Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5913115b-3d0e-4f42-bf16-81a10562b667.roa
File:                     5913115b-3d0e-4f42-bf16-81a10562b667.roa (raw, json)
Hash identifier:          Bs4OVro4UOWeRK/AecGHmDkJhh5V543JWdFUoD3QHYc=
Subject key identifier:   26:74:4F:F5:41:54:10:65:44:AE:AE:B7:FF:47:05:57:81:BD:A0:C6
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       58412C16B3E4FE5BD1619E38AA77584DE1DA96EB
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5913115b-3d0e-4f42-bf16-81a10562b667.roa
Signing time:             Fri 31 Oct 2025 05:37:16 +0000
ROA not before:           Fri 31 Oct 2025 05:37:16 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:24e0::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:41:2c:16:b3:e4:fe:5b:d1:61:9e:38:aa:77:58:4d:e1:da:96:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 05:37:16 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=442fa47695fd24f2fa58a5d7935cada47f87f94a5c28d468ae4ed6f88f2afcc1, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:34:c2:23:a6:b8:44:e9:78:16:36:c3:1a:af:
                    16:9a:58:d1:c3:26:98:64:60:80:d7:5c:5a:c0:b3:
                    e5:e4:0f:14:c4:c2:2f:75:23:2a:2b:55:fb:ec:8c:
                    1a:55:c8:94:cf:28:4f:b2:a9:f8:fc:34:45:ee:69:
                    8d:26:1d:c4:42:36:a7:a2:7c:5d:78:c6:f0:2e:82:
                    22:a7:81:c2:06:b3:e3:5a:cc:5f:31:cb:e8:c2:6f:
                    a3:34:e7:0a:8f:fc:f2:75:8d:1d:07:0b:bf:b3:bb:
                    87:2d:88:ac:fb:a7:71:0a:84:b4:f2:09:9b:97:f2:
                    3e:d0:74:28:22:9a:6e:33:61:ef:04:6a:e9:16:68:
                    c4:93:c5:d7:7b:25:4a:fa:12:a2:69:6e:b5:6b:08:
                    a6:5a:f2:f1:e4:1d:47:7c:23:d0:a5:e2:e7:e9:6e:
                    e9:c8:40:9c:14:47:1c:ba:84:6f:5b:15:9a:8d:e5:
                    1b:6e:2e:0e:cc:73:56:68:aa:96:ce:68:3e:bc:5d:
                    de:91:7d:b6:0e:07:56:88:94:e2:18:c4:34:d4:b8:
                    62:3c:ca:58:7e:b6:a0:54:ad:ce:12:cd:12:75:b5:
                    20:f7:b5:75:6e:59:33:4b:88:e8:42:eb:9c:53:7d:
                    9a:39:93:f7:52:23:1c:2c:b9:f3:9e:90:ee:52:69:
                    ba:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:74:4F:F5:41:54:10:65:44:AE:AE:B7:FF:47:05:57:81:BD:A0:C6
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5913115b-3d0e-4f42-bf16-81a10562b667.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:24e0::/45

    Signature Algorithm: sha256WithRSAEncryption
         54:52:d7:4e:16:24:9d:cd:c5:6e:8a:8f:2b:75:fe:77:a8:5b:
         ab:16:80:ff:3d:8b:98:b7:3a:91:5c:ec:65:a4:9a:43:df:ec:
         d9:a3:1b:55:e6:88:63:c4:9c:c5:b3:81:ec:43:5c:03:03:4e:
         5b:c8:06:81:28:a6:76:0c:2f:7a:31:1a:1c:c5:8e:8e:d6:05:
         52:45:7a:9a:37:10:3d:ce:f0:a7:bb:92:73:0c:70:91:a7:c0:
         ad:98:7b:84:91:5c:1f:92:b2:58:fb:b2:cc:9d:b0:8d:ff:51:
         a3:bd:11:7a:dd:f1:55:61:69:8d:3a:04:a5:0a:b4:4c:e7:35:
         c6:0a:c5:2a:6e:26:05:d4:75:b9:5a:23:d6:ce:98:b9:31:8b:
         4b:84:0a:ee:c9:6a:a1:af:61:1c:0d:06:93:39:55:fc:f5:eb:
         54:1d:e0:84:59:01:95:ab:95:eb:5c:03:33:14:14:ed:d9:05:
         ca:3f:66:6d:dd:13:e4:9c:10:b4:71:f8:c8:8b:92:a9:e1:68:
         3b:cc:b4:57:13:98:ee:16:41:77:3c:e3:e1:8b:5f:ad:a4:c5:
         d7:6c:fa:e8:6b:b0:da:40:d7:ab:a3:44:d2:7e:aa:47:f1:77:
         c7:be:56:53:bc:86:e1:ab:02:60:06:37:c3:34:23:ad:2e:e1:
         dd:95:f0:0e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:29:20 2025 by rpki-client