Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/45449496-eb9e-4f0f-9b56-5e0506fd3b9a.roa
File:                     45449496-eb9e-4f0f-9b56-5e0506fd3b9a.roa (raw, json)
Hash identifier:          YpjnjQkZnezYQuKNdxciIbvnJGfEOMxo/ZDWSK8D7W0=
Subject key identifier:   BC:C5:47:7A:B0:3D:97:72:00:AE:E0:CD:57:19:DB:76:15:C4:ED:92
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       4457ADCC6A656223BABF5296EE4E781510B7BDD3
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/45449496-eb9e-4f0f-9b56-5e0506fd3b9a.roa
Signing time:             Thu 30 Oct 2025 21:37:13 +0000
ROA not before:           Thu 30 Oct 2025 21:37:13 +0000
ROA not after:            Thu 04 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:17d2::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:57:ad:cc:6a:65:62:23:ba:bf:52:96:ee:4e:78:15:10:b7:bd:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 30 21:37:13 2025 GMT
            Not After : Dec  4 23:59:59 2025 GMT
        Subject: serialNumber=58a7535c506e15a30bfa6676b3a5ce7cda60298f9eb11777aea02bf4194141a2, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:0d:e2:d1:e2:8f:94:32:5d:ba:36:4b:a4:48:
                    00:f4:33:bb:8a:64:71:1b:9b:1b:f5:32:57:42:21:
                    02:f2:9c:c6:7d:5f:45:3d:85:ba:a8:02:3d:9e:c3:
                    1a:2b:52:4c:d5:9e:e2:bb:79:4e:87:38:69:f1:53:
                    d2:93:e4:a2:dc:76:a3:95:99:02:b3:ae:b1:d6:b8:
                    74:d6:85:89:d8:f5:76:cb:32:e2:6e:aa:cb:ef:63:
                    cf:b8:f1:4e:42:2f:60:08:05:09:0d:3d:8b:74:06:
                    94:c0:9c:5c:61:a7:25:97:e3:41:85:da:f6:81:49:
                    9c:d6:cd:c4:ef:02:77:c9:bd:d3:03:73:a8:3f:43:
                    88:c3:78:19:5a:7b:32:f3:c5:b5:19:98:9b:3c:9e:
                    02:88:8b:1a:f6:16:1e:08:61:41:8f:6e:06:42:62:
                    2f:e7:66:46:21:56:1a:7c:09:c2:43:df:22:cc:cb:
                    d9:a3:da:bc:b9:1b:ea:35:09:2f:8d:15:00:1f:20:
                    e9:6a:96:c9:8f:58:ca:3e:45:ab:3a:32:ff:82:25:
                    bc:bc:3a:f2:b7:80:02:84:1a:93:ac:3e:4e:cd:ac:
                    dc:55:af:c2:c5:e1:23:b2:ab:f8:29:75:60:f2:50:
                    c8:36:f9:95:51:46:c5:94:99:a2:99:00:8e:38:84:
                    34:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:C5:47:7A:B0:3D:97:72:00:AE:E0:CD:57:19:DB:76:15:C4:ED:92
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/45449496-eb9e-4f0f-9b56-5e0506fd3b9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:17d2::/47

    Signature Algorithm: sha256WithRSAEncryption
         b2:9f:eb:13:56:15:81:f0:54:30:52:a7:7b:d9:64:11:d7:8b:
         76:13:ef:f1:46:0a:49:ad:43:16:b9:3f:4b:e4:fe:50:b9:26:
         30:85:c6:32:a8:6f:85:67:80:d5:b1:0e:f0:1a:75:df:00:79:
         fb:2e:c9:67:f5:c4:4c:a4:63:d3:20:51:75:c0:2b:68:c4:0e:
         76:f4:24:5b:35:7b:b5:da:a8:a8:57:3c:2f:5a:c6:da:0b:16:
         51:95:ec:84:b4:a9:4a:88:1f:b1:cf:d1:63:02:ab:09:20:65:
         bb:27:64:2d:03:a9:e6:a7:96:7a:ad:b4:cd:6c:64:fa:7c:62:
         66:5c:cb:f5:d8:a9:cf:90:b2:0a:4e:d3:32:a1:ba:af:4b:4d:
         95:2b:7f:3a:fc:73:b7:32:0b:15:e2:78:d7:a7:18:05:c0:2e:
         1c:37:bb:12:57:fa:ba:d8:78:dc:d3:58:8b:45:3b:e4:9c:07:
         b3:53:a5:15:58:bb:26:f1:a9:99:04:cd:44:4a:17:dd:a4:fa:
         83:3b:27:34:0e:c3:7b:95:b7:cd:a0:d5:fa:13:43:23:67:2f:
         36:b7:a9:a9:a1:8c:2b:8b:22:d9:63:6a:10:0f:38:fb:48:e6:
         59:ba:52:c1:84:d6:39:26:0b:5b:d6:59:fa:7f:55:5d:cc:4c:
         1d:51:55:27
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 12:30:50 2025 by rpki-client