Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/59e3e73c-e9e9-4f2a-a57c-a742f077f13e.roa
File:                     59e3e73c-e9e9-4f2a-a57c-a742f077f13e.roa (raw, json)
Hash identifier:          0HafZ7R3iFYm3J2PNZ0lueNI9ca4tIJZkp7Y4wbAH6w=
Subject key identifier:   42:BD:59:61:76:3A:0C:71:A2:A1:E2:BB:22:29:0E:A6:DF:A1:01:C4
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       5E77E71563A46396E6002A183B10E1AE749F8759
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/59e3e73c-e9e9-4f2a-a57c-a742f077f13e.roa
Signing time:             Fri 31 Oct 2025 04:23:26 +0000
ROA not before:           Fri 31 Oct 2025 04:23:26 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3748::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:77:e7:15:63:a4:63:96:e6:00:2a:18:3b:10:e1:ae:74:9f:87:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 04:23:26 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=5a79cfe1e11ff3216b014e274ac82d3e823c6ed316a50f12abcf205bdeb0b6ae, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:96:5d:68:33:24:5a:b5:77:3c:a1:7e:20:bb:
                    6c:e0:64:07:40:14:69:80:f3:c8:f4:fd:0f:1e:f4:
                    2e:d0:ac:a1:84:7b:9c:f4:38:cb:2c:3c:a3:29:e8:
                    8e:62:47:b0:26:96:ee:27:72:24:cb:ee:94:cd:a0:
                    ca:6b:f7:5c:ae:7f:6f:8a:d4:c7:ae:49:f7:cb:d9:
                    12:a3:e0:8f:93:82:25:36:c2:5e:7f:88:d2:b8:ed:
                    54:a1:4d:24:c6:e1:96:03:95:8e:2e:57:69:09:d3:
                    98:1d:d7:7e:90:b6:0d:5b:83:73:88:01:75:8c:d4:
                    1f:c9:c2:4f:cf:5d:11:6c:4a:8c:a1:fd:76:7f:fc:
                    f3:c7:b1:8f:35:17:50:fd:29:36:a5:36:20:97:5d:
                    9a:f2:33:fa:b3:21:f8:99:45:cd:d2:28:5f:af:2c:
                    b4:0b:4e:8f:f5:23:50:6e:16:87:f1:8f:5a:ad:c9:
                    0f:88:87:9e:fd:f5:77:d8:77:f8:db:ae:ff:a5:cb:
                    a8:46:bc:98:f0:2c:42:82:fd:fe:2a:f6:3c:d7:d3:
                    34:a4:cf:ea:25:a6:59:00:e6:1e:4c:72:20:74:6c:
                    9c:3d:8e:f6:f0:75:bc:fe:83:35:50:9c:22:a2:51:
                    8d:c3:2c:19:30:e8:10:a8:24:25:1e:6b:49:57:71:
                    e3:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:BD:59:61:76:3A:0C:71:A2:A1:E2:BB:22:29:0E:A6:DF:A1:01:C4
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/59e3e73c-e9e9-4f2a-a57c-a742f077f13e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3748::/46

    Signature Algorithm: sha256WithRSAEncryption
         69:67:49:18:02:4d:44:4a:eb:c1:82:c9:7b:c8:97:fc:18:29:
         6b:38:38:d8:0b:f3:38:bc:ac:0d:6e:3b:3d:41:07:dc:b4:61:
         91:99:35:5b:05:b1:a4:a3:73:cf:e7:51:af:f1:10:21:78:79:
         fc:46:16:6e:52:91:95:f6:ff:c0:82:77:07:fb:15:ba:95:84:
         81:18:b5:34:09:8d:fd:d1:a6:f9:db:e9:c1:2b:f3:70:fb:e2:
         b8:38:4b:74:02:96:e8:e2:d1:e4:e8:46:dd:9d:c7:c9:b9:8c:
         0c:ce:4e:ca:c1:37:47:5c:ed:bc:8d:34:38:29:f8:c9:0c:cc:
         3a:88:a3:96:6c:39:fe:65:e3:77:d8:cd:9e:5b:fb:2c:7f:1f:
         c2:c3:b9:b7:76:70:c0:93:28:81:49:db:c0:e3:98:f6:1c:53:
         c7:46:0a:e3:b2:bc:e2:d7:bd:68:fc:dd:0e:8c:07:fe:7a:be:
         bc:fc:22:c8:50:54:9b:2c:eb:d0:2b:ac:31:86:4d:ce:07:25:
         65:df:29:0f:8d:98:f4:e6:fb:1e:e5:a8:eb:54:a8:b9:7f:52:
         6e:fb:68:fa:a7:0d:42:a3:bb:95:7b:44:ca:64:bb:e3:af:fa:
         76:94:8a:2e:0b:a8:3e:71:bc:f9:00:cf:55:ab:bc:2f:c1:53:
         ba:6b:0c:2d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 15:20:14 2025 by rpki-client