Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6cf712d8-d676-4ad4-a714-5c45d1fa9b75.roa
File:                     6cf712d8-d676-4ad4-a714-5c45d1fa9b75.roa (raw, json)
Hash identifier:          bRvaeFPgjAtm5PNQAFDwEBXL00uk5p0QfeKY8MeJUq4=
Subject key identifier:   D7:CA:00:44:4E:D9:76:CF:7B:CE:0B:07:38:EB:37:61:7A:DE:50:71
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       02E345C561D915F7401CED18173A4F3E00236D93
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6cf712d8-d676-4ad4-a714-5c45d1fa9b75.roa
Signing time:             Fri 31 Oct 2025 05:08:51 +0000
ROA not before:           Fri 31 Oct 2025 05:08:51 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:13a8::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:e3:45:c5:61:d9:15:f7:40:1c:ed:18:17:3a:4f:3e:00:23:6d:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 05:08:51 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=0a8b635450b01427e6c8a9601dcd390bcae5747959188cf48a1de83d1d9da1f3, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ee:30:1d:0b:c9:a3:8f:89:45:0d:f1:5e:cf:
                    b0:2b:03:bc:09:16:8a:69:8d:fa:d1:95:c6:80:73:
                    f4:f9:e9:da:e0:3f:1e:5a:ca:9a:3e:a0:c7:c2:67:
                    8c:90:d8:6e:66:83:9e:f5:83:7f:b4:5f:23:4d:86:
                    35:23:c7:9b:2e:b5:2e:ed:16:da:ae:d4:c6:c9:69:
                    ca:02:d1:e6:bb:00:ad:b6:d2:2a:5c:07:e3:9b:09:
                    0c:4d:74:5c:50:22:40:e0:d5:64:4e:c4:9e:b6:72:
                    07:a1:6d:8e:c6:07:e4:53:04:e0:31:78:76:af:77:
                    97:76:d8:6d:5d:08:11:7b:a8:a7:b1:d6:a9:6b:54:
                    6f:d6:85:84:be:44:4f:fc:69:40:80:77:47:fc:a8:
                    5c:1c:e5:bd:c4:c0:3a:e5:c1:45:80:79:f6:bb:c7:
                    4e:40:34:14:b4:dd:e2:26:69:77:19:47:b1:dc:df:
                    5f:31:37:b4:b4:ff:41:ec:1f:b7:ff:c1:08:61:da:
                    ea:93:de:27:bd:63:07:83:24:11:b9:ec:ba:36:c4:
                    1a:c1:29:0e:e2:47:91:15:19:66:5c:87:71:2b:18:
                    10:b7:07:59:b0:11:a1:98:35:7c:80:5d:c7:ca:0c:
                    3e:07:aa:3f:0b:d5:5e:1f:c2:26:12:2f:8f:b0:f4:
                    8f:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:CA:00:44:4E:D9:76:CF:7B:CE:0B:07:38:EB:37:61:7A:DE:50:71
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6cf712d8-d676-4ad4-a714-5c45d1fa9b75.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:13a8::/45

    Signature Algorithm: sha256WithRSAEncryption
         50:bf:19:22:f3:4e:d4:27:5f:1c:3f:d3:e7:75:38:c1:d4:18:
         73:6c:65:1d:07:31:ea:00:58:13:ab:3c:b0:a9:6f:34:a4:33:
         39:cc:40:f8:50:d1:da:86:02:8c:90:bc:a1:22:87:90:22:45:
         06:6b:e6:af:c6:5d:c6:10:95:fa:e5:99:e2:a3:1c:3f:7d:a0:
         c4:72:ed:89:25:20:23:71:ef:18:7c:a3:b3:d5:23:7c:60:b3:
         9f:86:3d:29:c4:a1:33:cb:de:6c:9b:b1:c9:b5:77:cd:37:d5:
         fb:c0:f9:11:47:d7:29:2c:3b:89:65:56:f8:bb:74:d0:91:10:
         5f:af:69:4d:27:7c:93:10:67:58:25:ce:73:49:e7:1d:9f:12:
         9c:9c:26:7a:74:81:a0:97:b3:c1:8e:ef:c5:88:3a:01:53:b2:
         37:a8:b6:14:f2:54:96:0b:19:79:72:6d:b9:52:7a:df:fc:f9:
         65:1a:b2:cf:fe:a7:48:d1:85:67:2b:73:f3:d9:44:49:8d:b6:
         ea:08:7c:af:06:b8:97:01:74:63:12:88:d8:64:17:a4:e0:98:
         52:b9:71:e9:70:52:8a:eb:1b:32:15:dd:3f:0a:4f:c7:71:e8:
         68:bb:be:8e:6b:c3:23:56:d0:ec:de:af:72:ae:58:6c:5f:30:
         d3:92:fc:18
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:45:44 2025 by rpki-client