Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9b2fce1f-39eb-4950-b16f-75e23f6b1edf.roa
File:                     9b2fce1f-39eb-4950-b16f-75e23f6b1edf.roa (raw, json)
Hash identifier:          v5tfHgzwpi1IR+r6U+fo1aLto1KExtISOpAZti1reJM=
Subject key identifier:   EF:6D:35:1E:7E:09:6D:97:CF:17:12:0C:F2:62:7C:5B:3B:8D:5E:40
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       3715892F31C1447A504FA47747A557EC655D0DA5
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9b2fce1f-39eb-4950-b16f-75e23f6b1edf.roa
Signing time:             Fri 31 Oct 2025 00:23:29 +0000
ROA not before:           Fri 31 Oct 2025 00:23:29 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:34c2::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:15:89:2f:31:c1:44:7a:50:4f:a4:77:47:a5:57:ec:65:5d:0d:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 00:23:29 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=c55d2f5b52a43fbb07412270182b9a0c8f4e600f904f11e2edc9dec8c6c8a336, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:08:d2:47:e4:6d:f4:24:b0:d1:ff:5f:dc:af:
                    61:c7:c8:be:3b:10:30:fb:6e:90:72:84:ab:a9:e0:
                    f6:79:96:30:7f:43:79:b5:07:0b:fd:f7:c5:4a:56:
                    9a:33:37:12:2a:ba:b0:99:3c:21:ae:52:bb:0b:da:
                    4b:e1:40:51:b4:23:36:eb:e8:51:6a:5b:cb:26:b9:
                    5f:17:32:3f:67:ec:fe:b6:76:e5:20:d2:d9:6b:3c:
                    6b:cc:8c:f6:74:c6:5b:34:e2:11:c9:e4:1f:c3:0d:
                    43:d7:04:61:e0:f2:4c:b4:f4:4d:66:b0:e4:c7:60:
                    d3:fe:60:fe:91:a9:ea:65:8b:b4:d2:76:0a:08:e7:
                    fa:3f:a8:9d:b5:82:5f:6c:3e:a0:a9:a1:23:71:52:
                    5f:94:06:3c:c2:5c:aa:1e:a0:33:9c:0b:2e:84:53:
                    ab:15:a0:6c:00:c2:b8:81:68:fc:6c:27:9f:65:bb:
                    78:83:72:2a:c0:e1:b4:de:af:9e:68:de:0c:64:a2:
                    26:f5:e4:61:7a:b5:7e:4a:9a:d8:f8:d3:6c:6c:60:
                    b1:bf:b4:86:55:8d:7e:98:0c:c3:a9:9c:16:cf:79:
                    a3:8d:cd:48:01:62:4e:e4:fa:1b:c8:e1:84:db:77:
                    9f:7b:6e:10:55:9b:35:ea:3e:33:d2:71:01:14:3d:
                    85:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:6D:35:1E:7E:09:6D:97:CF:17:12:0C:F2:62:7C:5B:3B:8D:5E:40
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9b2fce1f-39eb-4950-b16f-75e23f6b1edf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:34c2::/47

    Signature Algorithm: sha256WithRSAEncryption
         b1:08:14:2b:fc:70:b6:79:ff:24:58:4a:77:07:b0:4e:f8:6c:
         a4:76:39:39:5a:85:40:98:38:b3:bb:28:00:61:bd:a3:66:85:
         53:af:9b:ca:7d:3d:c1:15:e6:1d:29:c5:08:98:55:26:2d:3e:
         79:7e:94:cc:51:7e:74:0a:a3:72:7e:a7:4c:3e:fd:ab:15:9f:
         e7:76:35:09:18:a3:8d:db:74:00:1b:53:a5:04:b1:74:5a:a2:
         e9:82:78:5b:81:cf:ea:50:84:f3:f1:f8:dc:ca:6c:75:f9:a4:
         50:60:9c:0c:8c:da:6f:b8:77:5a:91:22:13:b2:03:df:fe:3f:
         34:42:61:cd:da:a4:b9:3e:ab:40:79:e1:b0:76:98:b4:71:e5:
         6f:c8:e3:62:54:df:4b:6e:67:6d:4c:70:91:ea:bd:fe:07:6a:
         94:8a:bb:07:6e:0f:19:06:fa:8e:0b:96:df:9f:34:17:aa:25:
         01:c5:23:75:0e:a8:65:e1:f5:b9:22:c3:6d:59:30:ce:21:da:
         6c:b4:0c:28:cd:6f:ce:8a:e1:be:68:fd:26:d3:96:2e:b2:d3:
         0e:51:c3:79:da:0d:b3:a7:cb:01:d0:0a:07:03:42:7e:fd:30:
         91:06:0a:6a:7f:b6:e8:ba:3a:d2:ee:36:b8:ba:2a:95:ad:fd:
         20:bf:3a:c7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:46:09 2025 by rpki-client