Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/91acf3e4-dc94-4c61-a235-f1c7b5af9e36.roa
File:                     91acf3e4-dc94-4c61-a235-f1c7b5af9e36.roa (raw, json)
Hash identifier:          238uE5J4JrIKD91au0q/0of9ZmR7Cv5cbfLHQ6HX+hs=
Subject key identifier:   C2:CC:01:A6:03:E0:23:47:2B:E2:F1:2C:D4:DB:CC:B3:7F:85:B7:48
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       297396C23EF235BED2F296B589D43970863DDB10
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/91acf3e4-dc94-4c61-a235-f1c7b5af9e36.roa
Signing time:             Fri 31 Oct 2025 21:55:04 +0000
ROA not before:           Fri 31 Oct 2025 21:55:04 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:a900::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:73:96:c2:3e:f2:35:be:d2:f2:96:b5:89:d4:39:70:86:3d:db:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 21:55:04 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=c40749c7a6d078b867df9a1d4531e5f04732a12a677148dd674983b3d2671605, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:16:ec:be:36:21:9e:73:44:f6:ce:1e:c3:74:
                    d9:4e:f6:cb:7a:01:a2:b9:93:74:66:6b:16:e9:b5:
                    39:6d:40:8d:e0:65:61:a3:89:bd:dd:d8:39:f1:59:
                    d6:ce:8d:90:6e:2d:a9:f0:e3:68:45:4c:1b:91:29:
                    6d:db:07:31:99:f5:93:35:19:a5:6f:8b:e1:ba:50:
                    5f:cc:ad:ea:33:d7:e6:6f:69:2f:46:00:3b:c5:42:
                    2e:9e:71:6c:50:51:15:c8:8b:31:2f:fe:b6:1b:50:
                    d3:cb:19:a1:a3:bf:1b:5b:f5:09:9b:ba:27:38:51:
                    03:6a:15:3f:99:2c:6b:89:cc:3d:8e:b7:4a:13:88:
                    6b:77:65:da:bb:bd:44:f5:9a:91:16:ce:b0:23:c8:
                    55:63:97:97:fb:73:d8:a1:87:02:8a:ff:69:91:9c:
                    3e:f4:bc:fc:b4:34:98:88:5d:2e:14:f7:70:ad:36:
                    1e:9f:99:bc:4c:5b:08:50:37:f8:7f:78:cc:67:f6:
                    ec:18:40:80:79:0a:5f:11:ea:54:65:f9:98:6c:f7:
                    7f:b5:b8:94:94:a8:c0:79:ba:7c:36:10:10:c0:b6:
                    57:bf:25:16:b8:e6:8a:5d:f8:99:fc:d6:cc:77:56:
                    8d:0f:5e:51:ef:d1:6d:5c:c0:59:7f:ee:b1:5c:54:
                    80:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:CC:01:A6:03:E0:23:47:2B:E2:F1:2C:D4:DB:CC:B3:7F:85:B7:48
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/91acf3e4-dc94-4c61-a235-f1c7b5af9e36.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:a900::/40

    Signature Algorithm: sha256WithRSAEncryption
         24:ba:19:cd:6f:35:d4:32:c7:af:bf:19:04:78:6c:cf:c0:e2:
         5e:01:f6:f3:2d:36:7f:d6:d8:aa:0d:84:54:c7:3d:64:8c:c9:
         c1:58:5e:8e:e0:6a:3c:e5:24:38:61:ca:b4:33:b8:71:0d:45:
         14:8b:d3:9b:7a:02:51:67:9f:9e:d7:d7:1c:c7:d1:2e:53:f9:
         d7:79:03:92:cb:63:58:21:e6:fe:61:81:8f:b9:a8:c0:12:95:
         47:2b:1e:35:be:01:9a:a1:bb:51:a1:63:f0:90:ea:ba:ee:a6:
         81:19:b9:1f:b4:62:b3:64:b5:10:e4:dc:0c:de:15:02:f6:b1:
         43:75:94:96:6f:3f:56:c7:83:31:cc:52:df:82:89:5e:9b:1a:
         16:f8:48:82:a1:69:10:5c:41:83:ce:cf:a1:5a:f1:61:95:50:
         5a:e1:ed:cb:d8:24:2c:df:4c:ec:19:b9:13:f2:cd:21:ec:61:
         ee:d7:d1:7c:2d:11:09:43:ff:70:50:2b:04:5f:08:e9:02:22:
         c8:5b:2a:ac:8a:57:af:cf:dd:f9:05:7f:2b:53:42:e2:96:a5:
         55:0b:a9:45:6c:2b:09:8e:6c:28:32:6c:0d:1c:c9:78:8f:4e:
         1c:f6:11:4c:27:88:a1:39:2a:5e:d2:c4:36:38:3f:54:9e:7d:
         65:e9:ae:94
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:27:15 2025 by rpki-client