Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/76a62315-08d2-49ea-b7d7-cd3c1f332f5e.roa
File:                     76a62315-08d2-49ea-b7d7-cd3c1f332f5e.roa (raw, json)
Hash identifier:          lLZ0tW+kCgErQhnoZ4C/1pVrWFh7ImsM5XrZAfDNNMA=
Subject key identifier:   76:5F:05:7E:F7:E8:E3:AA:08:15:B1:49:15:95:A5:26:CD:34:65:0D
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       5008BEF225C9C6B443FC1A7454660C71BE3DA8A4
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/76a62315-08d2-49ea-b7d7-cd3c1f332f5e.roa
Signing time:             Fri 31 Oct 2025 03:08:21 +0000
ROA not before:           Fri 31 Oct 2025 03:08:21 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1c28::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:08:be:f2:25:c9:c6:b4:43:fc:1a:74:54:66:0c:71:be:3d:a8:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 03:08:21 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=3231d8b2d12442ed599fd3f48ab3c535cbb5bb2a38e23b0e7c402bc71644039f, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f2:9f:8c:8b:d3:94:36:32:03:6a:67:1d:0c:
                    11:32:36:2a:cb:e5:5f:e7:c3:89:98:82:11:5f:3c:
                    92:a5:24:7c:e7:b8:90:6b:d6:b0:95:82:e5:55:96:
                    55:9c:d0:12:77:bb:1c:0c:ac:47:b6:ac:e8:b5:bc:
                    db:1f:5f:f3:82:5b:dc:53:20:86:bc:e0:0a:18:d4:
                    dd:44:61:5e:21:c6:9e:ad:2e:99:a7:8b:a3:46:60:
                    45:ac:10:08:39:28:b4:d0:20:9c:8a:11:55:6c:54:
                    88:d4:72:06:6b:41:43:8c:a3:bd:2c:95:79:54:2d:
                    6f:82:f8:e5:ad:46:b3:84:68:30:df:73:ef:ea:43:
                    5c:60:2d:dd:85:9c:99:ac:9e:5a:f2:32:6c:aa:1d:
                    f1:a7:c7:bf:d0:bc:f0:4e:5a:9f:2c:05:3a:c2:7a:
                    96:d0:49:01:bf:98:70:5c:ef:2a:e9:8a:34:91:39:
                    01:01:b9:e4:f1:bf:1b:0e:c1:3a:38:cd:44:89:cb:
                    1d:77:a1:0a:f8:d3:c9:11:ba:6d:ec:09:c3:10:c6:
                    54:13:37:ae:f3:d2:9f:cd:6a:c3:61:3c:cd:f2:62:
                    81:75:c5:38:f2:4f:65:14:ba:71:38:d7:58:01:b3:
                    bb:e3:bf:2c:b6:21:1c:57:50:8f:3b:42:5e:fb:f0:
                    e7:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:5F:05:7E:F7:E8:E3:AA:08:15:B1:49:15:95:A5:26:CD:34:65:0D
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/76a62315-08d2-49ea-b7d7-cd3c1f332f5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1c28::/46

    Signature Algorithm: sha256WithRSAEncryption
         a2:b5:be:17:dc:49:ea:7a:54:ce:ae:40:63:24:75:a6:42:c3:
         db:9f:69:1e:95:ff:8c:7e:6f:a9:a1:5e:2d:7c:fe:13:44:c6:
         be:9e:86:30:c8:5a:79:42:d6:1d:7a:73:b1:1e:cb:05:9f:79:
         dc:76:9a:fe:ca:cc:50:5f:b5:73:a2:f0:a2:a7:e5:7c:7e:af:
         0b:21:0e:e9:2f:c9:81:93:66:fa:23:5e:35:85:6d:45:9c:6e:
         c7:a0:da:cc:23:ac:4b:3e:14:b6:0e:b0:7c:d3:28:58:17:31:
         c7:4b:43:0c:ad:f9:a8:9d:3e:37:bd:29:cd:99:92:ea:03:a6:
         9b:a8:40:04:07:b7:68:a9:fe:26:d2:1c:ea:f5:04:d1:b2:0b:
         0a:4f:cc:e9:a5:77:d9:8b:9e:91:b2:89:ee:9b:84:fa:1a:4d:
         09:33:be:f3:6e:17:a0:23:47:ca:6b:c4:1f:67:00:ec:58:af:
         89:a1:2a:4d:c2:df:b3:68:52:54:f5:f0:01:57:cb:8d:d3:24:
         5d:a0:8c:7c:d7:92:c6:7a:69:2d:bb:dd:ac:91:db:53:20:5b:
         a5:a8:c9:8c:74:ff:7b:32:2a:21:60:2f:e6:2b:52:9f:07:51:
         e2:5d:fd:ad:fe:29:81:71:0b:32:66:da:f9:2d:5a:32:04:69:
         c5:d6:e2:28
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 12:57:27 2025 by rpki-client