Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6259492c-571b-436e-99e5-6e3fe0e98cb6.roa
File:                     6259492c-571b-436e-99e5-6e3fe0e98cb6.roa (raw, json)
Hash identifier:          bDp9BYnwBgYmnNZ1TuvRD8RV85Ud6JPeeVV/4N6Tu6Q=
Subject key identifier:   88:A2:41:8B:0A:10:E6:4E:08:86:C3:8D:AA:67:22:E1:11:BB:8B:75
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       49892450746D8926178C7052369E3DF2F64960D9
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6259492c-571b-436e-99e5-6e3fe0e98cb6.roa
Signing time:             Fri 31 Oct 2025 04:08:52 +0000
ROA not before:           Fri 31 Oct 2025 04:08:52 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3440::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:89:24:50:74:6d:89:26:17:8c:70:52:36:9e:3d:f2:f6:49:60:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 04:08:52 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=0dd685319285a678c9ee55cf72b33cfedafa99907dcc83ac5427e22f4833f785, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:8d:2e:09:b9:e9:4f:71:80:e7:c2:b8:df:10:
                    0b:15:90:91:03:ed:da:17:71:c9:e9:ca:ff:c8:ab:
                    4b:56:c2:40:ab:09:8a:94:8d:d0:56:1c:2b:d3:67:
                    6b:b6:11:93:f8:da:33:b0:c1:ea:aa:09:35:e5:e5:
                    e9:e1:5f:f0:75:e8:b4:03:2e:70:49:c4:fc:74:67:
                    9a:95:1c:d8:d2:51:71:0e:31:54:2e:ca:b1:f8:40:
                    72:e9:bc:23:f3:96:13:c3:af:dd:a8:f7:37:d2:95:
                    d4:80:8c:b7:a7:68:56:09:b9:12:91:86:f7:7e:08:
                    32:b6:2c:39:31:07:5e:ab:91:62:70:ec:d1:44:53:
                    1a:c3:95:ad:77:18:71:1f:9d:82:aa:1e:d5:b1:e3:
                    2d:4c:b5:81:81:ee:4b:6c:b6:fd:18:70:2d:1d:58:
                    82:36:3c:a2:fd:be:e1:41:94:90:c6:97:27:ed:58:
                    d4:04:84:4c:57:46:73:01:3c:48:42:de:fc:d8:d5:
                    6d:43:08:ce:d4:fb:62:cb:33:38:f4:77:53:7b:00:
                    b4:3f:b1:ad:65:59:fa:90:66:aa:b8:07:e6:76:25:
                    bc:a4:2a:b8:24:ab:9c:56:07:2b:4d:d3:63:3f:ce:
                    d9:09:51:ae:4b:88:5e:8b:8b:35:74:e9:93:82:2d:
                    6d:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:A2:41:8B:0A:10:E6:4E:08:86:C3:8D:AA:67:22:E1:11:BB:8B:75
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6259492c-571b-436e-99e5-6e3fe0e98cb6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3440::/46

    Signature Algorithm: sha256WithRSAEncryption
         19:46:dc:78:0f:b1:aa:d2:0c:39:b7:8c:f9:a4:31:4d:d6:a8:
         c6:9a:d2:11:ee:76:08:c3:d7:6e:2a:27:2a:3c:a3:ae:e8:b8:
         63:3b:24:4b:12:db:ad:1a:d7:10:b8:e4:e0:24:f8:70:e4:5a:
         bc:9e:7f:2a:94:bf:87:ee:87:c8:d8:67:1f:50:4f:26:3e:f1:
         ad:dc:87:4a:e2:18:e8:fb:5f:84:2c:73:7f:af:7f:c5:42:b5:
         4d:16:05:ca:19:42:0f:dc:17:e2:06:45:96:4a:ac:28:7b:c8:
         8c:50:1f:90:b7:2d:ee:07:9a:3e:36:d8:53:72:ac:13:ba:6c:
         35:bf:fc:79:e1:71:08:46:0b:f6:91:e2:ab:6f:9c:a9:9f:cd:
         48:14:6f:d2:c9:8b:d7:a8:88:be:d7:5d:07:85:bc:10:d7:ed:
         03:01:cc:6e:23:a1:02:e8:d9:1e:5a:90:d3:40:68:4a:b5:76:
         77:ba:b7:f0:0f:b0:af:d1:d3:19:be:d8:a7:d8:a6:b1:9b:ff:
         1e:e2:b1:85:fc:97:2c:cb:5d:e4:c0:47:fd:92:47:d1:15:bc:
         54:33:cc:ea:32:ff:ed:b1:3b:23:2d:a6:94:06:1d:d9:48:5c:
         a2:db:10:f2:fb:2d:db:3a:7e:54:cb:88:e2:99:cc:02:79:bf:
         81:4a:ac:fb
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:45:58 2025 by rpki-client