Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/96eb039f-29cc-4dea-baa8-d023430bc179.roa
File:                     96eb039f-29cc-4dea-baa8-d023430bc179.roa (raw, json)
Hash identifier:          rStM3TFF2RzJVSbpX6Chtw48+ZJNNeKKJmPC+BQ+208=
Subject key identifier:   92:0B:4E:3F:B0:F7:B8:97:F7:4D:8A:C4:4E:DC:FF:94:D5:1E:80:E4
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       31C82FB9E2CD20E9C2FBCA093B4AE4D8D3D073
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/96eb039f-29cc-4dea-baa8-d023430bc179.roa
Signing time:             Fri 31 Oct 2025 06:51:58 +0000
ROA not before:           Fri 31 Oct 2025 06:51:58 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2ce0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:c8:2f:b9:e2:cd:20:e9:c2:fb:ca:09:3b:4a:e4:d8:d3:d0:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 06:51:58 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=4c91647ce02d42390d97c93d94da4882f0a3a0eec1994c7bff83e9044bc42cf1, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:9d:50:a0:8f:91:a0:95:ce:d8:ef:83:08:2b:
                    90:eb:eb:b3:a7:a2:7a:42:b0:de:3b:41:17:65:2a:
                    2f:2b:fc:6c:e0:07:5c:18:ab:4b:7a:0d:8f:2d:2e:
                    78:5b:9c:31:09:54:e7:f4:4b:e0:95:65:87:33:08:
                    e9:96:08:9c:8f:a8:4e:3d:d8:dd:61:f0:9a:a1:b3:
                    a8:c0:a0:d6:97:54:31:e1:68:71:50:04:17:16:f3:
                    bd:95:8d:82:37:b4:bc:4a:c8:46:95:42:ed:f8:86:
                    f7:c2:b0:ac:cb:e0:c9:ce:c5:44:fa:a9:12:75:8b:
                    30:97:0f:3e:69:30:dc:9c:05:92:86:c7:ae:12:b4:
                    79:82:dd:6e:b3:04:de:8b:35:96:14:eb:52:d5:c6:
                    d8:53:c8:c8:10:da:32:da:e4:1f:d5:6f:65:8e:1b:
                    e9:d8:d5:6c:76:26:76:c3:af:b4:da:5b:43:8f:d9:
                    f6:c5:07:22:43:6a:c4:b1:c8:25:34:61:1a:f4:6c:
                    d8:ad:f5:91:6e:1c:3b:40:a0:f3:ea:64:dd:6f:61:
                    8c:1a:53:63:36:a2:08:48:11:df:09:3f:52:e0:d0:
                    ac:2e:74:d9:1b:cd:1c:b3:07:74:2f:ea:ec:f9:f7:
                    41:0b:ab:65:d4:b5:f1:f7:6e:86:06:0d:5a:8c:ee:
                    2c:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:0B:4E:3F:B0:F7:B8:97:F7:4D:8A:C4:4E:DC:FF:94:D5:1E:80:E4
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/96eb039f-29cc-4dea-baa8-d023430bc179.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2ce0::/44

    Signature Algorithm: sha256WithRSAEncryption
         b6:14:e0:44:3d:34:d2:c5:09:ad:54:10:3f:f4:a3:b4:59:2e:
         a6:a9:91:84:10:7f:42:a8:e3:f6:ef:dc:ec:2a:cd:10:0e:c4:
         bf:5b:7a:60:61:47:04:ce:e8:77:06:5b:8c:e7:18:7e:89:e5:
         39:8d:a9:27:23:80:ae:eb:54:96:6f:f5:a4:b6:65:78:87:55:
         ce:cd:e2:32:62:b5:32:17:39:81:b3:e8:3a:73:da:c7:60:e1:
         52:56:29:6f:2c:7e:c0:96:3a:7d:5e:3b:a0:76:8b:db:90:80:
         8a:39:90:03:3e:00:eb:8e:a0:a8:64:5d:5e:06:19:d0:4a:92:
         4d:cd:8d:3a:e4:32:67:23:d5:e0:9f:31:24:22:4f:44:80:b4:
         e8:f9:6e:34:42:bd:01:17:da:c6:1c:89:f8:1a:53:f3:80:69:
         9c:10:fb:68:ee:bf:b0:2b:80:da:18:d9:de:95:8a:49:d7:bd:
         ce:0c:11:d2:a6:9f:5e:d2:fa:29:93:ab:0c:f1:4d:fe:85:61:
         d8:61:6a:51:ff:1d:46:c3:e2:92:41:27:32:c0:d4:64:3e:95:
         13:f5:40:a7:18:87:44:93:2c:6b:fb:53:50:bd:04:5f:54:69:
         09:c3:30:d4:ee:28:30:2d:5d:66:4c:cb:f9:7c:4d:93:82:ff:
         81:c1:95:6a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:53:46 2025 by rpki-client