Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6272251e-ee06-419f-a5e7-6553d99e8ff4.roa
File:                     6272251e-ee06-419f-a5e7-6553d99e8ff4.roa (raw, json)
Hash identifier:          Gp/3i3LDoE+Iwp0ka2bwBV1fXxnorDRDecqupJ0/jjU=
Subject key identifier:   44:8E:82:54:BA:27:0A:10:B7:E2:1E:79:C7:27:2A:06:64:71:EA:C0
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       1D43F58D50F8FDCCEA8F8CF442D1A5B3B06B6E81
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6272251e-ee06-419f-a5e7-6553d99e8ff4.roa
Signing time:             Fri 31 Oct 2025 02:23:47 +0000
ROA not before:           Fri 31 Oct 2025 02:23:47 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1320::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:43:f5:8d:50:f8:fd:cc:ea:8f:8c:f4:42:d1:a5:b3:b0:6b:6e:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 02:23:47 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=6b8ec0cc1076501ec100912689b133e684d8e5fb738423733f1b7db008f82edb, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:dd:49:86:74:67:02:19:6a:ec:cf:43:f3:94:
                    5b:24:92:20:01:06:43:1a:a7:5b:f0:e1:da:dc:51:
                    7c:de:3f:91:2a:a6:70:3d:f0:fd:12:b7:99:80:25:
                    45:af:9d:e6:2b:ee:e7:4a:52:cb:3c:e0:ad:df:fb:
                    00:40:05:d3:71:b8:a1:7e:60:5a:39:b6:db:76:08:
                    ed:06:90:bd:cb:c4:5c:5f:1a:a9:49:f2:70:97:59:
                    12:70:1d:74:31:9f:e6:e4:04:38:b6:06:32:0c:90:
                    94:82:93:7f:2d:26:cb:59:20:23:87:11:cf:2b:cd:
                    5b:72:9b:28:61:b5:77:35:44:92:56:6f:c0:98:28:
                    ce:16:66:de:97:a3:60:a2:20:25:10:e2:8a:79:93:
                    db:68:0b:15:2e:8d:50:db:8f:9c:07:dd:80:f1:e0:
                    d9:4f:a9:fb:83:a9:d5:36:80:b5:a1:81:40:9d:fe:
                    a2:96:f3:fb:42:bb:3c:27:db:dc:1f:43:6f:7a:c7:
                    ce:98:92:9a:36:e8:5d:ac:ba:c0:e5:f9:07:81:51:
                    aa:cb:47:bc:05:51:f2:83:77:26:4a:c0:2a:46:7a:
                    e4:f8:fa:bd:d1:f8:80:5a:91:50:18:19:ad:47:43:
                    11:35:54:e3:59:c5:da:73:ee:74:8e:40:78:27:81:
                    d1:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:8E:82:54:BA:27:0A:10:B7:E2:1E:79:C7:27:2A:06:64:71:EA:C0
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6272251e-ee06-419f-a5e7-6553d99e8ff4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1320::/46

    Signature Algorithm: sha256WithRSAEncryption
         4b:cb:6e:c4:33:12:d9:88:3b:00:29:8e:78:29:c4:13:1a:d0:
         8a:b7:99:16:d2:de:b8:aa:ef:8f:f3:33:68:6b:dd:4b:64:0a:
         ae:8f:7e:08:3a:7a:8f:3d:16:cf:91:9b:97:0b:0e:80:51:2a:
         9f:21:93:43:59:3b:4f:9b:f3:9a:a7:82:96:c9:c4:ec:78:ec:
         1e:af:4f:e9:72:13:31:11:24:70:68:61:88:aa:dc:be:46:5d:
         18:51:e7:fe:2e:14:f7:35:3c:03:9f:b4:15:11:c2:60:b8:da:
         86:33:52:76:37:21:4c:7b:25:a9:07:b9:d6:b2:7b:24:50:27:
         c3:be:39:a7:37:92:17:36:c9:71:57:77:bf:e3:66:11:9f:19:
         1a:e9:4b:4f:d5:97:64:b7:32:39:74:e6:33:ef:ac:2c:7d:9b:
         88:7c:94:e2:d3:d0:f2:fa:b4:e2:c7:c7:4f:da:62:94:d3:0b:
         27:e8:83:35:d3:ea:3e:f2:8e:b1:94:17:5c:9c:c4:2e:1c:4b:
         7f:c9:f7:a0:07:40:f7:ca:9f:c7:54:47:1d:b9:23:6c:fe:de:
         47:31:12:57:82:e8:b0:00:12:f1:63:af:66:92:c1:ba:ed:78:
         86:0c:84:e1:fe:49:39:f9:9c:a0:9e:e4:60:7c:66:d8:2b:a0:
         7c:8a:0e:19
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:55:39 2025 by rpki-client