Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/492f82eb-6a2a-4f4f-b8e3-8d725b30366c.roa
File:                     492f82eb-6a2a-4f4f-b8e3-8d725b30366c.roa (raw, json)
Hash identifier:          TquUuWYJQzkIb6S8uKaJ5Yg491VKcnK0nkDkZTmM8cI=
Subject key identifier:   00:BF:CD:77:71:DB:CC:47:E9:FD:A5:E5:AE:52:82:C2:B0:77:B2:1D
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       1DF966D1D460A64F7A965BDBDB949A1E8447771C
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/492f82eb-6a2a-4f4f-b8e3-8d725b30366c.roa
Signing time:             Fri 31 Oct 2025 04:28:19 +0000
ROA not before:           Fri 31 Oct 2025 04:28:19 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3978::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:f9:66:d1:d4:60:a6:4f:7a:96:5b:db:db:94:9a:1e:84:47:77:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 04:28:19 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=76b1f131692ff5f855839ca81847d450ff54ce9960eed7fb5538117592b60d95, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:69:34:91:2a:0f:c8:9d:59:71:9c:f2:43:37:
                    d5:a3:4f:f9:c2:85:91:5f:0f:19:bf:c0:81:01:ed:
                    e6:5d:4d:ae:5b:a9:0c:0d:3d:77:60:ae:57:f9:01:
                    22:7a:1c:c0:5b:9d:6e:01:7d:22:5f:1c:f5:80:1d:
                    55:a4:63:4a:de:15:74:73:2e:9d:38:c9:b5:71:02:
                    41:14:3f:8c:cd:38:d8:2f:43:07:c0:3a:72:c3:dc:
                    e5:dc:4c:f8:f6:c1:47:78:b6:bf:26:fe:d6:e5:3f:
                    aa:4e:b1:55:14:c3:ab:40:11:ec:cc:4c:80:dd:82:
                    67:ef:11:cf:bc:14:e8:2f:eb:24:c4:85:c2:fc:eb:
                    55:3b:8d:b1:97:ad:20:fc:04:55:00:c1:e1:0a:08:
                    d3:a8:ae:64:85:f5:ee:57:6a:86:23:76:ba:8b:2f:
                    18:15:db:c8:82:11:7a:f5:66:3b:11:72:0f:96:76:
                    4a:fa:f1:e7:6e:0b:26:dc:41:b1:a0:a3:e1:26:9d:
                    d3:9b:5b:ac:9d:7b:83:0c:22:d6:78:ae:1e:94:07:
                    21:7b:1e:d2:87:dd:15:df:48:df:e9:85:cf:56:d6:
                    cd:17:63:47:34:d6:2d:ff:d6:f5:50:51:55:3f:73:
                    00:7f:bd:ea:81:77:88:ad:fe:a9:87:b7:b9:5f:3f:
                    37:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:BF:CD:77:71:DB:CC:47:E9:FD:A5:E5:AE:52:82:C2:B0:77:B2:1D
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/492f82eb-6a2a-4f4f-b8e3-8d725b30366c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3978::/46

    Signature Algorithm: sha256WithRSAEncryption
         2f:bc:1d:09:b3:fa:61:14:90:7d:aa:9f:e8:59:b8:cd:53:03:
         8c:2d:b2:4a:ef:d4:70:63:ee:1e:46:74:a6:d7:2f:4b:b9:16:
         09:60:1e:3e:1b:e9:0b:40:e9:2c:b9:69:e1:a6:10:c1:f3:57:
         f0:bb:60:4b:31:53:f1:6e:2b:67:c4:51:ee:e8:97:3c:7a:2f:
         74:95:4c:3a:18:e6:2f:f7:11:d4:b5:66:13:55:e6:07:56:5a:
         8b:0d:2b:5f:a4:22:93:03:62:c9:e0:d2:fa:3e:66:8f:b8:63:
         19:8c:a1:70:82:a5:6b:68:57:f0:12:f4:38:1b:2e:a5:fa:7b:
         bb:82:63:b1:4e:ae:1b:a7:06:5c:80:fd:50:4b:a1:0d:a2:40:
         a6:27:d6:66:d0:94:ce:9b:bf:b5:6c:14:45:5e:a6:5b:79:ad:
         74:d6:b3:e1:9d:8e:42:50:72:32:33:91:f4:7d:34:1c:6b:da:
         1b:f2:ee:52:58:ab:f9:f6:8d:0c:0c:7d:da:35:cf:78:ba:eb:
         f7:2c:93:50:79:89:24:ed:70:9a:d3:df:54:17:be:ed:33:ac:
         d5:82:92:09:eb:61:36:92:9c:14:29:95:9c:9f:40:1d:8a:c3:
         1e:93:41:2a:3d:86:bf:41:4b:cd:4e:2e:8f:87:c8:97:40:f7:
         fe:51:3b:6c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:54:35 2025 by rpki-client