Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/515dc9ad-18de-4cdb-bbaa-296a369e8dfa.roa
File:                     515dc9ad-18de-4cdb-bbaa-296a369e8dfa.roa (raw, json)
Hash identifier:          +KYAfS1BzvbeVoMCp4haDQKMlWvdGOtqpbw1chsekdU=
Subject key identifier:   F1:1E:15:3F:86:E3:2F:3B:21:2A:C4:B0:1D:9F:E1:7D:A9:14:B9:A0
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       30A433DB45FC515E273D556D9AFC5B8D72BAB6D4
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/515dc9ad-18de-4cdb-bbaa-296a369e8dfa.roa
Signing time:             Fri 31 Oct 2025 06:56:45 +0000
ROA not before:           Fri 31 Oct 2025 06:56:45 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3760::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:a4:33:db:45:fc:51:5e:27:3d:55:6d:9a:fc:5b:8d:72:ba:b6:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 06:56:45 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=3122cebccc71e49ea5423c3f6cf94ec7c2549ccfb4be5e5211889003039b2c89, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:6f:da:d2:67:9d:f9:f3:d7:4d:64:fc:2a:be:
                    8d:bf:37:80:f3:9f:79:03:42:b1:47:e7:d1:1e:71:
                    b8:00:62:82:91:5f:ad:13:8f:bf:7f:b9:a0:29:2d:
                    dd:06:07:e9:47:54:b0:90:63:3c:57:44:80:63:9f:
                    44:f3:9d:28:b1:3a:fa:a3:ee:89:e6:ef:4a:87:e2:
                    19:db:01:9e:e2:c1:27:6d:a8:0f:f2:c3:4d:2b:d3:
                    99:be:c4:5d:88:34:11:90:e4:74:6e:21:cf:b5:07:
                    37:f5:f2:a2:f2:fa:d3:ae:06:52:79:f8:04:57:cb:
                    75:65:2c:c4:83:f1:20:a2:00:78:d2:db:a2:a7:71:
                    ed:d9:ed:9a:99:c2:0b:7e:f3:3d:ba:01:39:a4:20:
                    86:89:d0:0c:cd:3b:5a:bd:5c:19:3e:31:fd:3c:1f:
                    8e:bc:47:76:c3:0a:f5:a3:52:c2:80:c3:4a:8d:ab:
                    e7:fd:7a:89:2a:87:63:e3:a6:74:5b:19:86:7c:fd:
                    4f:26:f9:81:85:74:43:31:82:e3:00:6d:4a:3f:0a:
                    56:de:1d:e8:e0:49:d4:08:07:c9:3a:30:ee:9d:51:
                    a8:c5:d5:cb:b8:1d:50:b1:bc:e6:88:68:dc:35:3b:
                    a0:d2:11:a1:2e:78:b6:1e:bb:42:95:ed:07:f6:70:
                    fb:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:1E:15:3F:86:E3:2F:3B:21:2A:C4:B0:1D:9F:E1:7D:A9:14:B9:A0
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/515dc9ad-18de-4cdb-bbaa-296a369e8dfa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3760::/44

    Signature Algorithm: sha256WithRSAEncryption
         4a:32:69:80:3f:55:ea:32:62:76:6c:54:ff:5b:7b:9a:94:11:
         a2:c7:d3:52:ba:86:99:4f:ce:50:66:b0:24:f0:84:14:6c:83:
         68:72:e1:6e:00:cf:0a:38:b0:78:77:5b:9a:94:35:cc:7d:0d:
         2f:d9:c2:61:f3:b9:70:e9:68:ff:d8:05:9a:01:c2:68:88:f9:
         2a:2d:96:e8:86:5f:10:c4:15:ee:5c:25:f9:70:72:c2:78:79:
         4a:29:4f:46:7f:84:ff:f6:c6:cf:4b:37:72:43:b0:ae:87:9a:
         3a:1f:ef:11:51:04:a4:f3:86:b3:0c:57:d5:40:5a:83:18:05:
         91:9d:15:c9:c2:b9:02:29:94:a0:bb:0b:7c:f6:4a:ef:08:88:
         78:84:15:94:25:9a:da:c4:c6:ef:4f:5d:dd:b4:04:41:59:a9:
         48:ec:75:6c:73:22:3a:ae:cb:27:d7:ec:b0:50:78:82:1b:bc:
         d3:d5:0e:2d:08:bd:10:42:ec:a3:aa:9c:94:3d:70:4e:7c:0d:
         a3:98:e7:ac:7c:b9:07:1d:01:96:6a:0a:93:73:ee:3a:2c:c4:
         d2:1e:eb:f0:8e:57:0f:c2:ca:2e:cf:69:46:a4:36:44:f1:ec:
         01:a4:1d:96:b1:5b:b7:62:17:a4:5a:bd:04:85:d9:7f:e8:30:
         f2:ab:eb:0d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:40:37 2025 by rpki-client