d:ee:58:ec:88:f1:39:29:44:d8:4b:7d:75:
         0a:3f:d8:42:9b:8f:79:0a:e0:2c:0c:7f:c4:8a:7f:6b:06:1f:
         d6:b5:f3:bf:3a:53:9e:ef:88:7f:82:ad:11:89:23:c3:eb:dd:
         c8:4d:d5:80:9a:df:48:37:c2:65:a8:dc:bc:2f:3b:42:6b:cd:
         b3:6a:3f:1d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:38:02 2025 by rpki-client