Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/58d3b977-4f2a-482d-a12e-cff6db5d27de.roa
File:                     58d3b977-4f2a-482d-a12e-cff6db5d27de.roa (raw, json)
Hash identifier:          +LmDWS3FSdFaJIxswkrSs4HbWlpFeW/mfa7tIvJL/Rs=
Subject key identifier:   7F:A8:DE:39:62:69:B8:59:D8:3D:13:D0:C5:F8:B5:0A:D3:D5:B5:25
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       035717CC71A4FF0FCE01C255ED47DFC5F128871B
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/58d3b977-4f2a-482d-a12e-cff6db5d27de.roa
Signing time:             Thu 30 Oct 2025 23:27:01 +0000
ROA not before:           Thu 30 Oct 2025 23:27:01 +0000
ROA not after:            Thu 04 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2d40::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:57:17:cc:71:a4:ff:0f:ce:01:c2:55:ed:47:df:c5:f1:28:87:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 30 23:27:01 2025 GMT
            Not After : Dec  4 23:59:59 2025 GMT
        Subject: serialNumber=31c32146306aabea43cc93b595f865819b3189ace3588331f725a5a502f609c6, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:46:1d:e8:1c:52:7c:a0:2f:cd:26:c4:db:48:
                    02:48:1f:97:f9:b2:cb:42:34:cb:f2:c5:5e:22:c4:
                    bb:8e:38:94:d1:f6:32:5f:64:58:62:f3:06:75:5f:
                    9b:0c:4d:d6:7b:0d:ad:47:9a:fa:19:aa:e0:05:f1:
                    41:e0:c3:69:72:05:26:c2:14:ba:87:64:55:e8:55:
                    b7:51:12:1b:07:13:a9:5c:36:d9:99:92:27:9f:84:
                    e9:7d:8f:b0:53:dc:85:88:7e:c7:d0:38:df:1e:eb:
                    6f:67:74:c4:db:6f:47:de:d1:d2:74:96:05:0d:21:
                    05:a8:5e:ca:4d:1a:3c:5d:30:86:10:17:c4:8d:d0:
                    cf:05:83:da:80:f0:af:88:f8:f8:3a:e6:75:24:0e:
                    59:fe:5d:5f:e4:e9:92:12:e4:d9:d3:93:3a:b7:b9:
                    21:02:96:18:29:5c:62:7a:53:09:12:96:e4:21:7e:
                    b0:ff:b2:1c:7f:c3:9a:3b:ec:31:3e:d5:18:4d:16:
                    4d:12:d3:fe:3c:4f:50:e2:ab:1e:84:a4:2b:7d:2d:
                    c2:cd:2a:b6:69:96:8c:19:a5:d8:38:a4:1d:31:c9:
                    0b:31:70:5c:fc:b2:70:63:2f:73:56:bb:f0:9f:49:
                    21:bb:5f:4f:9d:2d:ee:5c:8b:49:22:ca:ae:b0:da:
                    b7:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:A8:DE:39:62:69:B8:59:D8:3D:13:D0:C5:F8:B5:0A:D3:D5:B5:25
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/58d3b977-4f2a-482d-a12e-cff6db5d27de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2d40::/47

    Signature Algorithm: sha256WithRSAEncryption
         6b:5c:22:6d:b3:6b:4d:83:5a:b4:58:70:f7:fd:fd:7d:c1:9d:
         65:2c:70:fc:30:89:4f:a4:3a:ea:a2:ef:24:a7:7a:d3:c7:ce:
         f6:30:22:32:a8:fe:fa:8a:34:76:0b:81:89:41:95:c8:df:cd:
         1d:c3:73:91:42:10:9d:ae:22:09:13:e0:18:89:e4:19:ee:17:
         c8:01:0c:e8:30:02:79:49:1a:ef:73:d0:57:2b:6e:d3:8c:12:
         06:7a:4d:08:06:0c:54:c5:12:ed:f4:df:83:bd:19:e5:7d:f2:
         53:d2:fc:b8:6e:86:e8:6d:cb:b4:dd:c3:96:86:cb:d6:32:e5:
         ee:5d:f6:0e:9e:a9:b8:bd:0c:df:3d:bf:e9:57:15:0a:e4:06:
         c5:c5:7e:e1:04:ab:54:5f:2d:94:0b:fa:04:3e:5e:89:c5:0c:
         83:3d:71:c8:4e:16:95:14:3e:da:89:cd:17:49:ca:cb:17:95:
         cc:66:60:31:79:e0:ba:7e:08:4c:f3:32:43:b9:a7:2f:c9:3a:
         51:4b:3c:f3:d2:a9:41:72:56:65:17:ea:df:6e:4b:02:b8:fd:
         bf:c0:7d:cd:af:71:df:26:38:1b:61:ab:f5:05:e7:b8:f0:77:
         20:c8:2e:5c:16:fe:95:0b:ff:8a:a6:da:45:19:12:3a:92:7e:
         5c:6b:d6:49
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:34:02 2025 by rpki-client