Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6f53ba3e-6219-48c6-9243-f3fb9ae4965c.roa
File:                     6f53ba3e-6219-48c6-9243-f3fb9ae4965c.roa (raw, json)
Hash identifier:          7icDVKJGyMiCfIO5IoDgVGrOSCHxQ7txkvbHDHsRNbo=
Subject key identifier:   7E:A0:12:DA:00:A9:C1:B1:7C:C0:3A:7B:02:B5:65:89:84:F9:28:49
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       69AEF350D763DBFA0FC5A49854808E62CCECF850
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6f53ba3e-6219-48c6-9243-f3fb9ae4965c.roa
Signing time:             Fri 31 Oct 2025 03:38:54 +0000
ROA not before:           Fri 31 Oct 2025 03:38:54 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2c48::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Nov 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:ae:f3:50:d7:63:db:fa:0f:c5:a4:98:54:80:8e:62:cc:ec:f8:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 03:38:54 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=3d63c8cdeb1b556a417b9437d8e5da9731346fbaf24ce128482db42a5429aee2, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:68:04:a9:fe:9d:eb:e3:3b:98:74:68:98:57:
                    a7:39:f2:2a:a7:c5:a3:c7:c4:8f:29:14:bc:c8:88:
                    2f:2b:66:b5:b4:2a:ae:ac:ee:78:20:d9:00:f1:7f:
                    6c:cb:88:33:b7:fa:70:88:a4:49:39:af:07:09:cd:
                    8f:a0:94:9c:04:c8:f6:88:88:37:dc:e9:a1:06:ab:
                    b9:a7:d4:99:eb:db:b0:2a:28:56:9b:38:fa:68:8d:
                    d0:65:aa:46:44:13:42:fc:9b:74:1f:89:bb:4d:06:
                    72:65:4e:6d:31:df:bf:76:6e:b7:0d:d7:a4:f2:a0:
                    39:a8:6a:06:a6:df:54:7c:b0:69:9a:7a:6e:75:d8:
                    ff:2d:d3:ec:43:03:c6:cc:0d:3e:dc:a1:29:76:f5:
                    bf:7b:fb:be:d0:0b:77:a7:6c:e2:c3:1e:b7:b6:44:
                    d8:b7:92:56:e0:71:2a:01:39:f4:cc:7d:3f:0d:fa:
                    03:70:f8:be:2b:9a:28:a6:9e:5a:23:9c:be:44:c1:
                    c5:b2:3d:63:18:ee:91:39:0e:bc:2f:9f:2b:a4:6a:
                    bf:47:55:cb:07:61:7d:0b:f4:c8:36:bb:c2:66:89:
                    f0:38:48:17:3a:dc:6d:f1:9c:a8:c5:16:c2:40:54:
                    c3:91:8a:3e:7b:64:ea:57:7c:f7:49:3e:08:df:85:
                    e1:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:A0:12:DA:00:A9:C1:B1:7C:C0:3A:7B:02:B5:65:89:84:F9:28:49
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6f53ba3e-6219-48c6-9243-f3fb9ae4965c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2c48::/46

    Signature Algorithm: sha256WithRSAEncryption
         6a:a9:91:23:0f:a1:cf:35:90:da:6c:8d:8a:3a:ec:ff:7c:6c:
         e5:ea:50:2f:5a:aa:97:e0:92:bc:e4:1f:e2:f8:61:64:10:18:
         b5:21:d3:8f:e4:51:fe:e3:0c:d5:26:1b:38:11:4d:1d:59:af:
         6e:0f:b2:dd:20:94:d1:1a:4b:21:db:1a:c6:9c:ba:a8:15:9c:
         d1:77:3d:ac:f6:16:78:aa:5b:47:ca:cf:ae:0d:76:c9:27:f9:
         58:95:98:bb:1f:25:6f:e2:e8:a1:e3:be:87:31:8e:1f:2a:61:
         15:ea:bd:af:48:d3:97:c9:98:7e:aa:68:11:05:0d:5a:ea:12:
         98:40:b2:0f:0a:1b:6c:20:bf:4e:ff:f2:f5:49:e6:31:e4:c9:
         c3:21:ff:6d:c2:66:83:7a:0c:75:1f:45:20:b8:8d:50:44:e8:
         2e:0c:63:80:04:5a:7f:5f:80:5d:8d:aa:c3:a8:ee:f0:72:cb:
         00:52:20:dd:1c:cf:83:65:e1:96:b7:ff:e1:15:c7:84:2c:c3:
         a8:7a:b4:6c:59:1b:82:d0:53:31:3f:e8:ef:14:4d:b1:5e:a0:
         97:c2:d7:03:3d:a2:a9:45:4e:ef:fe:62:be:7f:2d:38:06:d3:
         38:4b:97:04:46:92:9c:9d:44:36:63:45:30:5a:1f:eb:a8:66:
         9b:42:a1:74
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 16:54:16 2025 by rpki-client