Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/40fd2da6-4340-4073-9170-120773754381.roa
File:                     40fd2da6-4340-4073-9170-120773754381.roa (raw, json)
Hash identifier:          yxZ7hRmkmcMlxbmrOGExnsWKX7k/YyagRwGdyiA/xHs=
Subject key identifier:   6D:09:E3:3C:67:48:D0:54:F0:63:52:35:67:25:1E:3A:53:DE:E2:29
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       27328709E0D27CE2182BE2AD9FA32FA3C51C8029
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/40fd2da6-4340-4073-9170-120773754381.roa
Signing time:             Fri 31 Oct 2025 01:08:34 +0000
ROA not before:           Fri 31 Oct 2025 01:08:34 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:398a::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:32:87:09:e0:d2:7c:e2:18:2b:e2:ad:9f:a3:2f:a3:c5:1c:80:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 01:08:34 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=9e811c99d85364860cb67215a5dbbe8560470cc8989eca582e628ffcf87e2881, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:85:a7:2d:72:16:5b:92:17:16:00:71:0b:58:
                    c0:98:84:36:45:e5:9c:a3:88:b2:85:e9:5f:84:d8:
                    ce:a2:28:60:10:57:c0:20:df:6c:30:bb:cd:7e:83:
                    5d:6b:5d:bb:19:87:6a:73:89:1e:c5:c3:6d:4f:86:
                    09:a2:d3:ed:49:cf:9e:6c:df:2c:f3:e9:b9:96:36:
                    32:20:d6:1e:ec:c0:93:0f:a2:55:91:9d:4d:83:65:
                    32:ac:13:e2:6f:cf:2d:68:70:ca:23:92:36:34:b6:
                    4f:ad:48:6c:8e:d1:00:a6:8a:1e:26:64:d2:bd:91:
                    bb:2a:29:1c:3b:a3:a3:c5:48:72:b9:38:69:c3:c5:
                    e6:00:e3:8a:8b:2e:e1:e6:1b:e3:7a:03:df:87:14:
                    26:91:51:f0:41:e2:8c:3f:19:9a:74:5d:fa:31:29:
                    06:8b:19:13:f5:13:8f:e2:c4:11:5e:e6:1f:86:f2:
                    0d:fe:b1:b3:51:e5:5d:27:f3:49:58:f2:34:97:7a:
                    ca:02:c4:28:94:7a:55:11:b3:34:ec:d4:6f:cf:29:
                    59:7b:f2:fb:18:24:60:e2:1b:ee:af:a7:e5:95:2f:
                    8e:7c:1c:00:4d:e1:ce:6d:82:5c:25:f6:0d:00:16:
                    29:8b:a0:e9:92:6a:2f:84:8d:bc:26:b8:c9:7d:9b:
                    55:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:09:E3:3C:67:48:D0:54:F0:63:52:35:67:25:1E:3A:53:DE:E2:29
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/40fd2da6-4340-4073-9170-120773754381.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:398a::/47

    Signature Algorithm: sha256WithRSAEncryption
         24:c7:c8:25:12:1e:7c:e3:19:d6:0b:1c:29:2f:2a:99:86:91:
         bf:bd:44:41:02:f0:51:3b:66:a9:43:30:40:6c:d3:2a:85:f1:
         28:ef:fb:c6:07:33:91:c2:95:3a:da:22:ee:86:10:9d:f9:21:
         4a:cd:7e:b6:2a:70:6b:7d:37:c1:1d:3c:82:d0:64:b2:b3:15:
         5b:a1:08:2f:9a:ba:87:79:1c:6d:6a:6f:6e:cc:5a:2a:04:af:
         41:80:34:6d:d2:aa:6f:40:90:4f:49:b2:c6:5e:e0:1d:d1:0d:
         8a:21:3a:af:29:a9:17:02:7c:45:13:42:3f:13:40:a5:74:6a:
         16:b0:c9:4a:f0:92:07:64:2f:7b:66:f9:fc:68:3d:a0:d7:a8:
         b6:76:5a:d1:11:a5:76:f8:48:bb:69:d0:1a:e8:ce:2e:fd:a2:
         a9:14:b8:5c:cf:f3:f8:24:5e:17:4d:84:4f:55:4a:e3:ba:7e:
         8b:29:33:8a:06:aa:d6:40:e5:f5:7d:e4:0d:23:80:6e:7f:35:
         d9:38:ba:b3:f6:19:36:48:a4:e2:15:f4:fc:20:3f:c1:bc:b8:
         b6:94:74:a9:de:9a:0f:2b:91:35:82:14:d8:12:8d:ed:aa:f8:
         db:ae:c5:2b:14:7b:be:69:9a:7a:85:9f:de:32:5a:83:47:e7:
         b7:3f:7e:8d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:38:58 2025 by rpki-client