Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7bcb29d7-a3bb-4757-a95f-6ba1f6753f3b.roa
File:                     7bcb29d7-a3bb-4757-a95f-6ba1f6753f3b.roa (raw, json)
Hash identifier:          g9EbDE1qfpBO34nR5RZMN3784Wp0V8m+ks/O02QWbP4=
Subject key identifier:   E8:EE:42:90:AB:1C:1D:2E:F5:5F:C2:FC:CB:B0:6D:97:26:BF:47:4E
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       2E7C5843E6BC63BCAAE8D640A04D6CD99917B004
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7bcb29d7-a3bb-4757-a95f-6ba1f6753f3b.roa
Signing time:             Fri 31 Oct 2025 06:10:17 +0000
ROA not before:           Fri 31 Oct 2025 06:10:17 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3938::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:7c:58:43:e6:bc:63:bc:aa:e8:d6:40:a0:4d:6c:d9:99:17:b0:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 06:10:17 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=dd2b92039540e4ce6e3643b7ef37062201951a7fd163df68a61b02fe88862b10, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:aa:f0:c0:29:ce:21:54:b7:01:cf:eb:55:e5:
                    1e:ba:ba:a4:c5:8c:f9:81:bc:95:56:ed:da:2c:0d:
                    fa:6a:81:80:63:4f:72:bf:65:b5:86:09:d0:62:07:
                    ac:09:6d:ff:8f:f8:11:0c:a9:6f:77:6c:d1:84:a3:
                    ed:d9:11:0a:c9:e3:c4:9c:5d:60:81:6c:e0:ec:19:
                    8e:a2:d6:41:5c:55:a6:f1:c6:fa:c9:83:23:8a:51:
                    d8:43:b1:d0:67:ef:f0:f2:27:30:7d:16:e3:23:fd:
                    35:5e:48:14:99:0d:63:2b:99:49:b2:0f:36:50:b4:
                    a2:38:a1:30:ed:52:c6:c7:63:db:5f:c2:0e:05:94:
                    49:7f:3e:2c:c2:d3:9e:d5:f0:d8:07:cf:97:b1:a0:
                    79:78:4a:ae:f3:38:c1:90:4a:63:7d:e2:b8:ac:ee:
                    86:67:c5:c4:5b:5e:41:19:ff:d9:e5:b5:64:70:14:
                    c1:3a:54:df:b8:bf:0e:f1:1a:a4:67:4b:f2:ef:64:
                    23:e4:28:6f:92:3a:4b:3a:cc:cd:8d:65:bf:b7:fa:
                    2e:d1:2a:62:13:98:b1:5f:53:0a:bd:40:23:db:08:
                    43:c4:96:c1:03:54:b3:dc:c5:1a:9f:da:11:ba:ab:
                    07:08:d6:b4:19:4e:99:41:30:21:1b:0c:23:5c:87:
                    00:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:EE:42:90:AB:1C:1D:2E:F5:5F:C2:FC:CB:B0:6D:97:26:BF:47:4E
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7bcb29d7-a3bb-4757-a95f-6ba1f6753f3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3938::/45

    Signature Algorithm: sha256WithRSAEncryption
         49:80:b2:c7:09:1a:da:b1:15:32:b7:6e:bf:bd:21:7d:ab:91:
         4f:9c:a7:0a:d8:33:0c:ca:56:53:f4:ea:c1:c3:08:fd:04:a3:
         d2:85:45:81:df:1d:ff:e2:c8:3a:e3:da:4f:04:6d:55:92:ee:
         62:2f:ef:24:46:74:e9:a0:7d:51:a1:95:5b:6a:cf:a8:99:0e:
         7c:f1:a3:94:78:81:68:00:c5:02:a6:21:eb:a1:79:cd:e4:39:
         a3:b7:71:45:ff:63:7c:58:3a:c0:da:6a:66:6c:82:e7:6c:ff:
         6a:49:53:ad:1f:94:7c:6d:1e:ba:75:11:17:12:b0:0b:a2:9b:
         ec:44:b3:7f:61:c3:d7:7d:a3:48:b5:ef:ae:e4:51:f7:a0:fe:
         53:88:01:a3:4a:79:0a:37:61:81:d6:5e:69:16:36:05:62:9a:
         ab:d5:ab:59:35:9b:62:51:65:c3:74:a7:39:c5:9e:32:d6:77:
         f1:52:a9:1a:1a:9d:7a:35:78:b5:28:9e:3c:a6:64:62:70:fa:
         df:a9:a3:51:93:64:c2:f9:1a:21:0b:64:f3:60:8b:ba:a3:25:
         2a:18:0e:16:8f:1c:73:78:23:31:ce:ca:08:b6:7c:c8:0c:fa:
         5c:57:a1:37:55:0f:c7:04:84:e8:b4:d8:84:5c:0b:ab:39:16:
         43:fe:28:ca
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:45:54 2025 by rpki-client