Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4f8a8c7c-e8b1-42c1-a33b-0651d210892b.roa
File:                     4f8a8c7c-e8b1-42c1-a33b-0651d210892b.roa (raw, json)
Hash identifier:          /oxXYjHA/Dx5rjxjFaHXnxvR6SG1nDUcDA/lJbx9Wos=
Subject key identifier:   57:F1:17:EB:B6:D7:B2:84:AA:6B:15:A1:02:93:E6:56:02:89:4F:82
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       2AB044395DF676887E25ED4764D2439DE0586FF7
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4f8a8c7c-e8b1-42c1-a33b-0651d210892b.roa
Signing time:             Thu 30 Oct 2025 20:57:24 +0000
ROA not before:           Thu 30 Oct 2025 20:57:24 +0000
ROA not after:            Thu 04 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1444::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:b0:44:39:5d:f6:76:88:7e:25:ed:47:64:d2:43:9d:e0:58:6f:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 30 20:57:24 2025 GMT
            Not After : Dec  4 23:59:59 2025 GMT
        Subject: serialNumber=f014855e566aebde6f56823c0c2a264535edc2ee895d6f30e9d31f499aa67369, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:af:e1:6e:23:b7:a9:fd:0e:09:6c:b8:5e:52:
                    97:7c:67:74:21:5b:5b:68:0d:13:33:2a:c7:01:91:
                    c5:10:5b:95:4b:53:13:60:eb:7f:11:3f:c6:6e:5b:
                    95:b6:ea:eb:8e:f9:7c:3b:9c:2b:a7:a3:cc:78:13:
                    37:63:b6:d4:b1:a9:84:62:1f:ea:a2:1a:8b:5c:85:
                    16:52:24:66:e7:94:07:d5:23:ea:ec:dc:3d:43:08:
                    ec:4a:f0:3e:e7:8c:e9:f0:48:d2:ee:15:0c:96:69:
                    a7:ae:10:09:fa:a5:cc:ff:1d:1d:48:db:fa:81:64:
                    1d:09:bd:b4:7c:28:9b:e4:e7:02:2b:f7:1f:ab:18:
                    01:2f:5f:d4:a8:16:a7:ff:9b:8a:53:b8:74:99:7e:
                    c2:dc:20:ff:1b:21:f5:24:b0:d6:70:58:bd:e1:7e:
                    21:93:6d:03:70:53:0d:0e:ef:f1:11:8a:22:27:df:
                    25:dd:c6:7a:c9:4d:1d:a1:27:6e:ea:94:3c:34:49:
                    ff:05:c2:2c:0e:85:db:45:13:8e:12:75:7f:e1:f8:
                    4d:55:39:4d:b5:82:c0:73:84:05:d9:89:da:e1:ca:
                    42:27:f5:c2:56:ac:da:90:92:21:61:b5:d3:c4:b6:
                    44:89:5b:c5:cc:a6:c3:65:88:23:5c:68:0a:27:a2:
                    78:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:F1:17:EB:B6:D7:B2:84:AA:6B:15:A1:02:93:E6:56:02:89:4F:82
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4f8a8c7c-e8b1-42c1-a33b-0651d210892b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1444::/47

    Signature Algorithm: sha256WithRSAEncryption
         ba:a2:23:1d:69:c6:49:a6:ee:88:19:ce:86:24:a0:ed:7e:81:
         61:77:11:a9:9b:19:43:ff:68:dd:91:37:ac:9c:83:c9:b6:4b:
         2d:71:b8:63:25:b1:63:61:d6:34:34:ac:f7:5d:2d:86:45:f4:
         6f:9b:48:f4:98:ff:8f:f8:f8:ef:08:33:87:26:79:23:b8:99:
         31:f4:03:c3:29:07:aa:e9:e3:6a:12:e4:12:62:1a:3d:8d:88:
         51:39:1b:5b:58:89:7f:2a:e1:b1:07:db:23:ea:a0:fb:eb:8d:
         03:e6:fb:88:8c:c4:a0:1c:30:82:b2:b2:30:5d:f2:22:21:61:
         87:4a:ad:02:8b:92:6d:d5:fc:82:22:f1:22:02:f9:6a:35:90:
         57:c0:3e:d9:89:3e:93:88:40:f5:5c:09:97:f6:ab:72:cf:c3:
         e2:90:e6:2e:a4:df:22:32:4e:14:15:32:3f:98:d3:a7:d9:47:
         1f:de:c0:d4:c4:a4:25:39:ad:0e:2c:4b:ab:e9:9a:47:96:33:
         42:51:02:6b:d4:65:31:ac:3b:99:3b:a3:39:41:39:4c:40:01:
         7d:ab:4c:d4:63:65:68:b4:38:4b:5c:be:d6:98:4c:5c:6b:e7:
         9e:69:4b:a4:60:47:d1:74:86:78:55:c1:59:07:49:40:21:35:
         4f:34:b8:ea
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:42:40 2025 by rpki-client