Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4589befd-8401-4003-a875-3c00aa9a7bec.roa
File:                     4589befd-8401-4003-a875-3c00aa9a7bec.roa (raw, json)
Hash identifier:          49syEMHTbOIoPamtlAgf7f3Ka5sRIj3Wv6haSAPgur8=
Subject key identifier:   E9:43:B0:B6:83:88:74:E7:60:1B:E1:F7:FE:BA:0F:47:FC:4C:40:62
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       33D9CE08A3867EFAFDAB9C3FD041C6847D01A5
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4589befd-8401-4003-a875-3c00aa9a7bec.roa
Signing time:             Fri 31 Oct 2025 02:56:56 +0000
ROA not before:           Fri 31 Oct 2025 02:56:56 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1a48::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:d9:ce:08:a3:86:7e:fa:fd:ab:9c:3f:d0:41:c6:84:7d:01:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 02:56:56 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=356db36e40a5e0a7dabaf1ca58c736d6f6762ef502b17db9df6ce811bee603d5, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:12:79:d3:78:40:53:32:38:eb:85:36:d8:bb:
                    c1:7c:6c:04:82:7e:8b:cb:d9:b3:aa:ca:3c:36:1d:
                    f0:66:5e:d8:81:c3:ab:8c:3a:6d:23:be:73:ba:ce:
                    0c:b8:3e:7b:55:73:b7:03:d3:66:fb:de:e5:6c:24:
                    00:78:19:45:ee:aa:72:28:86:a3:14:33:64:c9:38:
                    d9:95:cb:85:51:c4:38:b2:c3:16:69:b3:04:c1:76:
                    99:a9:53:25:17:51:2c:b3:52:65:07:cd:3d:d7:fb:
                    f0:76:4e:f3:06:3d:c6:1a:92:06:c8:ff:27:56:11:
                    c2:cf:87:fe:6b:48:d2:13:c3:a6:7b:bd:55:07:70:
                    34:d5:ba:b3:e7:09:be:fe:27:33:64:d2:16:9f:43:
                    01:88:fe:98:3a:86:50:b2:aa:28:67:7e:6e:a9:e7:
                    23:97:ae:fe:cd:d8:7b:dc:02:ac:5c:6d:ac:7b:81:
                    93:8e:7c:77:3b:ce:41:51:9b:15:41:67:0f:1e:11:
                    b1:26:4d:6d:ce:44:fe:34:2d:e5:ce:fc:bc:a0:82:
                    95:f5:ba:ef:f8:d2:03:12:5a:d2:1b:0d:49:4b:9e:
                    10:3d:d6:23:91:96:f6:1d:5f:19:b5:0d:db:92:a7:
                    7b:b7:44:67:2d:13:29:ea:58:28:2c:b2:74:b2:61:
                    0d:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:43:B0:B6:83:88:74:E7:60:1B:E1:F7:FE:BA:0F:47:FC:4C:40:62
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4589befd-8401-4003-a875-3c00aa9a7bec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1a48::/46

    Signature Algorithm: sha256WithRSAEncryption
         48:ac:6c:20:5b:6b:b0:bc:8c:c7:1e:67:33:7e:a6:74:98:6c:
         96:8c:39:33:54:ca:01:49:ac:5b:d4:16:30:2d:c2:de:9e:96:
         1d:a7:59:84:4e:10:f2:cf:9f:66:60:ee:be:f6:36:d0:ff:e7:
         a5:1f:10:59:be:d2:e3:97:89:b9:ee:b3:5d:6c:0d:08:09:86:
         91:82:46:88:b0:cf:d9:32:34:5a:43:5d:28:ae:fe:cd:c3:03:
         81:56:af:c0:5c:ea:ed:bc:c4:8c:69:2c:08:49:b2:1a:ce:a3:
         9c:62:dc:9a:ed:af:6d:fb:c7:fa:51:b0:f1:8e:54:22:f5:39:
         64:c5:d8:70:88:24:4c:00:74:61:e8:a5:38:fb:d4:81:b7:c7:
         c5:ef:98:22:18:d7:bd:1f:35:59:45:6d:21:12:24:22:83:ff:
         24:3e:6a:6e:1c:bd:4a:bb:c7:96:c5:3f:81:43:47:fe:fa:45:
         53:20:bb:d8:28:40:76:97:3c:35:eb:4c:3c:6f:8e:91:b4:8b:
         c7:63:40:70:0d:1f:16:cf:cb:4f:bc:f4:1c:d9:35:42:71:75:
         9c:3e:c0:d3:bd:7f:80:ff:c9:c2:68:70:37:09:d9:75:7e:da:
         6c:be:cd:af:07:65:02:19:90:c2:db:e6:b8:92:cf:bc:98:ae:
         7e:ce:a3:fc
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Nov 5 12:57:08 2025 by rpki-client