Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6686634c-f4ac-44c0-8567-803c55fbd3cd.roa
File:                     6686634c-f4ac-44c0-8567-803c55fbd3cd.roa (raw, json)
Hash identifier:          QJlbuzw2AogGjSmERB2qwWbGunKDSHHAYI1l7CtiMFM=
Subject key identifier:   26:33:12:AF:BA:CB:A0:F1:B5:A9:D0:26:38:05:87:A7:DE:52:D4:9F
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       721698AC1D723FEE0D82C473C57CECC14355F934
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6686634c-f4ac-44c0-8567-803c55fbd3cd.roa
Signing time:             Thu 30 Oct 2025 22:40:18 +0000
ROA not before:           Thu 30 Oct 2025 22:40:18 +0000
ROA not after:            Thu 04 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1f52::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:16:98:ac:1d:72:3f:ee:0d:82:c4:73:c5:7c:ec:c1:43:55:f9:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 30 22:40:18 2025 GMT
            Not After : Dec  4 23:59:59 2025 GMT
        Subject: serialNumber=2a87d8adf926c8d14f3104ea852e1d84072259eb3fec55685ad6a0691d022210, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:54:d2:21:6a:c0:b5:70:e5:7d:6e:b3:14:4d:
                    22:ae:8f:45:10:5c:ff:6e:81:3b:ea:4c:81:a6:0e:
                    31:2d:5c:fe:86:1e:cc:7c:2d:6e:fd:8a:17:83:64:
                    ff:75:dc:ca:b9:48:ee:bc:5d:c8:f1:09:47:66:ee:
                    40:82:a7:2a:99:5a:b4:0f:0c:dc:49:dc:59:f4:3a:
                    1c:53:16:a8:06:1e:1f:e8:0b:8f:3c:0a:64:88:4a:
                    34:1a:d5:db:ee:c4:1e:66:17:7e:09:2f:8a:f7:0f:
                    bb:16:ca:25:93:53:6b:91:0e:ed:f4:a6:69:04:cc:
                    32:c7:03:1d:10:c3:98:73:6e:c2:4e:27:31:df:41:
                    03:ac:01:12:b7:b6:bb:67:9c:9b:64:d7:2d:83:ec:
                    2e:2f:f8:44:02:e3:f5:92:f5:73:d0:51:4e:98:6f:
                    6e:0d:74:e6:54:9d:65:5a:f1:e0:ed:85:c1:de:3d:
                    dd:ca:46:3d:89:30:92:e4:0f:a0:f9:b7:a6:2b:b5:
                    ee:ff:53:11:0c:97:26:ba:8f:ff:c8:08:cd:7e:ba:
                    e7:67:c5:31:6c:fd:50:73:a5:c7:1d:c6:2b:0a:91:
                    05:3d:99:92:a5:5e:92:6d:54:95:76:b0:1a:93:4c:
                    2d:f9:c5:ba:93:ed:cc:50:db:e9:31:8a:7b:56:e5:
                    aa:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:33:12:AF:BA:CB:A0:F1:B5:A9:D0:26:38:05:87:A7:DE:52:D4:9F
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6686634c-f4ac-44c0-8567-803c55fbd3cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1f52::/47

    Signature Algorithm: sha256WithRSAEncryption
         18:05:9c:6d:00:c5:62:47:4f:a7:ff:7c:93:13:2d:ee:6c:48:
         79:16:82:8c:a5:75:0a:f6:b6:1c:30:d1:fd:5f:d2:1e:f5:91:
         99:fa:f6:c0:18:98:96:32:a6:fa:75:b8:c2:0f:fb:c8:00:fe:
         5d:c0:06:52:3b:c6:59:78:18:54:8b:63:94:c1:01:45:cd:3c:
         00:e6:67:46:4e:f5:a4:c9:81:ec:aa:6c:36:70:ec:11:e1:38:
         17:18:a4:97:fb:71:48:8f:ad:d0:24:da:82:21:8a:bc:f2:ac:
         20:b8:68:93:13:13:79:8f:3d:78:6f:48:29:be:30:06:21:6a:
         7c:59:c9:35:de:4f:53:43:10:0c:fb:0c:69:ee:a6:ba:04:7b:
         09:e6:d8:47:49:52:0f:36:c7:f1:f6:8d:8b:09:32:01:68:ab:
         cf:17:97:80:de:03:0e:92:48:cb:fe:63:7b:9e:41:90:41:06:
         6d:ee:30:df:e2:c7:92:4c:22:f2:86:3a:a4:c0:36:f8:a7:f1:
         df:52:41:14:3e:7f:84:6b:23:43:ac:d3:17:67:c2:f0:b2:53:
         aa:09:28:37:4e:7d:b1:27:c8:9a:35:18:56:6f:34:65:f8:80:
         63:d0:36:d6:6f:cb:27:22:3f:62:20:d2:85:31:4c:70:3a:66:
         24:f2:42:d0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:35:00 2025 by rpki-client