Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/55672699-b45b-4880-8b07-1208c0aaba75.roa
File:                     55672699-b45b-4880-8b07-1208c0aaba75.roa (raw, json)
Hash identifier:          9lSAv+jVSn20kERj7Qtipebgv4/1u6S8QhetYnCDFv0=
Subject key identifier:   A7:CC:BF:DA:9E:71:38:B3:3B:A4:C9:8F:E0:83:90:90:50:E0:8F:00
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       6D021616FCA741A69789AA1E4BFDE200C0EAB28A
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/55672699-b45b-4880-8b07-1208c0aaba75.roa
Signing time:             Fri 31 Oct 2025 07:55:35 +0000
ROA not before:           Fri 31 Oct 2025 07:55:35 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3200::/39 maxlen: 39
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:02:16:16:fc:a7:41:a6:97:89:aa:1e:4b:fd:e2:00:c0:ea:b2:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 07:55:35 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=812f084310058511255d70554aab3a3d0667796d652f8d111ff4edcd59a7b2c9, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:cc:a7:c1:3d:7a:43:03:21:84:4a:5d:b6:0c:
                    d9:71:2b:94:ad:ef:19:5f:a2:ad:05:56:8d:0e:da:
                    47:b9:ab:6a:df:5a:1f:96:58:3d:8a:e2:e7:f2:73:
                    9f:66:c3:9f:bc:1a:a0:50:31:6f:86:5e:9b:35:be:
                    6e:7b:5e:a0:fd:81:d1:9a:d7:c9:cf:ab:16:e3:df:
                    61:67:14:38:79:a7:4e:02:c3:17:f2:9b:f2:e4:81:
                    81:80:29:4d:51:16:a4:19:ab:93:cc:4c:75:4a:3f:
                    a4:06:79:cc:bc:06:0f:04:8e:61:8c:ab:40:5b:ce:
                    c2:1d:99:af:34:3a:f1:56:e9:62:d1:96:65:72:b9:
                    18:ee:bc:cf:f4:29:f6:c0:87:f2:b2:bd:46:64:e7:
                    25:48:f1:2f:07:81:b1:75:58:8d:0f:81:db:13:25:
                    cb:00:06:51:0e:50:de:9e:2e:3f:b5:67:4a:33:0b:
                    d9:8d:7b:e4:bb:cd:37:90:a9:d6:f1:7d:96:e4:32:
                    75:9f:48:fc:c3:e1:31:41:58:35:1e:2f:27:ec:6e:
                    e1:e8:0e:3c:14:84:fd:f8:6b:b1:4a:33:23:10:0d:
                    32:38:fd:78:66:da:fa:95:9c:ae:ad:86:85:57:25:
                    c5:a9:88:33:25:e4:48:79:83:82:8f:49:63:43:b8:
                    31:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:CC:BF:DA:9E:71:38:B3:3B:A4:C9:8F:E0:83:90:90:50:E0:8F:00
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/55672699-b45b-4880-8b07-1208c0aaba75.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3200::/39

    Signature Algorithm: sha256WithRSAEncryption
         9e:6e:03:3b:e9:4b:dd:67:e9:c8:bd:64:c4:b0:90:ac:bb:15:
         8a:53:e2:f4:86:3e:9d:ac:d6:7b:e8:79:21:f1:3b:ac:93:fd:
         72:43:e0:ff:44:6c:34:77:11:20:a4:23:5d:25:bf:40:1c:90:
         75:8a:87:94:d8:6b:4f:d7:fe:7b:eb:1d:37:3b:64:26:aa:ae:
         bf:20:23:66:f8:12:5e:2b:f9:b2:84:4f:f3:70:b3:82:3b:a9:
         72:60:99:ff:86:db:1e:5b:55:52:f7:ce:12:71:5c:1c:18:41:
         d6:b6:1c:f4:10:23:68:d1:31:23:0d:8c:32:73:ca:a7:50:e7:
         57:18:f6:f3:3f:e0:ef:07:30:41:06:1d:6a:3f:5a:ba:dc:50:
         e7:1f:2d:78:06:f0:f1:ff:c2:e5:6b:4a:b1:87:e8:cb:91:d0:
         a2:54:42:ff:26:a0:83:d8:ec:dd:0e:ca:f6:25:bb:19:43:0f:
         34:54:a6:d6:c0:d0:b1:ae:ee:8e:0c:ef:73:47:b4:4f:42:1e:
         14:68:96:b6:90:88:54:33:46:b9:6c:05:a1:db:18:63:8d:ee:
         de:b0:31:8c:c0:c3:4b:23:78:29:80:a8:ec:e4:e8:5e:c7:34:
         ad:0a:d7:56:58:a7:5c:19:8e:2f:e7:89:1b:68:e5:b7:1d:cb:
         cd:57:08:73
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:05:45 2025 by rpki-client