Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/81a0a6f9-8688-4bd9-9065-d4e7721beb4e.roa
File:                     81a0a6f9-8688-4bd9-9065-d4e7721beb4e.roa (raw, json)
Hash identifier:          NP2U0E8HeNNUbjH+Fnz2939/1CK/nnovnHwxl67aUjY=
Subject key identifier:   94:97:64:B6:02:4A:E6:57:72:C0:DB:70:C0:70:C4:82:0E:D1:E5:A4
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       77FE95BA74BD1894BE24D9F2DF5D4921E3D8CD73
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/81a0a6f9-8688-4bd9-9065-d4e7721beb4e.roa
Signing time:             Fri 31 Oct 2025 01:07:04 +0000
ROA not before:           Fri 31 Oct 2025 01:07:04 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:395e::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:fe:95:ba:74:bd:18:94:be:24:d9:f2:df:5d:49:21:e3:d8:cd:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 01:07:04 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=f63222fc9188c184da3de785bbb6315d5b4f9333d2630572d33c3ecc6abad160, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:47:8e:72:c5:c8:2e:37:7c:03:b0:13:05:60:
                    62:03:01:38:2a:b5:4b:c9:68:81:97:96:18:6c:c5:
                    e2:32:8c:c5:ca:de:5f:e3:1d:9c:8c:f4:f1:ff:b2:
                    a6:ee:58:bd:62:2d:02:77:ca:e6:80:02:b7:10:f3:
                    65:53:62:d0:a6:3a:da:b5:78:fa:db:15:d5:58:08:
                    63:44:c6:c4:d2:57:67:d8:c9:3b:05:c5:64:bf:36:
                    f9:a8:75:53:02:77:94:43:93:b3:18:70:8f:6c:b9:
                    a9:9d:0a:35:97:33:d1:24:24:68:a6:74:43:63:b5:
                    3f:be:36:50:e5:ce:e3:4e:9d:88:28:0e:ee:d9:37:
                    e9:cf:fd:54:83:0c:e9:ed:b2:17:5d:34:b2:73:be:
                    67:a2:88:b5:d4:46:f2:3b:a1:cb:80:aa:5a:1d:87:
                    e8:19:b0:29:62:9c:57:b7:a3:f4:68:f6:fd:7a:85:
                    94:4f:c3:e9:42:45:7a:2c:4c:8c:54:30:50:b9:89:
                    f3:92:f0:e0:b0:a5:4b:61:be:99:93:7f:ed:3b:61:
                    83:16:ab:43:90:8d:94:67:1d:c1:e2:37:64:23:99:
                    08:03:d1:9f:60:8f:57:2b:56:f5:43:d5:d1:1a:91:
                    c7:9e:74:b0:68:d0:4f:2c:53:67:6e:e6:f3:67:02:
                    a5:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:97:64:B6:02:4A:E6:57:72:C0:DB:70:C0:70:C4:82:0E:D1:E5:A4
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/81a0a6f9-8688-4bd9-9065-d4e7721beb4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:395e::/47

    Signature Algorithm: sha256WithRSAEncryption
         45:a5:a5:97:cd:bd:50:e8:df:d8:dc:47:c2:56:2e:c5:62:71:
         f4:5a:c7:d9:a4:f4:57:33:4c:71:91:87:da:eb:b3:86:d8:90:
         8d:e0:f8:a0:a3:f0:fa:d7:6f:73:31:b1:38:0f:e7:b5:2d:f4:
         c9:ad:19:a3:50:9d:27:de:9e:15:70:00:16:9d:cd:40:47:48:
         8e:14:9c:fb:75:09:72:d1:33:77:ab:76:e9:a5:92:1f:00:c8:
         ad:99:27:23:71:64:4b:03:12:17:a1:d6:ff:2e:50:c1:6f:4f:
         ee:35:08:06:46:9b:59:18:9b:63:10:9e:91:29:cc:e6:56:51:
         5c:3f:17:3b:f8:80:97:2e:60:bc:1c:d3:a4:f8:0d:ca:db:5b:
         41:fa:6d:63:35:65:52:85:19:48:58:3a:26:da:6d:8f:e3:1c:
         29:fe:6e:34:de:d7:f1:2c:95:15:e3:dc:c0:a9:2c:c4:63:56:
         cf:e8:c7:22:58:fa:5b:a9:81:25:d5:d7:12:02:b5:d4:be:aa:
         36:b9:68:69:a4:69:5c:cf:58:9f:36:7e:32:bd:72:d9:91:82:
         29:9e:4a:e2:90:87:29:2a:65:98:4e:49:e5:a8:6c:15:41:35:
         94:09:11:2f:d7:91:e7:e7:0d:3e:41:53:fd:95:db:43:df:a7:
         72:be:70:4e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:53:41 2025 by rpki-client