Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/76bae0bb-d5c4-4a59-b1d0-6f4e70dc751c.roa
File:                     76bae0bb-d5c4-4a59-b1d0-6f4e70dc751c.roa (raw, json)
Hash identifier:          OP8JwryqCq15dd7KG3FvSqAhNMD3/b1tpPjngxEPTJQ=
Subject key identifier:   0F:67:5D:9C:51:9F:4C:5F:33:E4:EE:02:86:2C:19:40:8C:8A:9D:FA
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       6C92861FCFDE51AB320C43CD0477F4B59E9970FE
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/76bae0bb-d5c4-4a59-b1d0-6f4e70dc751c.roa
Signing time:             Fri 31 Oct 2025 04:10:17 +0000
ROA not before:           Fri 31 Oct 2025 04:10:17 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:34b8::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:92:86:1f:cf:de:51:ab:32:0c:43:cd:04:77:f4:b5:9e:99:70:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 04:10:17 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=bc560714d45f599fc38ef55bb1c7f02986875ff74f210e296e502df275bc8ffe, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:3c:a1:a3:42:17:08:31:01:f9:4b:71:8d:68:
                    da:02:b2:b6:b2:73:d6:05:cf:d0:af:07:97:e7:a8:
                    0d:47:43:32:56:64:28:2b:85:29:44:96:ab:b1:e9:
                    87:5f:64:4c:d1:9e:df:c2:99:16:99:22:f0:33:75:
                    a0:e2:90:21:4a:a5:a9:ed:05:2e:80:44:ba:a3:2b:
                    9f:9f:a7:c3:8f:2b:8c:52:e6:8c:87:a5:85:42:fa:
                    0b:dc:54:9f:f1:5c:6e:fd:8f:26:85:bc:51:a7:79:
                    09:9f:40:a3:89:e7:f6:6e:7b:99:91:4b:c4:50:2a:
                    03:29:8f:f0:8d:90:81:2d:01:57:6c:f4:65:18:50:
                    24:0d:ff:5d:0e:92:71:cd:6b:b6:73:72:e5:78:82:
                    86:01:9e:e3:48:78:60:3b:a0:9d:0a:6c:60:c7:85:
                    fd:ed:cf:d3:93:8a:17:97:8e:44:db:0c:8c:3a:84:
                    d4:3e:3b:71:fd:28:c1:c6:94:9a:d1:38:8e:bb:fb:
                    5c:e9:b1:c6:ad:9f:b0:d3:79:c9:c0:2c:b4:14:9e:
                    88:0c:9e:c6:fc:87:ab:80:d6:e4:5b:18:4e:f9:fd:
                    cd:d5:b2:53:2d:4e:bd:a6:64:05:16:e3:22:9d:4a:
                    de:d0:f2:87:21:e5:f1:94:c5:97:b0:72:de:ae:e1:
                    69:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:67:5D:9C:51:9F:4C:5F:33:E4:EE:02:86:2C:19:40:8C:8A:9D:FA
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/76bae0bb-d5c4-4a59-b1d0-6f4e70dc751c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:34b8::/46

    Signature Algorithm: sha256WithRSAEncryption
         3a:76:21:0a:ab:af:6e:15:34:bc:7e:f8:39:71:c7:e2:2d:22:
         b2:97:fa:84:ee:bb:50:f0:59:41:2a:a8:4b:66:23:9c:72:7c:
         0e:2a:f5:77:3d:97:5f:ab:19:70:ba:02:b1:7d:91:06:2e:23:
         5f:a5:23:c5:2b:45:1b:e2:be:32:18:d4:05:f0:89:b0:d7:f2:
         ed:23:fa:c6:50:37:9b:45:88:61:97:e9:23:e3:85:ba:ab:4e:
         11:8d:5b:f1:cf:e3:d3:bd:53:be:27:a7:ab:43:cb:69:32:8f:
         09:67:8b:03:fb:08:77:83:53:97:8e:ca:9f:f5:85:bf:20:18:
         7f:6b:37:78:e3:65:a0:49:7c:5d:b4:17:3d:1f:83:f4:8a:67:
         50:0d:01:ae:e3:87:8e:d7:b8:e5:ae:3f:71:80:65:a0:14:c1:
         b1:69:bf:a3:56:70:f2:5f:52:6b:b8:5a:f2:6a:31:e8:ca:9a:
         37:a8:bd:4d:7e:c7:9a:72:60:36:f0:0b:03:1d:bf:b7:85:5d:
         86:d5:28:9d:bb:24:b4:12:26:bc:33:08:d5:3a:a3:64:94:5f:
         cc:1b:06:c5:50:7b:90:2b:2f:24:49:3a:a2:bf:df:5f:81:b3:
         8e:64:80:2d:13:82:1a:6e:30:09:33:f5:50:0c:07:56:39:18:
         4d:27:b5:9f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 12:49:18 2025 by rpki-client