Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/821d4434-bdfe-4e62-b2c4-816ad4c135b2.roa
File:                     821d4434-bdfe-4e62-b2c4-816ad4c135b2.roa (raw, json)
Hash identifier:          DwDQ+LsqTweOhbYen1jxvdN53d2JAggMOG6RSfRh+K8=
Subject key identifier:   C0:47:D3:22:48:3B:4C:6F:A9:91:93:3E:A3:C2:3C:26:7D:6A:18:6B
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       139CC0FC47F1E9D6499F323435ED22CD19ED7E37
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/821d4434-bdfe-4e62-b2c4-816ad4c135b2.roa
Signing time:             Fri 31 Oct 2025 05:12:26 +0000
ROA not before:           Fri 31 Oct 2025 05:12:26 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:16a0::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:9c:c0:fc:47:f1:e9:d6:49:9f:32:34:35:ed:22:cd:19:ed:7e:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 05:12:26 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=a1bb10d2c4f25575cb0216d6e03b5f0df771113a61e859b027e8e170ebd1d2d1, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:19:66:13:b9:1e:1a:35:d2:cb:9f:a3:7f:e6:
                    8b:3a:cd:3b:4e:4c:65:7f:a4:fb:6a:f5:46:73:ac:
                    31:82:2f:39:0a:4e:be:72:68:5e:6c:c4:d5:eb:52:
                    82:16:1e:d3:42:9a:71:c6:e8:6a:ee:78:71:d5:c5:
                    35:70:0a:de:2e:e1:ba:89:d5:81:96:e7:a1:b7:bb:
                    8e:9d:52:f5:e1:3a:7e:a5:9f:86:cc:98:a9:51:62:
                    bd:22:34:e6:d0:de:01:4c:dd:13:a3:66:d9:ef:5d:
                    07:d9:d0:d9:76:a2:70:63:60:fc:48:16:81:f8:09:
                    3b:19:c3:47:b9:08:a9:c0:4c:32:24:f8:f6:e3:3a:
                    22:84:bc:eb:05:88:9c:8f:ab:2f:cc:d2:0c:85:e2:
                    be:8a:72:55:89:40:21:a9:f4:3d:2f:f6:a4:7c:e3:
                    31:a6:b5:75:46:f6:c1:26:6f:d1:2a:2b:58:4c:b4:
                    ef:9c:42:24:09:bd:40:07:a5:08:94:02:4d:11:b9:
                    f4:6c:ed:bb:48:11:db:ac:19:4f:2a:19:a8:81:9c:
                    64:da:a7:b9:6d:ce:8f:f2:ad:e3:1b:73:4c:90:9a:
                    37:71:49:d1:9e:24:df:a4:bf:8d:bf:77:9a:e6:f8:
                    fb:50:bb:f9:84:c9:7d:96:18:5b:02:f3:14:21:fb:
                    a9:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:47:D3:22:48:3B:4C:6F:A9:91:93:3E:A3:C2:3C:26:7D:6A:18:6B
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/821d4434-bdfe-4e62-b2c4-816ad4c135b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:16a0::/45

    Signature Algorithm: sha256WithRSAEncryption
         ba:a0:f2:29:d7:ed:b3:6a:c7:90:db:70:28:2b:b5:d1:4d:bf:
         a6:7d:86:68:c6:ea:8e:55:48:3d:fe:71:61:f5:e7:44:bb:a4:
         4f:13:1f:ae:47:de:e4:56:75:5a:37:71:34:96:f6:bb:0c:70:
         be:1e:45:0a:89:01:a2:9f:1f:95:b9:2e:51:40:66:44:f1:e8:
         27:b9:24:6e:14:ec:a1:a2:73:a7:ba:5c:67:f6:6c:a5:2f:52:
         4e:a6:70:68:7f:e9:df:42:2d:16:b9:b8:93:fe:34:65:4f:68:
         64:d3:18:b6:d7:28:41:69:26:4f:d0:2b:8b:82:52:ba:92:00:
         25:b1:a6:71:9a:7a:41:cb:f5:bd:f8:8c:db:32:6d:e3:18:c0:
         77:c3:41:f7:c5:41:71:3e:61:8b:e4:69:ef:3f:d7:ae:4f:14:
         c4:e7:38:44:4f:1d:13:43:fe:24:07:f6:63:06:52:dc:6e:6a:
         50:2a:73:a0:03:59:01:3f:c2:03:49:c7:db:b2:52:e6:6d:1f:
         a5:27:de:62:dd:d7:02:0a:38:44:1f:57:d4:a8:6d:a5:bf:4a:
         c5:e6:ff:1e:0b:b7:4a:1a:9d:8e:59:15:12:a4:5e:6a:bb:ca:
         cb:a1:64:a7:19:dc:85:68:4b:ab:75:b6:51:fa:ff:e7:55:5a:
         91:d1:52:56
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:29:24 2025 by rpki-client