Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6d331477-5f57-4944-b86d-fde0aa95d46a.roa
File:                     6d331477-5f57-4944-b86d-fde0aa95d46a.roa (raw, json)
Hash identifier:          HLekYAjU2mZnUF98ttVB1HSjgHHjgIV3NTsDAFEW+TQ=
Subject key identifier:   E2:70:1F:9E:D9:E5:85:8A:CB:73:7D:17:99:DF:43:1C:AF:E0:08:83
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       4B2908F25D791617661D526F2306F5348FFB5548
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6d331477-5f57-4944-b86d-fde0aa95d46a.roa
Signing time:             Fri 31 Oct 2025 04:36:42 +0000
ROA not before:           Fri 31 Oct 2025 04:36:42 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:39f8::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:29:08:f2:5d:79:16:17:66:1d:52:6f:23:06:f5:34:8f:fb:55:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 04:36:42 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=10016efdaa2b1e9d2f7b27b31fad4df8a152e57be21dc86236ab2ec6938bc49f, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:54:f5:bb:df:25:ba:1e:33:1e:9d:a9:b2:0a:
                    8e:7f:ef:ea:96:45:df:aa:c2:c2:b3:e9:4d:ec:ba:
                    16:a2:ac:64:bf:5e:16:6e:92:bf:f1:6a:3d:1a:c2:
                    34:41:46:ce:cf:e9:57:56:81:f8:bd:6c:3e:66:5a:
                    28:70:ec:7d:e9:5f:ad:63:75:62:7c:dc:61:ca:2c:
                    91:08:9a:c1:71:64:7c:cd:ad:75:6e:18:54:b7:48:
                    5c:55:77:57:8b:0e:97:13:a6:c8:ad:7f:70:59:e9:
                    3f:90:46:39:e5:92:47:cb:69:7c:f3:d5:42:93:57:
                    bb:5f:14:41:12:f6:98:c2:f5:ee:ac:2c:5c:71:af:
                    01:5d:83:45:e8:52:68:96:ee:38:4d:f8:5d:da:70:
                    77:fd:a0:d6:79:72:60:8b:ce:52:69:78:6c:05:93:
                    d5:48:98:b1:72:00:6f:3f:72:48:70:d1:34:6a:72:
                    aa:fd:08:4d:4a:6e:08:14:fc:76:ec:da:45:49:44:
                    b2:f4:c9:fc:b3:55:02:97:9e:55:5c:50:95:32:24:
                    14:e6:a7:74:48:6c:7f:65:48:08:58:54:86:8b:64:
                    5b:8f:a7:70:92:41:c6:ba:ed:9d:84:fa:fb:6c:6e:
                    48:35:f2:5b:95:21:34:e2:fb:7b:6f:b5:6b:e8:65:
                    c1:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:70:1F:9E:D9:E5:85:8A:CB:73:7D:17:99:DF:43:1C:AF:E0:08:83
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6d331477-5f57-4944-b86d-fde0aa95d46a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:39f8::/46

    Signature Algorithm: sha256WithRSAEncryption
         63:1c:b7:0c:4c:e3:d6:12:da:fe:bd:70:c9:f5:2d:78:cc:40:
         24:2a:e5:21:01:1c:df:26:f0:90:8e:fd:41:99:96:86:f7:c8:
         6f:1b:6c:94:46:29:af:71:9f:b5:cf:f0:bd:51:ae:05:e5:35:
         b1:eb:33:7d:6e:d1:ba:2c:f6:36:f3:06:13:4f:34:07:2c:14:
         a2:08:e7:4d:7d:50:4f:eb:78:25:ea:61:36:ec:ff:76:3d:48:
         ff:a8:6e:7f:43:6c:5c:57:15:ac:e6:ec:e5:5b:8c:07:12:9d:
         b6:bd:8a:b5:3f:6b:08:df:44:b4:80:ec:db:d4:bd:46:ed:96:
         6a:56:8f:1c:48:4f:21:a2:41:8a:2d:60:4c:e1:b5:fe:71:4d:
         8d:d6:0d:24:0b:5b:f8:78:d0:0b:70:cc:84:6e:f8:a0:05:c0:
         8b:99:3a:ce:02:e1:dd:40:0a:82:8e:33:6e:ec:09:95:0b:37:
         9f:89:cf:81:bd:5b:f3:f0:21:8f:50:67:ad:21:ed:11:7f:d0:
         b3:15:e5:b1:82:be:bd:50:9d:96:31:d6:83:5e:37:06:bf:44:
         67:70:14:8d:43:88:16:cf:d6:c7:8c:7e:7d:3e:57:7f:bd:1a:
         c1:f6:bc:d9:db:05:44:bb:b0:40:ca:c4:d4:5e:ae:9d:91:9a:
         b0:4c:2c:ae
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:26:49 2025 by rpki-client