Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/46b86ff5-a38b-40e3-b3a3-8d53c87561a3.roa
File:                     46b86ff5-a38b-40e3-b3a3-8d53c87561a3.roa (raw, json)
Hash identifier:          XYiFY1VlUoFgiNSvI5S5OGadhvLR4y8oZ7Af4HQHF3c=
Subject key identifier:   4E:A1:90:8C:E7:06:F3:53:B0:A8:F3:3D:CE:D7:0D:70:6E:BE:CC:96
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       06294B43DB1908410DEDB7902D3198CA9228BB40
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/46b86ff5-a38b-40e3-b3a3-8d53c87561a3.roa
Signing time:             Fri 31 Oct 2025 00:41:36 +0000
ROA not before:           Fri 31 Oct 2025 00:41:36 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3716::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:29:4b:43:db:19:08:41:0d:ed:b7:90:2d:31:98:ca:92:28:bb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 00:41:36 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=2a0a4a36bb35d196ff33f24d34a8d520726addf13aaf3acd9fbd42a5aa2133a8, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:6a:01:d1:a2:ea:c7:7b:c3:4d:31:3b:90:37:
                    32:75:da:89:96:a1:97:e4:db:43:5b:c5:90:9b:2d:
                    89:32:39:9a:a5:c6:b9:38:4a:3a:b2:10:98:46:3d:
                    f4:2d:81:e7:ac:71:a8:8b:70:2e:51:1a:11:8f:dd:
                    6a:bb:f3:31:77:db:51:0b:e1:17:d8:96:3b:a0:bd:
                    cb:62:2d:d3:b4:1f:61:d6:2a:45:a1:4a:24:4c:71:
                    ed:14:2a:c5:af:f5:69:87:f0:0e:40:72:55:aa:56:
                    0e:9b:18:c6:21:9a:36:aa:8a:bf:ea:3a:63:59:c6:
                    41:e4:09:3d:15:e3:a0:ed:57:44:61:18:f1:0a:86:
                    d1:53:41:d1:27:a0:61:da:87:00:0d:49:80:cf:75:
                    68:25:2d:d6:c7:a9:aa:04:b0:c5:73:1e:22:7a:35:
                    54:3c:8f:76:d6:1a:c8:6f:36:80:65:c7:7f:80:10:
                    ea:e1:10:e5:6c:16:8d:9d:16:41:9f:7a:94:18:cf:
                    72:83:7c:07:0d:dd:c1:df:cf:7b:da:67:bf:43:78:
                    12:74:06:ac:1f:77:ff:8c:c2:14:ff:03:7d:ec:84:
                    d7:e3:4d:ff:27:cd:89:34:57:52:1c:82:a3:be:b8:
                    eb:e5:b1:bd:b7:72:02:44:af:46:2a:ca:f6:fd:d6:
                    6b:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:A1:90:8C:E7:06:F3:53:B0:A8:F3:3D:CE:D7:0D:70:6E:BE:CC:96
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/46b86ff5-a38b-40e3-b3a3-8d53c87561a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3716::/47

    Signature Algorithm: sha256WithRSAEncryption
         23:6a:ea:03:60:1c:f0:4f:c0:01:25:14:8a:a2:a7:90:a3:ee:
         e0:d2:9d:0a:d7:68:bb:3a:65:8c:2b:29:52:fd:2e:e1:d7:c0:
         7e:48:13:75:a7:0d:62:cf:42:19:2f:eb:5d:65:7c:15:8b:18:
         83:01:c6:bc:22:d0:3c:ee:96:0a:80:ac:40:3d:bc:9e:7b:91:
         12:d3:1b:de:d6:63:f3:a5:7b:9b:ec:60:33:1f:06:7b:ea:3a:
         19:a1:15:1d:00:85:3f:80:df:86:ce:51:37:f7:76:a3:66:ee:
         53:00:2e:7d:40:d1:f0:a1:29:56:9c:61:18:18:c3:da:b0:86:
         df:24:7a:05:96:d3:1a:55:e3:81:44:00:53:ce:40:5f:99:aa:
         99:d8:a0:6a:74:60:7d:6e:2c:76:0a:b2:0b:bf:2e:b8:8e:d5:
         c3:38:f0:4e:47:7c:f0:c3:36:de:23:c6:60:f2:6c:6b:2c:c6:
         5b:bf:34:94:f0:fd:a6:af:c5:3f:9c:7f:94:91:8b:da:6b:38:
         24:20:19:69:0f:5c:7c:37:2e:dc:9e:23:79:c3:ab:da:35:8e:
         8d:c9:8e:d0:b3:80:a6:5b:24:f1:63:10:41:40:16:14:4f:97:
         e9:de:bd:50:4f:ee:15:b2:ac:fb:9e:78:4f:ef:e6:e7:f7:28:
         51:a5:75:3c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:38:03 2025 by rpki-client