Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7dc58f26-fcf8-406b-9d5e-30bd8dfde1c3.roa
File:                     7dc58f26-fcf8-406b-9d5e-30bd8dfde1c3.roa (raw, json)
Hash identifier:          z8qKkonxat3VnyN3Mou4h2TMDLGf3HVB2AZFZ80okFY=
Subject key identifier:   72:A6:F8:A2:3C:BD:AC:09:75:85:18:93:DF:B3:BA:41:AD:75:0A:43
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       66F56797F43C0AAF82E6AF4009BE1C29E48397B3
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7dc58f26-fcf8-406b-9d5e-30bd8dfde1c3.roa
Signing time:             Fri 31 Oct 2025 21:55:03 +0000
ROA not before:           Fri 31 Oct 2025 21:55:03 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:a600::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:f5:67:97:f4:3c:0a:af:82:e6:af:40:09:be:1c:29:e4:83:97:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 21:55:03 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=a4bebb6adbf790e2617394b725db583e23606b89cf0d0b87df80f523c6d970e8, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:7f:ae:e4:95:d2:06:42:88:6d:49:39:34:8d:
                    7f:3a:0b:28:3c:ab:e5:a4:c8:80:7f:a3:ef:d0:d7:
                    69:4e:f5:10:21:9f:d3:b8:4c:0e:56:ac:fd:19:a3:
                    aa:3e:25:89:f7:fb:f0:c6:01:32:ae:39:5c:a8:29:
                    f5:58:99:ca:1a:09:9f:09:c5:08:67:f4:d9:3a:34:
                    7c:0a:e6:e5:21:4f:f2:50:3e:a3:96:d5:de:ed:a6:
                    7e:17:3f:9d:76:df:b8:55:2b:57:0d:7f:6b:be:e7:
                    bb:38:0c:b6:33:e6:00:b4:af:cb:3f:84:8b:e4:74:
                    31:2d:46:07:b0:ed:dd:59:c4:a4:7a:04:dc:38:3f:
                    be:63:25:dd:8d:2a:f3:0a:db:0a:44:b8:d7:d5:06:
                    70:33:a4:3e:0f:8c:06:1b:2a:f3:f3:79:f6:c2:c1:
                    e5:56:e6:3f:9b:48:7e:a9:64:e7:03:e4:fb:0b:de:
                    4e:f1:a9:cf:64:86:b4:e0:a4:49:05:1d:18:77:0c:
                    d7:cc:f2:b4:7e:e2:4e:16:ac:fc:d4:fc:ed:f6:54:
                    cf:fb:15:e5:c0:b6:a6:4e:af:16:77:78:f3:40:a6:
                    ab:3d:b4:68:21:a5:94:f5:05:1e:03:8e:51:ff:61:
                    82:95:f3:24:5e:dc:b6:a9:0c:31:6c:51:74:da:47:
                    0e:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:A6:F8:A2:3C:BD:AC:09:75:85:18:93:DF:B3:BA:41:AD:75:0A:43
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7dc58f26-fcf8-406b-9d5e-30bd8dfde1c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:a600::/40

    Signature Algorithm: sha256WithRSAEncryption
         52:66:6a:94:ff:8d:22:f4:63:ef:77:9c:42:39:f0:e7:b6:a9:
         05:9c:40:f4:e7:42:91:ac:c4:a5:f5:79:81:21:8a:4a:ff:1b:
         b7:02:75:cf:ba:a5:5d:fc:b9:3d:60:5d:f1:f4:29:37:81:23:
         9c:1c:77:c9:2d:27:3f:36:9b:56:1e:77:34:8b:69:ee:88:59:
         59:00:73:11:55:4b:95:47:4a:04:3e:71:f3:9e:ed:59:6e:e0:
         f6:24:74:8a:96:f4:9c:10:8f:32:35:f4:df:19:63:24:19:f8:
         be:5a:58:5a:24:0d:17:b6:3b:8d:e8:54:68:5f:14:db:d2:a5:
         8b:c3:f7:fb:cb:5d:5e:21:a7:1c:e9:dc:37:bb:bb:46:01:7b:
         c9:79:0c:0c:a2:c3:d9:03:bc:94:6c:f8:f3:3d:d6:0e:97:2a:
         96:4f:01:2d:ed:37:de:3d:14:e8:16:fe:85:d0:b8:b3:9c:55:
         53:f8:20:15:26:fe:e1:10:ae:e1:07:cb:8f:21:5b:1a:56:a8:
         18:56:f0:26:ee:a4:a0:f7:b8:ca:cf:a1:33:c6:84:65:44:aa:
         bc:e7:d4:c9:c3:16:12:91:82:ce:8a:c9:23:96:41:93:72:d9:
         a3:32:ee:a9:3c:75:5a:37:9e:ae:d8:a5:8d:69:c7:c4:5a:8a:
         46:dd:06:4f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Nov 5 12:49:13 2025 by rpki-client