Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6335698d-6526-48a5-aa85-07b710123109.roa
File:                     6335698d-6526-48a5-aa85-07b710123109.roa (raw, json)
Hash identifier:          tZrRQpjzxVXOaLWtlig5KpBEVDOWrBDdz3xqzwxyczo=
Subject key identifier:   60:C7:ED:A2:FA:B0:73:AB:69:B2:29:D7:82:53:7F:B2:1E:A7:41:90
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       6CFBF991ECE1E9993D966C14895FD74FAF6BEAB9
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6335698d-6526-48a5-aa85-07b710123109.roa
Signing time:             Fri 31 Oct 2025 06:10:11 +0000
ROA not before:           Fri 31 Oct 2025 06:10:11 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:38d0::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:fb:f9:91:ec:e1:e9:99:3d:96:6c:14:89:5f:d7:4f:af:6b:ea:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 06:10:11 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=287884bbf639796d32d3bfaedad1889fd8225fa9c14a3c1f8e61950b9c826b38, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:66:71:c2:eb:20:b5:1a:bc:74:7a:7c:f0:d2:
                    73:19:fc:4b:e3:85:7a:08:d4:ab:46:03:06:a4:be:
                    21:0b:e1:2f:9c:58:60:63:fc:56:96:f5:cd:39:a7:
                    c8:f8:bc:ca:09:0a:d2:c7:8d:1c:02:c4:e1:46:50:
                    96:31:ca:5c:37:a4:43:c3:bf:fb:34:96:33:c5:41:
                    ce:c8:2f:11:8a:fd:12:9a:6a:f6:f6:d1:27:96:4d:
                    ae:27:0e:36:9e:96:20:2c:53:67:29:11:e1:52:63:
                    df:66:9b:ff:15:db:4f:fd:99:0e:d1:75:29:61:21:
                    dc:41:b8:51:f9:0b:ec:28:f1:a0:3d:14:53:d4:94:
                    32:73:2e:20:38:26:5d:aa:13:85:c2:44:05:9d:dd:
                    2c:e4:a7:48:6a:2e:0f:21:46:e6:00:20:b6:bd:72:
                    cf:cc:ae:07:45:84:d4:62:72:e4:97:2a:38:9d:e4:
                    92:05:83:08:43:55:31:07:fe:32:33:e1:b4:4d:c1:
                    34:e2:5f:32:fe:0e:19:7a:aa:cb:ec:c0:51:e7:3a:
                    c7:be:6c:29:96:bb:b5:4f:44:1d:d2:9b:4e:57:94:
                    e0:85:f1:93:b9:be:48:60:97:f0:40:81:2f:4e:8a:
                    0e:ed:7a:4b:21:1f:4b:dd:e3:16:b1:8b:a5:70:c8:
                    e6:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:C7:ED:A2:FA:B0:73:AB:69:B2:29:D7:82:53:7F:B2:1E:A7:41:90
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6335698d-6526-48a5-aa85-07b710123109.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:38d0::/45

    Signature Algorithm: sha256WithRSAEncryption
         ad:98:99:7c:f9:0d:40:71:57:d2:95:52:84:a5:7d:a3:0a:a1:
         87:02:86:32:18:c9:cb:f8:5a:c6:aa:5e:9f:73:93:c7:52:9b:
         76:b0:9b:67:6c:c1:1b:56:0a:5c:7d:47:8a:75:fd:ee:97:ef:
         f7:b5:4c:e5:f2:67:90:69:a2:fa:74:2c:70:ea:da:c3:89:61:
         17:f6:9a:f5:cc:62:10:0c:39:d5:46:8f:e7:7e:cb:bd:11:54:
         4d:96:84:83:a5:63:23:32:a0:8a:cb:a1:cc:33:bd:88:46:a9:
         7e:d0:0e:4c:97:ed:3a:82:8f:3a:84:3e:96:1f:a0:f2:5e:64:
         a9:ea:c9:32:cd:80:a4:be:e7:21:a1:c5:ef:dd:46:2b:86:09:
         67:33:93:1f:9b:57:09:59:a8:a0:de:ba:df:6a:9e:b6:85:9b:
         81:47:be:73:35:f6:16:3b:81:6f:f5:c9:a0:40:b0:80:1f:6a:
         37:62:27:31:f9:20:4b:aa:11:db:4a:a0:ec:0e:81:c4:0c:a5:
         10:6a:9d:dd:e5:32:17:c3:77:6b:8d:6b:f6:b3:58:a3:cd:ba:
         2f:64:37:de:40:c7:91:c1:ef:aa:9e:1a:fd:11:5f:ca:cb:0b:
         64:89:84:f1:35:34:0a:ea:df:76:22:12:5c:f5:be:59:82:c6:
         09:b4:77:c6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 12:31:30 2025 by rpki-client