Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7b4e88ac-672f-4910-b30a-e0938c58adde.roa
File:                     7b4e88ac-672f-4910-b30a-e0938c58adde.roa (raw, json)
Hash identifier:          Gk6sal8g0LvOAYQ3hHhLUnMlKGkmGZd33B0XnEsRTLE=
Subject key identifier:   06:16:32:A6:66:7A:6E:93:2C:B8:90:77:99:EC:13:E4:CB:21:06:0E
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       507EB110CC4F34125FEA19FC278EE706DE72A036
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7b4e88ac-672f-4910-b30a-e0938c58adde.roa
Signing time:             Thu 30 Oct 2025 23:54:01 +0000
ROA not before:           Thu 30 Oct 2025 23:54:01 +0000
ROA not after:            Thu 04 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:31be::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:7e:b1:10:cc:4f:34:12:5f:ea:19:fc:27:8e:e7:06:de:72:a0:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 30 23:54:01 2025 GMT
            Not After : Dec  4 23:59:59 2025 GMT
        Subject: serialNumber=3dcf5374f5bd88b2d20d7ce8c32525a19e8a91a8f1010cde76d16a6bde03d3d9, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:77:8c:96:b9:48:0b:4d:90:19:00:6a:ff:7e:
                    20:e6:81:3b:bf:4b:0c:05:8a:cb:a7:d2:d9:ea:c8:
                    56:15:05:3c:37:c1:6e:01:26:df:3b:76:f5:ce:3b:
                    f3:d9:d3:85:d7:56:71:9d:29:cf:f8:a1:ce:b0:cf:
                    b2:0f:d1:d7:90:b1:6b:f6:45:4c:6a:03:49:3c:c4:
                    04:cc:86:cf:5b:dd:c3:48:a1:9f:80:aa:9b:51:a2:
                    8d:25:ec:18:53:1a:8d:60:f3:26:c9:98:cb:f6:44:
                    7e:f1:0e:67:73:a2:b6:71:11:f4:37:7b:d6:18:ce:
                    c3:da:07:3b:89:23:1c:ba:01:70:7b:db:a9:d2:a4:
                    2b:e7:da:64:de:5a:7c:b7:cc:e8:40:c8:35:5e:7d:
                    34:27:12:cc:f7:bd:ec:85:60:91:f2:10:e9:4a:42:
                    bb:27:f0:90:94:31:bd:20:1d:dd:63:a0:4b:c2:45:
                    bd:a9:77:26:fd:44:93:5c:30:1a:77:ab:ef:05:10:
                    e4:23:60:bd:05:bc:11:1b:5e:bb:bd:56:a0:b1:9a:
                    84:3d:98:5c:2b:93:53:f4:37:d5:40:59:1e:c7:1a:
                    6c:9b:32:42:a5:ec:13:2d:09:49:be:70:3d:3f:54:
                    d2:e7:e1:f7:bb:9e:db:ba:a1:9e:ba:d2:bc:c9:03:
                    b9:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:16:32:A6:66:7A:6E:93:2C:B8:90:77:99:EC:13:E4:CB:21:06:0E
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7b4e88ac-672f-4910-b30a-e0938c58adde.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:31be::/47

    Signature Algorithm: sha256WithRSAEncryption
         60:2d:a3:b9:1e:c6:1b:31:26:c0:a5:f8:ee:66:ea:1a:01:85:
         99:94:d8:fd:1b:13:46:56:ac:b6:86:b6:2e:77:5c:9a:2b:91:
         fd:df:ea:52:3d:ea:eb:b1:8f:70:26:a0:81:31:c6:89:d2:6a:
         5f:9c:cc:6b:db:17:81:31:78:8d:4c:9a:b1:9f:d0:78:1c:06:
         34:38:a1:5e:89:cb:c6:b8:18:e7:3b:eb:d5:ba:9c:70:84:48:
         c8:12:30:19:97:ab:88:b5:46:9b:0c:16:fd:0c:6a:48:f1:0a:
         85:96:fe:12:57:9d:14:de:3f:b6:e8:dc:38:36:63:9c:12:73:
         59:c1:3c:2a:b8:4e:f0:5d:43:d3:07:56:57:fe:57:2f:16:51:
         59:61:91:86:d6:76:6f:4e:30:a8:45:8e:b7:2a:6e:98:e5:a8:
         9e:f4:82:80:94:a5:7a:78:d1:a3:38:87:f7:25:f9:0f:ca:ce:
         32:a2:dc:b4:c9:b9:2a:3f:0a:5c:fc:78:5e:f2:5b:13:38:cc:
         c8:3e:a6:a5:f0:08:50:82:24:5f:db:88:77:2f:21:26:fb:88:
         bf:b2:ba:db:3a:28:6e:7a:c6:45:6b:97:3c:8b:8f:1a:ef:c6:
         ba:b4:d8:c2:60:2f:c8:4b:be:a7:6c:69:fb:fb:b3:3c:3a:94:
         2d:f4:a2:f4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:39:01 2025 by rpki-client