Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/605c8b7f-777b-4016-9cb5-cf5c88cf90c1.roa
File:                     605c8b7f-777b-4016-9cb5-cf5c88cf90c1.roa (raw, json)
Hash identifier:          Vjz7kVDjbjhtT9r+Tcrgy4JZJvOjPx6FVGegoPpPgBs=
Subject key identifier:   D7:F2:70:AE:52:3C:B4:C0:B4:02:20:AE:0D:49:48:DB:F8:C9:20:8C
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       57DC0F715AC3D850F7BBE767F67ADAAFB97E9A8B
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/605c8b7f-777b-4016-9cb5-cf5c88cf90c1.roa
Signing time:             Fri 31 Oct 2025 06:51:51 +0000
ROA not before:           Fri 31 Oct 2025 06:51:51 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2be0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:dc:0f:71:5a:c3:d8:50:f7:bb:e7:67:f6:7a:da:af:b9:7e:9a:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 06:51:51 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=e6ac661a74fc5552f29f1f79a9765244cdb68826cf81e7a0ac565c6e8e0f4165, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:63:f6:8c:eb:d1:c7:a2:49:b5:22:85:7e:4e:
                    05:f9:12:a0:47:04:1b:68:31:d6:57:a8:74:b4:9c:
                    c1:83:91:2b:e7:01:cb:86:d3:4e:e3:c9:8a:47:c5:
                    4d:9f:bb:6b:b7:e6:5d:ac:03:ae:4e:a1:34:08:74:
                    08:2f:04:fb:0e:ef:70:3e:9f:25:0c:07:f1:e1:81:
                    c3:f2:2c:95:73:80:eb:9a:f9:64:e6:c7:49:b0:a2:
                    a5:b7:1c:4f:85:8d:7c:5b:e0:23:28:ff:3f:e2:19:
                    9d:0f:0f:65:01:60:e4:b3:34:68:cd:7c:ab:5a:58:
                    ce:ca:4d:99:68:b7:54:e2:08:b8:c5:0c:10:83:ef:
                    cf:9f:80:69:08:82:f7:e1:bc:12:5b:73:57:32:43:
                    66:a5:e8:0d:de:cd:58:9c:e6:3b:6b:1b:bd:19:1a:
                    f0:18:9b:78:05:21:f1:6d:6e:7c:6f:f3:37:c3:9e:
                    90:9c:24:ba:84:5d:cc:89:25:7d:67:25:8c:1c:42:
                    1c:d9:b0:c2:7d:a1:be:44:d0:ec:5e:77:95:8e:04:
                    b7:ad:c9:9b:9c:d5:7e:33:0f:2c:1d:c5:85:85:8e:
                    88:06:4a:66:30:04:3f:e9:cb:8f:4e:65:58:26:f2:
                    d0:ce:1e:92:99:1d:7c:bc:bf:29:05:d1:cc:70:73:
                    29:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:F2:70:AE:52:3C:B4:C0:B4:02:20:AE:0D:49:48:DB:F8:C9:20:8C
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/605c8b7f-777b-4016-9cb5-cf5c88cf90c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2be0::/44

    Signature Algorithm: sha256WithRSAEncryption
         16:1d:9f:71:c2:13:f4:b7:66:b2:e0:39:3e:74:f2:20:d3:f2:
         18:4e:71:82:3c:3a:b1:a3:fc:20:a3:5a:5c:2e:98:f3:fe:24:
         df:cb:5e:7b:d3:83:2c:95:75:e9:9e:c5:b0:27:50:b2:fc:d2:
         05:7e:f9:90:91:f0:f7:c4:25:14:d7:47:8c:1b:3f:ea:33:e4:
         54:7d:3b:16:25:6f:98:50:03:38:a6:01:f3:c0:bb:39:9f:e2:
         ca:1d:da:16:31:10:10:66:fd:0c:03:47:c3:73:a9:63:1c:15:
         33:ba:ff:0d:bf:56:51:9f:7d:c5:7c:0d:a9:8b:12:66:21:a3:
         d5:bf:7c:73:bc:92:13:40:7e:f4:87:a0:a7:36:9c:19:63:77:
         48:dc:e2:c8:8c:e5:65:c3:03:c3:b0:95:f1:9e:0f:68:39:b8:
         3b:be:d9:72:23:18:7b:f0:aa:12:41:dc:ff:7e:12:fd:d0:5f:
         b4:e2:52:32:ab:cf:31:45:26:17:a0:02:54:8e:91:fe:58:40:
         7e:b7:3c:51:97:f4:14:36:57:cb:5b:de:11:93:11:c3:f1:36:
         4a:ce:9b:37:98:f8:02:b4:32:7a:1e:60:55:0a:d4:fc:d7:f3:
         e1:35:f0:df:e0:52:01:d8:ee:7f:cc:54:0d:f8:70:97:f3:49:
         9d:06:11:07
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:55:53 2025 by rpki-client