Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/669d9076-07f4-45af-943c-80e3fa7a6706.roa
File:                     669d9076-07f4-45af-943c-80e3fa7a6706.roa (raw, json)
Hash identifier:          WNKu4d5x7ejzyb9z1US6VjYsza6xS4nCUk3FDGjOkBw=
Subject key identifier:   89:DF:2B:76:83:C9:FF:DA:F2:FD:99:2E:AA:7A:12:ED:7C:40:C6:42
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       542965CE2E2B263D3EECF10A5FDF14F73159E7AA
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/669d9076-07f4-45af-943c-80e3fa7a6706.roa
Signing time:             Fri 31 Oct 2025 00:56:25 +0000
ROA not before:           Fri 31 Oct 2025 00:56:25 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3884::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Nov 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:29:65:ce:2e:2b:26:3d:3e:ec:f1:0a:5f:df:14:f7:31:59:e7:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 00:56:25 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=e7c7a7d9d145939bb558afa8bbb7cb243d1c9a3682a672a6bccd1983a728c32d, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:5e:f3:0e:67:d8:19:14:e2:57:44:c6:81:6b:
                    61:76:30:20:73:76:21:05:18:d2:70:2e:92:5a:f1:
                    58:95:d7:95:f5:a5:af:90:53:a1:19:aa:c4:30:fb:
                    41:34:10:f6:27:a7:c3:71:d8:d6:02:a7:34:6d:98:
                    7e:55:46:b6:95:6e:6e:75:84:b5:ee:06:e9:8e:ea:
                    73:47:d4:46:2b:01:35:fc:df:e1:2e:ca:70:8b:2b:
                    34:88:1d:56:36:3f:ef:f4:4c:68:4f:6e:43:38:f6:
                    5d:fe:ae:8b:f5:a6:6e:ce:b3:9b:00:26:41:8a:85:
                    b6:8f:be:b1:fc:ce:77:bd:67:ec:00:2b:ac:a9:70:
                    80:95:45:f1:32:92:90:29:45:ad:54:68:09:6c:05:
                    ed:30:b4:e7:c8:08:47:d6:65:a1:0d:36:4e:f2:39:
                    59:f0:19:f9:1f:25:d0:11:21:0e:6a:d6:0a:8f:28:
                    c6:45:07:9e:c0:54:a7:bc:23:67:04:be:56:36:b3:
                    19:f4:6b:b2:ca:0a:02:d6:29:dd:80:7e:b9:f4:fd:
                    41:57:72:90:f8:31:9f:79:6f:5b:a7:17:a0:29:90:
                    98:d1:50:83:68:f8:a2:60:b1:a9:50:19:2a:41:e2:
                    3e:42:f3:64:f8:11:0d:dd:93:d2:74:ee:1c:e6:84:
                    19:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:DF:2B:76:83:C9:FF:DA:F2:FD:99:2E:AA:7A:12:ED:7C:40:C6:42
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/669d9076-07f4-45af-943c-80e3fa7a6706.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3884::/47

    Signature Algorithm: sha256WithRSAEncryption
         a4:b5:78:e3:9d:2b:0f:e9:59:98:d6:83:22:6f:38:69:1d:18:
         b2:52:3a:d5:83:ad:cf:42:05:6c:87:d5:4b:b5:62:ec:3b:04:
         ec:0b:15:bb:97:c7:ce:5f:41:47:b3:7b:59:d9:0b:d9:91:3b:
         f4:1a:b6:c8:43:40:74:00:89:d4:03:04:e6:a6:bf:12:ac:45:
         d9:1d:e0:2c:e0:11:61:f5:8d:60:4b:c4:9f:c5:12:3b:66:48:
         37:40:79:b7:67:0a:e1:94:5b:dd:35:fa:0b:8e:e5:0b:68:15:
         de:3f:cd:f1:95:8f:8e:e2:bc:e4:74:0e:f5:44:0a:2d:f4:ac:
         da:8c:59:22:ea:de:de:a9:40:52:7f:52:68:c5:97:b7:61:f4:
         a5:3c:26:a8:b4:ab:2c:1d:4b:a3:39:a0:ed:3a:c7:af:a1:6f:
         6d:1e:45:20:f8:63:47:b0:08:f7:0f:3f:71:93:71:1f:11:16:
         95:f9:10:cd:0d:bb:d0:33:e4:f9:47:3d:b7:7a:4e:d5:3a:90:
         0f:be:03:5c:a7:d3:e9:79:8e:94:1d:f9:78:2a:38:96:d4:72:
         1b:a4:9a:ed:7c:15:28:af:28:b4:c5:40:c9:0b:ef:ed:de:09:
         a3:6a:2f:4f:31:41:bf:85:60:dc:b3:6d:d0:b9:56:e4:8d:13:
         52:ff:25:df
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 16:54:43 2025 by rpki-client