Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/90434b42-c46f-4888-a144-2cf1826fa508.roa
File:                     90434b42-c46f-4888-a144-2cf1826fa508.roa (raw, json)
Hash identifier:          1UZyqYKToKP6hYWPVQlN7050kwuuMFtR3HTWu9acCQI=
Subject key identifier:   F8:B9:2F:A1:6D:4B:38:CB:74:9F:66:B9:D6:E9:6C:31:3C:C0:65:27
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       169C92DE0F1A36F130A20522CE2AD73B7BA3FC48
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/90434b42-c46f-4888-a144-2cf1826fa508.roa
Signing time:             Fri 31 Oct 2025 00:55:06 +0000
ROA not before:           Fri 31 Oct 2025 00:55:06 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3860::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:9c:92:de:0f:1a:36:f1:30:a2:05:22:ce:2a:d7:3b:7b:a3:fc:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 00:55:06 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=5712a6bda7e8723da2d07cd46f34c2ce507235b14054691d4bcda4f905f1ee81, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:15:e7:62:4b:be:f2:5d:48:ff:a6:15:be:86:
                    4c:25:84:3a:0d:29:d7:ca:f4:c5:0c:40:7d:8e:03:
                    08:2a:ff:65:e1:73:64:56:73:d3:eb:11:ba:38:1d:
                    75:2d:ad:62:19:63:ed:f7:1d:c1:c2:c3:80:f6:4b:
                    5a:8a:8a:5e:f0:5d:1f:88:89:a3:03:5f:d0:86:63:
                    92:36:37:e1:d1:03:a4:f4:7a:eb:1f:b0:41:21:ed:
                    61:09:bb:45:4a:77:a1:49:f4:3b:f4:90:b0:4c:36:
                    44:40:df:14:72:08:cd:bc:5b:fa:7f:ee:5b:6b:d7:
                    fa:ab:dd:ea:4f:6d:c5:4f:dc:c5:54:8b:ea:c5:31:
                    eb:05:d9:61:50:24:19:b2:13:48:3f:ce:08:8f:ad:
                    c4:a8:84:de:f8:27:9a:6d:57:20:45:e0:37:57:9a:
                    d1:6a:26:78:d3:6f:74:b2:13:d4:06:71:70:df:6b:
                    7e:59:34:e6:c5:af:63:31:7e:79:fa:a8:91:09:92:
                    9e:58:74:a5:31:97:d8:df:ef:5b:fa:f8:8b:7a:bc:
                    62:8b:ff:fd:91:b6:73:8c:58:da:c5:3e:2c:d4:4a:
                    d4:26:d6:98:01:f9:6c:62:19:ac:fd:9a:c2:4b:10:
                    ff:ed:2a:70:8d:a3:95:c8:d8:81:56:da:05:b2:bc:
                    3c:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:B9:2F:A1:6D:4B:38:CB:74:9F:66:B9:D6:E9:6C:31:3C:C0:65:27
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/90434b42-c46f-4888-a144-2cf1826fa508.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3860::/47

    Signature Algorithm: sha256WithRSAEncryption
         14:73:85:db:98:15:8c:c6:70:55:0b:35:55:c6:21:ed:54:bb:
         21:8e:91:c0:62:6b:b8:13:d2:29:b0:a5:84:49:18:47:b4:2b:
         3c:e7:03:4b:3f:59:a2:fe:17:54:ee:3c:ef:62:81:08:b1:3c:
         a2:4a:93:92:8a:f2:68:07:27:5d:84:7c:79:1c:a1:dd:68:44:
         c2:5d:64:fa:54:f9:07:0d:58:d1:5e:b1:5b:cb:95:4c:60:4d:
         b2:c6:1f:76:c3:ed:1f:03:ff:5f:4d:11:9d:cd:15:75:e4:57:
         20:a4:d2:ef:e0:5f:55:c3:01:ad:eb:2e:a5:97:74:d2:b3:b5:
         ab:ee:0f:8a:05:4a:61:92:13:66:5e:08:08:02:05:fa:06:fb:
         b1:6d:c5:cb:4b:d6:8b:83:4e:0a:f0:f0:d1:10:8e:2c:af:05:
         98:e7:26:87:18:c3:a2:54:f2:da:f5:38:0e:e1:89:00:2c:72:
         15:2e:bb:7c:df:78:a5:0c:35:fb:0e:fd:4a:ef:b2:9a:1f:fb:
         9b:3f:c3:7a:c1:b6:70:9b:50:70:da:6a:8a:60:97:b4:9e:1b:
         2c:58:0d:b6:19:2b:89:75:43:fe:31:b8:2e:52:29:6f:dd:70:
         bd:08:ef:aa:19:6b:72:bb:cb:4e:54:f9:34:77:3b:d6:30:1e:
         61:8d:aa:21
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 12:57:16 2025 by rpki-client