Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/64020128-d6ba-4882-ab7a-2dfc2e3c6fcb.roa
File:                     64020128-d6ba-4882-ab7a-2dfc2e3c6fcb.roa (raw, json)
Hash identifier:          /XIGSFZ+gsXU21SAWj/tHDH2tJxQqUr1uYtSA8npXJs=
Subject key identifier:   C5:42:9B:41:8F:CA:B3:F8:E1:07:F6:4E:7E:C1:92:24:F9:FE:B8:98
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       5643C44AEFFA8DAEF05F3580A86078757CFA5BC9
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/64020128-d6ba-4882-ab7a-2dfc2e3c6fcb.roa
Signing time:             Fri 31 Oct 2025 06:37:06 +0000
ROA not before:           Fri 31 Oct 2025 06:37:06 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1910::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:43:c4:4a:ef:fa:8d:ae:f0:5f:35:80:a8:60:78:75:7c:fa:5b:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 06:37:06 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=c211be217abc8a44dee6907441a723efa8eee37b91a70e12eef534e7d4e5dc31, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:f0:fa:64:29:fe:5f:d8:a7:7a:4b:0e:a6:e7:
                    7c:9c:c1:42:3d:57:ca:6c:73:61:27:64:2e:e6:78:
                    87:97:ac:77:df:6c:87:2b:ab:4a:75:c9:46:00:17:
                    d0:82:da:15:9a:c5:ae:33:cb:0b:4c:63:d8:dd:af:
                    d2:97:43:7e:b5:22:1e:70:a7:16:fc:89:18:16:39:
                    ed:8f:71:fd:41:59:97:99:b0:5c:67:5f:9d:d3:24:
                    37:e3:83:80:af:16:99:e1:1e:19:6f:01:59:34:69:
                    76:01:a5:81:95:3e:b4:ae:d2:b4:54:33:e0:cb:65:
                    f6:c0:d2:6d:49:c5:b3:b9:8f:e7:40:7b:01:f3:f1:
                    5f:15:05:1e:00:80:91:41:fe:23:9c:0e:3c:8a:37:
                    d3:35:85:38:18:ee:f1:c0:44:c7:94:3b:b0:eb:62:
                    b2:11:e8:07:a4:68:d3:39:c3:66:0c:2a:3b:7a:80:
                    53:00:25:d4:85:32:d2:36:fb:8d:f0:1b:25:3a:0c:
                    76:76:f5:1c:4b:36:be:98:b5:98:7b:d1:e0:2f:04:
                    aa:f9:f3:ae:38:c7:2c:58:3a:86:6c:db:75:5d:a6:
                    26:ac:e3:32:c3:c6:c0:3f:91:22:67:16:28:d8:65:
                    57:4f:81:7d:b9:fe:fd:7e:f0:2a:14:c6:d0:1b:52:
                    4f:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:42:9B:41:8F:CA:B3:F8:E1:07:F6:4E:7E:C1:92:24:F9:FE:B8:98
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/64020128-d6ba-4882-ab7a-2dfc2e3c6fcb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1910::/44

    Signature Algorithm: sha256WithRSAEncryption
         22:f8:8e:92:21:8a:98:6d:26:e5:60:85:7c:92:1e:52:d1:82:
         d5:db:f1:88:66:0d:91:4e:05:f1:27:a6:6f:64:46:fb:11:26:
         31:f3:96:c7:41:78:64:11:15:de:dd:a0:4a:ec:f8:ab:63:ac:
         68:87:56:28:66:d5:4e:4a:10:50:7b:c0:d2:b4:bc:a9:0e:ba:
         3d:08:94:46:84:37:fd:d7:91:44:0a:6d:c8:26:fe:79:e3:6c:
         58:97:61:a7:6a:51:71:6b:56:d3:f3:11:d5:da:cd:02:c9:a7:
         1d:e5:a2:45:36:85:54:e1:21:5d:e3:03:17:4a:24:d7:bf:41:
         2c:20:73:30:0b:50:74:e9:03:08:bf:1f:64:7a:fa:86:44:f1:
         47:ed:9e:aa:85:4e:de:d8:ee:e0:e4:62:62:cc:5d:d6:de:ef:
         f4:f5:1c:3c:1f:d5:ec:65:d7:2c:d4:53:5c:49:8f:0f:cf:cc:
         31:7d:1d:01:3f:83:62:85:35:9f:4d:9a:97:34:01:69:ef:b9:
         35:fe:4e:0e:2f:15:83:94:05:0c:68:ae:9c:40:6c:02:86:4c:
         a1:0a:84:f0:84:8a:fe:fe:c6:b7:cb:0b:74:2f:0f:86:66:1f:
         4a:ab:f5:0c:d0:31:b5:76:69:b3:22:f2:cb:09:ce:b8:a7:1a:
         b8:f8:17:08
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:36:56 2025 by rpki-client