Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/74bcb25b-ac0c-4612-b386-ac7c281fd5a9.roa
File:                     74bcb25b-ac0c-4612-b386-ac7c281fd5a9.roa (raw, json)
Hash identifier:          4HZG6IZMRgYd+27XpVJyrIcETFvksQinzzmi8s3Y71o=
Subject key identifier:   CD:A8:C1:9B:C9:05:9B:2B:75:26:34:32:99:05:7F:CC:68:E3:F0:8A
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       12FF3B8A5C3C19585D224488240A3D5B5B5DBA17
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/74bcb25b-ac0c-4612-b386-ac7c281fd5a9.roa
Signing time:             Fri 31 Oct 2025 01:55:06 +0000
ROA not before:           Fri 31 Oct 2025 01:55:06 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3e8a::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:ff:3b:8a:5c:3c:19:58:5d:22:44:88:24:0a:3d:5b:5b:5d:ba:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 01:55:06 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=25c3b8b049a81f54289898f03bdd8bdf7bec8e6ffa9446baa0328193efb8ca99, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:4f:bd:5d:93:0d:b1:db:16:51:d0:3e:c3:0a:
                    0a:71:84:d9:ce:98:38:e1:bd:ee:f7:95:f8:c7:c7:
                    f9:33:94:a4:0e:55:9d:36:1b:1b:af:28:3f:48:e6:
                    4c:db:d0:c8:d6:07:64:30:fc:b2:0c:72:3f:e0:5d:
                    51:98:f7:ba:35:80:7b:02:d8:1c:65:65:0c:a5:aa:
                    ac:de:97:40:a6:78:de:01:f7:bc:ae:e6:32:ef:b9:
                    78:5e:d3:15:48:24:33:7e:43:3d:68:03:c6:b6:6d:
                    84:a6:2d:31:4d:21:b2:2c:42:8a:a9:3d:f4:0a:a1:
                    0f:f7:af:57:5c:5c:5e:c5:11:05:c0:e4:45:21:00:
                    17:80:8a:cf:a4:a1:4e:c8:6d:db:ce:cb:58:00:0a:
                    e4:ac:35:04:59:01:71:81:f7:84:9d:9a:a0:9d:5e:
                    30:82:4e:36:9d:8a:8e:f2:cf:c0:02:44:f4:46:6b:
                    c4:f6:1b:42:64:94:cf:c6:70:1e:cc:27:1d:e7:8e:
                    2d:02:60:c2:a0:3e:1f:ed:08:aa:10:e7:b9:8e:8b:
                    ff:a7:62:d6:bc:93:22:a4:2a:0c:07:97:18:ae:81:
                    00:2b:44:f8:2a:a6:42:cf:d0:30:38:f4:8e:86:de:
                    f5:a5:23:0f:32:68:96:90:98:13:e1:9b:0f:85:56:
                    62:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:A8:C1:9B:C9:05:9B:2B:75:26:34:32:99:05:7F:CC:68:E3:F0:8A
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/74bcb25b-ac0c-4612-b386-ac7c281fd5a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3e8a::/47

    Signature Algorithm: sha256WithRSAEncryption
         1e:97:c4:8c:31:75:c8:9b:95:89:7b:cd:3a:af:81:9c:3e:71:
         40:be:e8:0f:77:10:d3:d4:d4:70:57:67:21:27:b8:dc:00:d6:
         6c:8b:7f:ec:99:36:0e:d0:a0:e4:f2:3f:ac:b0:70:5a:c9:65:
         d2:93:43:52:a9:fb:a1:8a:52:2c:c5:28:9c:a2:d0:42:cc:5b:
         89:36:c7:c9:0e:4d:95:87:9e:08:37:9b:04:a5:1b:13:fc:6a:
         0f:ed:3b:b4:ee:3a:57:e4:e4:d7:ce:4a:bf:a3:09:80:29:1a:
         dc:9c:7a:3a:01:2e:61:ae:8c:d2:0d:7a:16:99:8b:e1:f7:0a:
         91:ee:69:18:a3:3f:ae:8c:69:6b:ff:cf:6b:ba:02:ee:34:06:
         ba:42:23:56:a9:1a:dd:1a:98:34:11:58:e0:7d:42:42:57:60:
         95:9d:7d:8f:5e:cb:bc:a8:9b:94:85:58:7d:93:38:97:cd:82:
         c6:a4:dc:d4:83:56:03:85:02:bb:1e:31:f1:5f:7d:8d:fb:af:
         99:00:87:24:0c:7f:9e:87:53:18:e8:3d:e8:74:84:f5:c2:31:
         e9:c0:dc:3f:62:84:d5:a9:c6:48:30:65:ec:f8:c2:dd:a0:fc:
         10:ca:f6:16:29:91:46:cc:9b:7f:09:e8:8b:2c:f7:d0:9d:23:
         9f:dd:cf:a5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:27:13 2025 by rpki-client