Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/63bcfb34-9dfe-4919-a43b-d7a085b7dbc6.roa
File:                     63bcfb34-9dfe-4919-a43b-d7a085b7dbc6.roa (raw, json)
Hash identifier:          A7VHBPnotvapJmNeEtA9bqP8aTH9L5iB/MG65XrUKu8=
Subject key identifier:   FF:5A:E5:D3:7B:82:34:9F:73:74:31:78:1B:1F:B5:01:A4:79:05:A4
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       7B46381303B23D22706B5342D7E061954A175CD6
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/63bcfb34-9dfe-4919-a43b-d7a085b7dbc6.roa
Signing time:             Fri 31 Oct 2025 07:11:43 +0000
ROA not before:           Fri 31 Oct 2025 07:11:43 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:19e0::/43 maxlen: 43
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:46:38:13:03:b2:3d:22:70:6b:53:42:d7:e0:61:95:4a:17:5c:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 07:11:43 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=4aa50bfc52c9c55f0c4ec451bee16a1fdf85bb4ae9d0dffd0c2e3e96e4fbe5e9, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:15:93:ff:aa:a9:c4:ab:05:ae:40:fd:64:65:
                    33:3e:42:f1:59:20:87:ba:13:cb:a0:e1:94:ef:e5:
                    58:e5:16:fa:20:77:7c:60:c0:7d:3b:b4:8b:57:97:
                    b8:c8:d0:dc:18:d4:e5:e9:f0:0f:83:75:58:c2:69:
                    cb:ed:25:41:d8:bf:22:fe:72:28:6e:a2:44:17:da:
                    dc:fe:0d:ba:95:b7:ea:1f:cc:d3:71:00:0a:fa:65:
                    65:24:4e:04:31:bf:5a:80:fe:f5:d2:4c:d8:e4:fa:
                    f5:94:7a:3f:3b:1f:fe:82:8a:88:65:05:62:01:2c:
                    02:dc:73:60:77:83:f4:81:f0:68:9a:3d:57:e7:ae:
                    c5:0f:12:4f:0d:fb:9f:55:eb:56:d6:5e:ce:4d:17:
                    f5:9b:16:38:4d:2f:14:c9:e6:1a:56:2f:21:d6:4a:
                    d1:5f:dd:66:ed:3a:2e:83:56:fa:78:8e:29:75:7f:
                    73:96:5b:12:b4:0e:0d:2b:d3:2d:e2:0d:e8:5b:87:
                    a5:45:08:71:5f:e2:e5:8d:77:05:6a:28:89:43:d4:
                    25:ba:67:e7:27:51:c6:49:07:c4:ed:da:f6:04:43:
                    69:d9:35:2c:bd:06:54:05:cf:91:ad:2f:e9:3a:2a:
                    16:5e:91:61:8c:f5:8c:b6:96:e8:72:cd:e3:b1:dc:
                    a7:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:5A:E5:D3:7B:82:34:9F:73:74:31:78:1B:1F:B5:01:A4:79:05:A4
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/63bcfb34-9dfe-4919-a43b-d7a085b7dbc6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:19e0::/43

    Signature Algorithm: sha256WithRSAEncryption
         13:70:f4:e9:94:a4:85:bf:62:c5:04:6e:8d:92:da:c8:17:d0:
         35:0a:d4:5b:3e:91:50:fb:e3:58:40:68:08:78:bd:f3:34:5f:
         0a:cd:7f:85:3d:68:e3:82:97:f8:9d:69:1c:62:79:c6:8f:20:
         f4:d4:9a:09:d0:c1:ef:70:0a:47:a1:28:51:c0:87:4c:fb:b1:
         b3:df:cb:e4:9c:5c:1d:03:be:a5:07:de:60:e3:44:b9:fc:08:
         56:78:9f:42:a4:de:19:25:ca:00:5b:92:c0:49:fd:05:36:e8:
         1f:14:82:49:85:1b:12:2b:58:f3:47:88:a1:f8:16:ab:72:3c:
         0b:98:8f:4b:24:9a:41:e3:a4:07:f1:b3:7f:1e:4d:be:0c:8b:
         e5:b5:b7:80:b2:7b:05:ed:8e:05:fe:92:64:d2:bb:b8:48:87:
         d3:80:ca:75:89:cc:17:f9:99:65:ca:48:fb:52:38:e4:1b:87:
         c1:70:95:44:35:97:7c:73:4f:36:1a:10:c8:e1:58:45:7c:b7:
         49:39:76:54:cf:4e:c9:ef:ed:24:0c:a1:c8:cd:81:33:19:30:
         e3:bc:9d:de:5f:34:c1:f5:67:15:d5:11:3e:bb:a9:a2:e4:5f:
         4a:68:b7:9c:54:53:f8:4c:1f:2d:3d:6d:13:5c:bd:4d:c5:1c:
         64:a6:cd:36
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:38:46 2025 by rpki-client