Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/938b5405-ab7a-4ea5-a6ce-e5bd2e66c922.roa
File:                     938b5405-ab7a-4ea5-a6ce-e5bd2e66c922.roa (raw, json)
Hash identifier:          VUNx6Slfv5ax3zKKvFhXi0T20QpJSz4KOFuqprkczLk=
Subject key identifier:   6B:4F:E7:BE:C7:EA:71:EB:F2:A5:C8:C7:55:D6:CA:3E:E5:AB:A9:CB
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       6C2E3EF2689661D134C1F640FEBC7579E244F2DE
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/938b5405-ab7a-4ea5-a6ce-e5bd2e66c922.roa
Signing time:             Fri 31 Oct 2025 07:40:58 +0000
ROA not before:           Fri 31 Oct 2025 07:40:58 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3540::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:2e:3e:f2:68:96:61:d1:34:c1:f6:40:fe:bc:75:79:e2:44:f2:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 07:40:58 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=d9828fe49c60f1fca73595870df43cb71ce31fa15d886e3bd22406b9babb6b45, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:82:45:f7:07:d5:b3:e9:0e:39:33:78:e3:4d:
                    a7:29:3d:c0:a4:41:ba:e6:70:eb:ce:b6:ff:8d:c9:
                    db:76:6b:bb:71:b6:bb:5c:50:2e:bc:4f:8d:55:fe:
                    45:9a:bb:0d:b1:91:13:f3:6f:0f:e6:18:89:4e:59:
                    41:07:48:5d:05:a0:53:82:4a:75:1c:45:22:69:ae:
                    26:52:f3:63:98:ba:8c:2d:79:0e:9f:d0:ca:c7:ae:
                    f6:1a:f4:1f:74:13:6d:cb:14:2b:a4:8e:f4:95:c1:
                    88:c4:45:b0:4a:ca:9f:64:a1:c3:ab:6a:e8:e4:2a:
                    fe:14:e6:1c:80:c2:8b:36:59:21:9e:60:34:22:39:
                    16:52:7e:14:28:b1:85:b8:a8:ce:09:22:0b:2f:56:
                    05:96:4c:f8:f1:80:3c:0c:ac:9b:d5:b4:08:7a:0f:
                    dc:15:6d:fe:28:05:a5:23:80:87:fc:6d:fc:b7:72:
                    80:e9:a9:bf:fd:5e:78:73:c6:2d:bc:48:23:fc:51:
                    37:43:66:b8:73:03:2e:63:92:62:f2:56:91:f4:95:
                    76:c6:29:85:e8:f5:f4:9e:30:18:12:6b:59:26:da:
                    30:0e:07:6e:ab:72:07:f7:32:da:c6:c5:94:1f:ad:
                    d7:d6:d6:7a:61:d2:86:1b:a9:ff:1e:d5:c9:3f:7b:
                    d3:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:4F:E7:BE:C7:EA:71:EB:F2:A5:C8:C7:55:D6:CA:3E:E5:AB:A9:CB
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/938b5405-ab7a-4ea5-a6ce-e5bd2e66c922.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3540::/42

    Signature Algorithm: sha256WithRSAEncryption
         5c:22:85:ef:18:b4:62:c5:63:dc:e0:16:23:69:1a:22:08:47:
         9d:d1:5d:26:2f:96:bb:78:9e:fc:04:05:4b:6c:83:56:f9:fd:
         b6:9d:93:d2:a2:be:6b:ab:2f:50:73:cb:02:14:30:a9:88:d2:
         71:0b:70:e1:65:11:63:40:8c:c6:d3:53:c6:1e:0b:23:0c:5d:
         59:87:d2:fc:05:a1:0e:dd:71:04:0f:80:44:5a:4b:1a:1c:e7:
         f8:bd:a7:45:20:18:f4:a1:f9:84:7d:d7:4e:e4:4e:59:e9:67:
         cb:1a:a1:7e:0e:0a:db:e3:55:f4:f8:e9:e3:90:69:76:d4:06:
         33:4a:6f:93:72:71:40:2e:6d:92:55:75:66:6d:2b:67:a0:91:
         1d:fa:85:f0:de:78:af:35:e0:c0:ad:00:f3:a7:18:20:71:92:
         8a:81:8b:46:a9:49:ae:27:59:7e:ec:c4:fc:7f:cf:be:d5:74:
         66:75:88:a3:c7:80:a4:42:66:56:17:ac:76:59:61:d0:98:7d:
         28:cc:db:8a:a7:6b:9b:29:98:66:50:ea:fb:bc:4a:fc:49:f7:
         5b:55:da:74:a9:b9:de:d0:00:80:6b:28:12:fb:e4:9c:f4:52:
         63:b7:c6:89:75:97:38:b2:99:3d:cd:59:ef:c0:fb:c5:7c:a3:
         f1:c5:79:d8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:55:56 2025 by rpki-client