Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7b472c90-be31-4357-a040-03e7631aaa6e.roa
File:                     7b472c90-be31-4357-a040-03e7631aaa6e.roa (raw, json)
Hash identifier:          e13eFI6Fx4nmHiaf4NerFNhg+WiV0HKTJzFvD1WrAps=
Subject key identifier:   00:78:25:83:98:F6:DE:39:C4:EC:C9:E0:18:E0:DE:EE:97:E6:AB:4B
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       5C2923023AACF946E502FC0E4C71169C8456D92F
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7b472c90-be31-4357-a040-03e7631aaa6e.roa
Signing time:             Fri 31 Oct 2025 02:51:59 +0000
ROA not before:           Fri 31 Oct 2025 02:51:59 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1864::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:29:23:02:3a:ac:f9:46:e5:02:fc:0e:4c:71:16:9c:84:56:d9:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 02:51:59 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=cc43ecbd3a624ed0d1bcac4c51c9b5b4741cedafc20421aa1deef39fa7622ee0, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:11:72:be:1b:c0:8c:57:2e:f2:45:34:1a:1a:
                    47:6e:f9:1d:73:a0:73:f9:50:6e:8e:77:d6:b9:f6:
                    b0:53:7e:d1:87:7c:c4:85:cd:ed:46:14:38:2a:90:
                    99:72:55:76:9f:f6:48:5d:86:42:dd:61:db:83:e0:
                    85:03:57:34:08:cf:e6:6b:8c:68:5d:a1:3c:13:bb:
                    a9:92:69:e2:aa:fc:32:dc:48:7a:93:83:dc:5c:0c:
                    2f:10:93:58:05:19:7f:b1:d8:d7:52:af:3c:03:e9:
                    b5:dd:68:d6:9a:78:0b:ad:8b:a6:a1:ef:7c:44:89:
                    33:8e:25:4e:49:d9:3a:8b:08:ba:e2:78:f5:46:9b:
                    ab:d5:22:2a:5a:a9:61:f0:41:9e:92:43:73:65:cc:
                    4e:d2:8d:73:1c:8f:32:08:78:1c:02:3c:56:a5:82:
                    d6:9b:26:4c:a4:a9:65:52:75:14:9a:d4:81:49:e2:
                    39:6a:53:89:57:f3:14:e8:94:59:b0:2f:3b:4e:06:
                    26:e8:98:31:f6:d9:a4:76:2f:5b:ad:c4:45:a7:69:
                    3f:3d:78:4b:44:bd:f0:66:30:02:8c:9c:e5:8d:46:
                    6b:e6:3e:38:d6:81:a8:6c:a9:99:d2:6e:fe:9c:f9:
                    09:9d:f2:41:88:23:32:3b:36:7b:ec:b4:cc:f6:87:
                    6f:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:78:25:83:98:F6:DE:39:C4:EC:C9:E0:18:E0:DE:EE:97:E6:AB:4B
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7b472c90-be31-4357-a040-03e7631aaa6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1864::/46

    Signature Algorithm: sha256WithRSAEncryption
         4a:4d:2a:10:9c:2e:a5:60:29:fb:93:10:86:3c:a1:b1:17:9a:
         25:fe:e0:5d:7c:f3:c6:c9:e8:5e:35:c2:b5:54:f1:9e:aa:06:
         e4:f6:59:d9:10:49:ba:41:99:40:6f:49:0d:56:3d:3d:c8:16:
         88:c2:7a:50:ff:95:7c:16:b7:be:76:40:cf:b2:63:89:e9:43:
         5b:60:dc:5f:a0:63:a5:d7:e5:7f:09:95:01:ae:59:ab:c1:eb:
         e7:32:b5:0e:59:e2:76:cf:ca:30:ff:16:06:7b:d6:e2:fc:ca:
         9a:1b:90:6b:05:90:7e:c3:89:73:79:51:c3:09:e1:0d:f8:64:
         ff:cb:45:84:13:e5:28:c4:1e:a6:80:0b:ed:a3:fe:aa:86:4a:
         3e:3b:a5:d9:f5:60:95:41:3c:51:a0:84:e2:5f:d8:94:ab:a6:
         47:a8:8b:bc:59:d6:e1:f8:74:c0:2c:14:fb:87:90:fa:69:d3:
         12:9a:06:c0:0e:34:88:8e:fe:e1:92:03:61:f4:e6:24:26:94:
         35:ed:7f:cb:ef:1b:fe:f4:d4:77:bb:ae:42:c7:75:28:3b:71:
         26:49:f3:fd:01:05:b5:aa:8d:08:33:48:76:16:5b:d5:7b:60:
         77:b9:40:18:75:4f:a1:96:9e:45:1c:e4:9c:3d:36:79:6f:c8:
         a0:b3:49:9e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:40:45 2025 by rpki-client