Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6fbccae5-0eac-4eaa-9dd9-77ca65121bf2.roa
File:                     6fbccae5-0eac-4eaa-9dd9-77ca65121bf2.roa (raw, json)
Hash identifier:          l/46toanlc4qHLiSDJqtxt0sPFyZEdBlLEuPTU8ocyE=
Subject key identifier:   BA:88:64:8B:43:F5:49:64:9A:81:0D:B1:80:37:68:D3:16:63:56:14
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       2DC367A3AC3B9662889985A6CBF871AF11BE77CD
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6fbccae5-0eac-4eaa-9dd9-77ca65121bf2.roa
Signing time:             Thu 30 Oct 2025 20:10:56 +0000
ROA not before:           Thu 30 Oct 2025 20:10:56 +0000
ROA not after:            Thu 04 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2860::/45 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:c3:67:a3:ac:3b:96:62:88:99:85:a6:cb:f8:71:af:11:be:77:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 30 20:10:56 2025 GMT
            Not After : Dec  4 23:59:59 2025 GMT
        Subject: serialNumber=3d0745008810b1ae543e50b4d07aa0e2d52d147cc8074ca34c2d39cffce5cea3, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:fc:74:4f:03:f4:82:dd:30:05:3d:d6:4b:27:
                    a5:d0:91:dd:77:99:e2:71:5c:07:e5:c4:cf:9e:c6:
                    21:27:04:1b:dd:5c:a1:02:c2:43:40:a8:39:a7:4f:
                    4d:fe:48:79:3a:ce:38:ed:3f:b0:40:59:dd:97:48:
                    2b:59:23:0a:07:a0:18:47:73:2b:02:6e:6b:3b:3d:
                    3a:ac:ed:28:03:a2:0b:e9:ea:cf:75:ce:0b:a3:24:
                    93:5b:3a:9d:c3:69:bf:01:c1:65:03:a2:3a:96:d7:
                    c3:5a:cd:09:69:0c:fd:12:1c:96:c4:c6:f2:28:ae:
                    1c:bd:cd:60:34:e6:cc:8e:6f:ce:bf:8e:cc:65:8d:
                    a6:5f:0a:70:69:ce:0d:7d:a8:4f:0b:0f:3f:5f:77:
                    b4:f8:a7:a9:b8:a7:7b:76:2d:ec:07:60:89:8f:f7:
                    97:25:7c:e8:ce:be:d0:5e:1d:7e:ad:51:5d:bf:c3:
                    92:23:b1:0c:25:3d:1a:a9:1f:e6:bf:60:06:02:dd:
                    95:df:70:72:21:e8:99:48:76:8a:d3:a8:d6:20:0a:
                    b6:8e:85:bf:ba:e4:92:d1:45:93:68:54:15:b8:3b:
                    39:9a:e0:57:b9:0c:a0:2a:0a:06:13:29:52:06:63:
                    c9:01:05:70:a6:2b:92:7b:a8:9e:15:bf:8e:51:d7:
                    77:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:88:64:8B:43:F5:49:64:9A:81:0D:B1:80:37:68:D3:16:63:56:14
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6fbccae5-0eac-4eaa-9dd9-77ca65121bf2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2860::/45

    Signature Algorithm: sha256WithRSAEncryption
         41:c9:5f:68:4d:9e:0a:8e:35:4b:c6:6c:a0:df:88:47:9b:94:
         dd:d0:88:98:61:51:90:71:91:72:db:47:25:49:c2:a1:9a:03:
         c7:68:e3:94:97:8e:42:fa:85:48:da:12:ca:83:96:43:8d:c3:
         40:39:7e:b3:91:24:d7:c5:53:6b:b8:22:b5:67:bb:b1:ec:ee:
         b0:a4:bd:05:4d:c3:8e:ba:01:06:4a:49:c2:dd:49:74:a9:f5:
         15:b3:7f:ad:5e:53:51:14:c2:73:48:c8:b6:cd:a1:b1:39:90:
         58:7c:37:7b:c8:05:ad:40:12:56:c0:5d:fb:67:2d:60:f2:0a:
         cf:b0:d0:e2:f1:bc:6c:cc:d8:49:06:e3:73:50:1b:cd:42:3d:
         3c:87:a6:8d:3d:bd:df:0b:dd:87:b6:60:c2:ce:06:42:be:57:
         db:ed:85:5b:9d:ed:7d:5f:7b:71:6f:be:0b:0c:fa:67:ee:93:
         86:02:71:b5:f2:6d:70:06:46:46:71:c4:b9:8a:28:6d:e7:45:
         50:73:21:06:69:61:7a:6b:e7:81:00:51:ec:d7:8d:e4:8a:82:
         1e:6e:95:79:fd:d0:52:c7:67:60:53:4e:fb:74:46:48:fe:8d:
         cc:f4:c5:f6:75:bf:95:69:6c:e6:0e:e3:a0:6f:cf:2a:f1:e4:
         ba:06:ea:cc
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:27:14 2025 by rpki-client