Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6f9d9675-c3c4-41bd-9f02-52f5afacb00b.roa
File:                     6f9d9675-c3c4-41bd-9f02-52f5afacb00b.roa (raw, json)
Hash identifier:          bmIBnP6eOU2D02b9/h/cEF2a+AhYl9qjOMVpFPWyhr0=
Subject key identifier:   71:F4:C3:66:03:5B:58:3F:73:19:0A:FC:1F:8B:DF:9B:A5:33:6F:36
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       710756803991A9EC9D4292B8F8F3C1C87D6C6813
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6f9d9675-c3c4-41bd-9f02-52f5afacb00b.roa
Signing time:             Fri 31 Oct 2025 01:39:38 +0000
ROA not before:           Fri 31 Oct 2025 01:39:38 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3cdc::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:07:56:80:39:91:a9:ec:9d:42:92:b8:f8:f3:c1:c8:7d:6c:68:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 01:39:38 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=7cbdb100ed8e27cce00fee8571b44fc11393b44dea1fee1302782ca24ed7b439, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:61:64:49:58:86:e8:f5:34:2e:d2:36:5a:db:
                    27:a2:9a:f8:75:92:df:81:a8:91:a4:c9:10:c9:67:
                    08:86:e9:27:22:11:75:5c:8b:d2:de:da:9f:ac:38:
                    10:41:48:72:2a:fb:8e:91:90:3e:4c:07:17:bf:c4:
                    e4:f2:ae:2c:9c:3e:e7:70:f9:dd:7e:f8:61:0b:65:
                    01:31:41:ec:0d:f2:3a:65:5a:65:7c:6d:c7:ce:ad:
                    fc:9e:86:3f:92:a0:65:f2:64:07:b8:6c:2b:cd:71:
                    47:e1:89:8e:fe:27:c8:e6:39:ee:c9:62:35:09:4a:
                    4c:8c:fd:21:70:21:30:d9:ff:aa:82:b4:6a:31:86:
                    4d:ff:71:20:f3:a9:88:b2:ae:1f:37:13:7a:65:f7:
                    3c:77:08:57:14:a5:1d:a1:e8:22:cb:b9:e7:ff:34:
                    ab:01:ad:84:71:98:f4:bc:59:c2:32:b6:8c:01:3f:
                    35:75:4b:c6:37:15:51:df:f5:48:98:99:f3:70:01:
                    0c:60:10:1e:9a:21:2b:fa:43:d9:3c:fa:08:94:36:
                    ac:89:0f:52:33:ea:40:e4:46:da:69:fe:55:0a:18:
                    46:89:57:d1:ed:83:e5:ec:07:9a:31:83:a2:b5:e0:
                    db:6d:ea:8f:d9:97:bb:cb:e5:e7:a1:ec:d4:61:1e:
                    5a:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:F4:C3:66:03:5B:58:3F:73:19:0A:FC:1F:8B:DF:9B:A5:33:6F:36
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6f9d9675-c3c4-41bd-9f02-52f5afacb00b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3cdc::/47

    Signature Algorithm: sha256WithRSAEncryption
         41:31:03:82:1e:31:1c:db:00:74:e8:af:76:36:71:f2:ff:b5:
         ba:7f:0c:fb:2c:2c:3b:85:e1:ae:d3:93:d9:1b:7f:ed:b9:d4:
         c8:ec:7d:d2:f9:e7:4c:d7:56:e4:e0:ad:4c:2f:62:ef:a3:ad:
         71:ee:cc:2e:b7:8f:32:a0:65:ec:a6:df:94:a0:2c:53:2b:55:
         5d:51:cb:70:f0:bb:f3:1c:d0:ac:cc:be:b8:11:a0:21:a3:e6:
         e5:0f:ad:26:c6:ce:97:5f:ac:6c:ca:a8:14:4f:3a:03:90:49:
         25:a6:9d:0d:67:34:17:a1:aa:95:d8:bb:32:cf:01:06:23:38:
         41:b8:2e:47:6f:9c:45:33:5b:7a:6d:24:77:62:0f:75:40:14:
         40:40:7a:76:b3:b3:7c:4e:4c:a2:7f:51:bc:71:70:30:be:80:
         24:35:7a:b2:99:42:94:cb:03:87:a0:76:08:97:8b:90:3f:1e:
         7e:6e:99:fb:82:05:f8:ef:b0:80:cf:69:13:5d:f2:66:96:d7:
         30:17:bb:3d:8f:47:67:6d:dc:47:19:28:6c:0a:19:b2:da:20:
         15:da:9b:39:50:59:95:d6:d5:c1:15:79:c8:c5:91:a6:3d:ba:
         53:e1:e1:8f:32:a1:4c:57:6f:f9:04:1f:f7:e5:cb:59:76:f8:
         2b:3d:2c:56
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:38:27 2025 by rpki-client