Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/735a5093-9785-40df-bd4d-155fa1a46681.roa
File:                     735a5093-9785-40df-bd4d-155fa1a46681.roa (raw, json)
Hash identifier:          joX1BgL01PIw4ny32fFUOnH828jknJXWgpo0eObtUSg=
Subject key identifier:   31:F0:8B:00:2E:1F:EA:BB:55:9E:43:57:6E:8D:5A:B0:68:19:03:C5
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       2913539A8BAF959F05E5D2E4397A2877D9BD1EA0
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/735a5093-9785-40df-bd4d-155fa1a46681.roa
Signing time:             Thu 30 Oct 2025 23:53:42 +0000
ROA not before:           Thu 30 Oct 2025 23:53:42 +0000
ROA not after:            Thu 04 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2fc4::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:13:53:9a:8b:af:95:9f:05:e5:d2:e4:39:7a:28:77:d9:bd:1e:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 30 23:53:42 2025 GMT
            Not After : Dec  4 23:59:59 2025 GMT
        Subject: serialNumber=6507f98f8e3f981b6554c28be9e05754e0149c085c5f620bef555ff784e99455, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:c2:32:97:c7:a2:83:34:1e:4f:e5:d3:e1:17:
                    6e:e2:61:9b:67:79:8a:b6:26:6b:22:ed:c9:7d:2b:
                    79:ef:ea:2e:ca:09:9f:9c:e0:dd:fe:ca:c3:6a:f9:
                    49:ed:d2:e2:1c:3f:38:be:a6:1b:56:19:fa:5d:9d:
                    f4:1f:7b:0f:4d:3e:5b:8e:90:bc:4c:c2:37:bc:e7:
                    03:cd:aa:9f:12:1c:9c:dc:ec:15:87:ba:48:51:a8:
                    b5:9a:47:33:60:ee:8d:03:bc:be:c7:78:ba:07:69:
                    0e:58:c2:7c:2f:e2:d5:1c:0d:d7:82:b7:16:7b:6b:
                    51:27:60:6b:58:f0:e6:1c:97:59:ed:23:d1:72:14:
                    8c:68:16:bb:f7:5d:e6:87:5e:ac:75:21:94:74:c5:
                    55:38:56:20:1a:e1:2c:88:f2:4e:a2:3a:1c:75:7c:
                    80:17:11:84:6a:6c:1c:02:57:78:a8:dc:7e:eb:0a:
                    e3:f7:e9:7d:3b:57:0a:ee:57:5a:64:54:df:d8:c0:
                    97:e7:e3:85:45:42:3f:81:b0:78:f7:71:1c:17:39:
                    3f:61:4d:2d:63:ec:e8:6d:36:7a:4a:bc:e7:70:dd:
                    e3:2e:30:56:9f:8e:0e:7f:62:f2:1c:5d:16:1e:96:
                    c1:7f:28:10:ef:91:c7:8b:30:81:e0:49:35:f1:d3:
                    b9:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:F0:8B:00:2E:1F:EA:BB:55:9E:43:57:6E:8D:5A:B0:68:19:03:C5
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/735a5093-9785-40df-bd4d-155fa1a46681.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2fc4::/47

    Signature Algorithm: sha256WithRSAEncryption
         24:6f:b9:27:6c:63:3a:85:77:d0:da:1c:c0:03:89:2e:d7:59:
         fd:bf:2f:c9:e9:c3:2e:2a:31:8e:d0:56:d4:9d:a7:73:da:8f:
         47:ea:cd:bd:a3:93:b0:13:93:ab:60:99:92:2f:ca:13:17:2e:
         60:4d:9b:87:a4:16:4a:51:a1:99:d1:9e:78:cf:96:65:f9:5c:
         0f:70:9e:2f:1c:f0:3d:bc:9c:20:58:2c:13:e5:de:d6:7c:79:
         ae:a1:1e:ff:fe:8b:7c:1c:f9:2a:d9:9d:22:5c:f8:29:70:b7:
         65:ed:25:7c:f1:3d:8c:ce:91:bd:00:61:8d:84:f9:c7:8d:aa:
         93:e3:71:3c:31:82:44:58:9a:fe:87:ae:34:83:98:15:66:d7:
         44:96:56:7b:b5:23:75:b8:bc:2d:54:5e:21:c3:a9:75:ee:78:
         ef:af:78:ef:10:4a:5b:9b:b6:b9:6a:dd:97:27:8b:22:d3:3c:
         fb:d5:0a:6f:f6:48:fa:b1:f4:94:07:51:7a:4d:b7:26:10:8d:
         a8:b9:d9:d3:f1:8c:d7:96:88:85:26:c4:29:c3:bf:41:ff:44:
         c6:da:3e:0a:00:0b:46:94:91:63:e0:d6:a0:f3:0a:ac:12:ee:
         f8:cb:c1:a4:82:10:3a:8d:1a:cf:f0:cb:47:f0:16:5c:4d:86:
         c8:00:34:e8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:46:49 2025 by rpki-client