Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4cdf4b67-d575-45e9-9cd0-1e96a6bb8ae0.roa
File:                     4cdf4b67-d575-45e9-9cd0-1e96a6bb8ae0.roa (raw, json)
Hash identifier:          88ExKLxGOhfEwwxsF6IfdGWh4yCZb04e+t+ZVLaz97k=
Subject key identifier:   11:3D:C2:FF:2C:7E:B1:DA:32:61:4C:43:A5:62:89:7A:A6:0D:A9:3C
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       0535D70750EAB84271BE64141BAB1FAF60F7DC3B
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4cdf4b67-d575-45e9-9cd0-1e96a6bb8ae0.roa
Signing time:             Fri 31 Oct 2025 03:26:38 +0000
ROA not before:           Fri 31 Oct 2025 03:26:38 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2a24::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:35:d7:07:50:ea:b8:42:71:be:64:14:1b:ab:1f:af:60:f7:dc:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 03:26:38 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=d0b3b64abf8353ca7a9bbf7c7a4006e0a2dbb24bb5271b866304a64a55351068, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:84:c8:f8:ee:0d:4a:a5:2f:2c:4d:70:b1:6d:
                    7f:5e:d7:2d:ee:91:19:6b:fc:3a:68:2c:f7:68:6b:
                    8a:af:80:23:c8:06:e9:82:ba:73:c3:32:bb:57:8e:
                    c7:5a:cf:27:c2:1f:08:e7:2f:23:8a:b9:03:13:b2:
                    dc:a3:a8:ed:6e:c1:00:a2:37:03:62:e0:5f:1e:9a:
                    47:70:18:e2:c4:d3:49:1f:4d:ac:0c:32:65:7a:cd:
                    7b:de:b5:b0:71:b1:c9:ee:a1:e3:8b:2f:9d:cf:4e:
                    bc:a7:a3:cb:f2:0c:2d:c0:42:68:f8:91:17:5e:4a:
                    c1:af:a4:1a:b5:63:d8:f4:69:32:02:50:e6:8f:f8:
                    ef:d9:1e:b6:8d:11:76:df:ca:9a:c0:98:9b:60:2f:
                    cd:3e:f1:b6:a8:f5:d5:3a:c6:a8:f6:15:5f:43:73:
                    d5:28:7b:c8:0a:74:68:9c:f8:10:a9:55:33:c6:d7:
                    a3:9c:28:70:3f:f1:80:7d:b5:02:c1:1d:24:f4:0b:
                    d2:25:ef:b4:61:08:bc:aa:e3:67:37:2c:db:85:2e:
                    76:d4:51:e3:33:b1:ad:03:66:06:cb:5f:54:1d:98:
                    ea:9c:73:46:13:f2:aa:a0:0e:f8:24:b7:14:26:4a:
                    b8:a6:54:4d:c8:9b:2c:6c:dd:d0:a0:88:d9:cc:06:
                    f0:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:3D:C2:FF:2C:7E:B1:DA:32:61:4C:43:A5:62:89:7A:A6:0D:A9:3C
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4cdf4b67-d575-45e9-9cd0-1e96a6bb8ae0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2a24::/46

    Signature Algorithm: sha256WithRSAEncryption
         a5:dd:63:d5:7e:00:ea:6e:9b:af:5c:2a:93:bd:27:24:8e:57:
         c0:37:04:38:b8:90:5a:c2:85:2b:2d:07:b8:65:e1:3b:85:fb:
         7e:16:6b:a2:21:28:aa:04:f3:ca:01:47:f2:e7:15:b8:54:6d:
         84:2f:1d:e8:4b:4a:52:f1:0c:a1:82:51:c6:a9:32:88:e3:48:
         4b:81:74:56:05:c0:96:35:b0:cb:41:55:06:09:01:d0:cf:c6:
         f2:51:8e:6b:89:5b:2c:57:c2:36:b6:a5:c1:06:56:61:91:7b:
         f4:25:a0:af:0f:ba:8d:07:f0:03:93:9b:18:89:ba:ea:25:91:
         9e:a3:82:69:ff:a3:dc:a5:20:cd:10:19:53:0c:3c:23:12:3a:
         a4:c0:fd:e8:b9:5c:e3:25:cf:d6:95:1b:05:0b:98:e6:d6:11:
         de:a7:2a:20:60:7f:ca:f0:ca:d0:b9:88:d5:06:a2:2c:96:7a:
         22:6c:6a:16:e7:f7:49:80:c4:2c:a3:12:60:0f:bc:18:18:20:
         bb:67:2f:48:85:f3:c5:c6:75:08:9b:d7:a2:e2:88:0c:a1:85:
         b7:43:47:ba:13:0c:02:39:cf:c7:b5:80:c0:8b:39:38:d0:a0:
         56:f1:ec:8a:69:20:a3:a8:ba:2b:c0:cc:7c:97:3c:80:c9:8b:
         6e:eb:3b:1c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:46:44 2025 by rpki-client