Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9feada1e-4769-46e4-8a23-9183ce9ae0de.roa
File:                     9feada1e-4769-46e4-8a23-9183ce9ae0de.roa (raw, json)
Hash identifier:          KgD9t7Upo/6oUripGTja4WbpOJwnX1gtE6/OYWitnj8=
Subject key identifier:   EB:56:B7:D0:93:DF:55:64:D7:DE:A9:35:4F:54:89:B5:A4:8C:F0:C0
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       5B34BC53F4064B6BC8047C84932EB94F41045AC9
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9feada1e-4769-46e4-8a23-9183ce9ae0de.roa
Signing time:             Fri 31 Oct 2025 07:13:01 +0000
ROA not before:           Fri 31 Oct 2025 07:13:01 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1be0::/43 maxlen: 43
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:34:bc:53:f4:06:4b:6b:c8:04:7c:84:93:2e:b9:4f:41:04:5a:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 07:13:01 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=b2538648451d344cd07b85b54c028a572a60dc5d1d38f7142a31677872a8bbf9, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:fd:22:61:25:66:97:37:51:16:f2:41:b3:3c:
                    3a:fc:d8:62:32:23:62:03:35:c2:6c:a0:06:77:7c:
                    78:7d:c1:70:f0:8a:ac:b6:a2:76:c1:6a:ad:f0:75:
                    a1:81:60:37:1d:01:46:da:50:32:f3:34:98:cf:0b:
                    e9:af:fa:ff:2c:7c:d8:03:fa:43:b4:c2:12:f9:7b:
                    b5:12:b6:10:a4:9d:f5:a1:d2:36:06:d6:eb:44:2a:
                    10:5a:be:c4:7c:10:46:bc:32:a8:18:a7:d0:89:dd:
                    83:d1:e0:dd:20:0e:e3:d2:8b:c5:38:93:d6:da:80:
                    fb:79:c2:05:c9:9e:11:04:d6:06:16:82:e5:40:bc:
                    47:b8:07:cd:29:ba:1e:24:2c:75:c6:1e:82:9e:94:
                    d8:1f:1d:34:b5:f6:a8:af:66:c3:5b:a4:10:f0:1d:
                    63:4a:07:1c:e8:51:42:cb:3d:12:12:72:39:c1:18:
                    a5:68:80:a8:ea:b3:b3:b0:57:44:bc:c9:fa:05:45:
                    dc:cc:32:d4:c1:75:fd:32:0a:76:30:ce:85:49:74:
                    47:df:42:53:a1:5d:db:bd:86:78:58:ec:50:e0:d9:
                    8e:c3:de:15:ae:03:bd:d6:df:6a:8f:04:e5:72:e9:
                    66:7b:03:a8:51:9d:30:a0:77:f7:f7:b9:e0:e1:f0:
                    a0:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:56:B7:D0:93:DF:55:64:D7:DE:A9:35:4F:54:89:B5:A4:8C:F0:C0
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9feada1e-4769-46e4-8a23-9183ce9ae0de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1be0::/43

    Signature Algorithm: sha256WithRSAEncryption
         2b:a4:25:71:be:5f:0e:27:d7:b9:d2:f4:c7:9c:51:3a:1f:79:
         8b:fe:7e:1b:62:ef:c6:f3:ee:a8:11:6b:4b:c3:96:d0:4a:4c:
         be:c9:7c:7d:d4:9d:17:a1:61:69:6b:ba:76:ac:02:a6:72:b5:
         1b:ad:f7:3e:d0:d7:65:90:2d:85:90:fd:8c:78:d1:6f:fc:7d:
         76:39:a9:0d:25:2c:e5:13:74:00:27:6e:4a:90:f7:eb:3d:40:
         84:b0:c1:7f:61:4a:0a:d6:8c:5e:88:6e:19:c1:43:7c:ad:cc:
         dd:b7:b4:86:e7:b6:92:1e:0c:ce:32:61:5f:34:77:e9:9c:67:
         1b:14:a8:d9:03:e0:b2:d5:85:80:eb:33:68:1d:f1:39:b1:fe:
         01:71:66:d9:21:b3:f1:91:cb:f4:a3:ae:aa:4e:89:cd:92:0c:
         db:af:25:c3:f4:c9:9d:e3:fd:f8:4f:d0:c2:4b:3b:67:27:8f:
         7f:41:41:66:72:72:94:e0:c1:54:06:f0:5f:22:ae:8d:12:d9:
         1d:21:ea:bf:c5:7b:46:ee:50:c1:0c:f4:7a:91:b2:7d:d4:d8:
         97:cb:7f:8f:e9:b2:7d:6d:4e:15:f5:3a:d4:38:f7:6f:ca:e5:
         b8:ef:f7:57:cc:31:7e:6d:53:0d:e5:b8:ac:e3:3d:82:07:11:
         51:f6:21:74
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:34:50 2025 by rpki-client