Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8905ce03-dcfe-4f0b-88d5-3338d4ae56e6.roa
File:                     8905ce03-dcfe-4f0b-88d5-3338d4ae56e6.roa (raw, json)
Hash identifier:          4BQ8UcNLO1zm9r2DEfm00giuec8+IjI/BFw7MQ+UG3g=
Subject key identifier:   3A:7C:6C:2B:71:C9:14:7F:08:BE:66:9D:60:5E:A9:F4:22:6F:C0:CA
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       76E42DCEF06B9DE20689E005BF0E36CD5F27BC24
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8905ce03-dcfe-4f0b-88d5-3338d4ae56e6.roa
Signing time:             Thu 30 Oct 2025 22:55:25 +0000
ROA not before:           Thu 30 Oct 2025 22:55:25 +0000
ROA not after:            Thu 04 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:29d0::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:e4:2d:ce:f0:6b:9d:e2:06:89:e0:05:bf:0e:36:cd:5f:27:bc:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 30 22:55:25 2025 GMT
            Not After : Dec  4 23:59:59 2025 GMT
        Subject: serialNumber=6b17c1c1785ba984f88de33d5304a728f24f8c9a625b42b58e633347c23ed11f, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:df:37:70:84:c3:fd:6b:3b:d9:09:1e:1c:5f:
                    db:51:2d:eb:9f:4d:21:c1:26:62:6b:35:d3:7b:00:
                    ae:aa:d6:0f:01:58:6b:44:52:2e:aa:cd:67:4f:f4:
                    3b:8f:0d:32:e2:8b:26:10:d2:43:20:ed:dc:40:54:
                    2e:c1:04:3a:75:d4:bf:8d:d5:0d:d8:09:b0:fe:d6:
                    f6:a3:ae:1f:08:d7:6e:f5:23:3f:35:71:8e:70:e0:
                    57:40:96:f6:0c:4c:bf:ff:d7:3b:a7:6d:f0:7a:59:
                    57:74:be:3a:3a:89:cd:31:a3:41:65:e1:1b:0a:26:
                    52:c5:70:50:2e:a8:69:4e:33:88:9e:ce:a4:74:8e:
                    8b:6f:80:c8:a7:59:b7:d3:71:6d:53:8f:25:73:ca:
                    f3:6c:48:40:de:85:87:ea:b5:59:0c:5c:1c:15:25:
                    38:81:ff:b3:1a:8a:b9:16:1f:2b:18:73:9c:ae:10:
                    55:71:51:18:1e:37:5c:a8:de:68:55:15:af:e7:21:
                    0b:9c:46:e3:da:e8:a6:9f:ee:20:92:d8:ae:7e:df:
                    a2:4c:e8:86:81:9a:2b:58:2e:6a:21:14:53:08:44:
                    80:4c:62:eb:a5:27:b2:70:34:e3:b0:84:7f:8e:61:
                    28:68:34:2c:6b:23:ea:ee:06:7f:3e:65:a0:b8:04:
                    6a:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:7C:6C:2B:71:C9:14:7F:08:BE:66:9D:60:5E:A9:F4:22:6F:C0:CA
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8905ce03-dcfe-4f0b-88d5-3338d4ae56e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:29d0::/47

    Signature Algorithm: sha256WithRSAEncryption
         56:20:10:bb:a7:51:bb:a3:f1:9a:db:31:c8:f3:cc:45:5c:8c:
         fb:a4:1c:56:af:a0:b4:e0:bd:a3:3d:65:e3:f3:51:29:bb:6c:
         8c:1a:68:ad:0b:e5:c9:36:32:05:dc:02:3a:e7:48:cd:71:7d:
         35:15:74:cb:69:a4:5b:a7:86:34:3f:12:08:8d:e9:e3:d7:cb:
         be:b4:ef:34:cd:f4:28:69:3a:7a:e1:90:73:b4:f6:70:86:4e:
         c9:48:fe:b5:a7:11:39:30:5a:4e:9e:4b:1b:26:12:e7:e2:e8:
         28:33:a2:cd:d7:7f:2c:d3:c9:7e:da:39:0a:52:a6:d9:af:06:
         b4:76:61:d4:c9:f4:e3:85:1e:cf:42:35:10:d8:27:d5:a0:b3:
         87:58:c0:6b:e3:09:2d:d0:d4:da:b1:92:c6:f4:f1:1c:cd:de:
         1d:47:a2:4f:dc:79:d0:5e:51:96:3b:af:d0:db:46:db:d1:52:
         61:41:1f:e1:e7:2f:ea:2c:4e:0a:5b:c9:6f:84:6b:da:b9:86:
         a5:20:57:5e:37:bf:54:ba:89:7b:b5:52:b9:24:fd:02:b1:e4:
         fb:8a:9e:ee:3b:0d:4a:29:13:e7:9f:06:80:6b:b0:3d:96:c4:
         d1:dc:a2:dd:e6:30:5f:10:64:1b:3b:a3:0a:b0:bd:77:d6:1f:
         d6:48:0c:e8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:28:16 2025 by rpki-client