Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a1d51dbd-6a53-4ac9-ad00-73587d94e727.roa
File:                     a1d51dbd-6a53-4ac9-ad00-73587d94e727.roa (raw, json)
Hash identifier:          K/Pr8hJmL6yOpOShFB4MU3iXLmlzdEArikW3EjPk56Y=
Subject key identifier:   7F:33:B1:3E:2A:FA:9B:87:7D:73:BB:A6:A6:A2:51:79:3E:C0:14:D9
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       10C92CDAAA9375D370CA61E0E387D27C37545566
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a1d51dbd-6a53-4ac9-ad00-73587d94e727.roa
Signing time:             Thu 30 Oct 2025 22:53:48 +0000
ROA not before:           Thu 30 Oct 2025 22:53:48 +0000
ROA not after:            Thu 04 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:29a6::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:c9:2c:da:aa:93:75:d3:70:ca:61:e0:e3:87:d2:7c:37:54:55:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 30 22:53:48 2025 GMT
            Not After : Dec  4 23:59:59 2025 GMT
        Subject: serialNumber=49b574b561ac12b0824552a434dffb02b42679d648edd8b295fad31d287d868b, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:3e:6a:a9:3f:a1:48:41:01:2b:52:7f:c8:46:
                    a5:0b:d5:92:7d:d6:0d:f6:06:90:89:71:4e:d3:16:
                    4a:47:45:80:78:dc:35:e7:84:d3:3d:00:98:f9:30:
                    52:b0:01:1c:fa:11:b3:72:84:dd:ae:7e:8e:7f:3f:
                    48:ec:e5:3d:13:92:5d:62:d4:a9:49:83:76:d8:13:
                    cb:54:a0:1f:3f:b1:ea:d1:2b:10:b8:3a:54:d8:3e:
                    5e:5c:65:4e:0b:ce:bd:06:51:69:de:62:e9:59:35:
                    76:40:7e:65:6a:92:8b:14:6a:b7:da:e3:8a:d5:16:
                    4e:56:13:a3:96:81:d6:d7:07:27:a4:46:d8:4a:29:
                    7e:11:62:d8:51:8e:1d:be:7c:d0:77:ca:83:42:f4:
                    b7:3e:12:c5:c7:3e:f8:05:cc:03:5a:c5:b2:30:ce:
                    a3:21:dd:42:ac:3b:0a:45:3d:e7:ad:58:cd:81:21:
                    20:66:c3:26:fd:d6:e5:82:5e:b8:d1:56:71:6d:ee:
                    37:0c:cf:88:a8:02:b5:f9:e9:f7:5c:f1:37:44:3a:
                    8f:e7:cc:ba:9f:f3:51:4d:55:79:96:ff:74:48:6b:
                    48:23:9e:9a:b8:56:e2:bc:a3:51:eb:a7:7f:d4:57:
                    30:21:cd:d9:4e:52:96:79:5a:33:30:2f:bb:e3:99:
                    a1:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:33:B1:3E:2A:FA:9B:87:7D:73:BB:A6:A6:A2:51:79:3E:C0:14:D9
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a1d51dbd-6a53-4ac9-ad00-73587d94e727.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:29a6::/47

    Signature Algorithm: sha256WithRSAEncryption
         49:4a:03:18:00:2c:ac:b8:90:31:d4:ba:e2:90:7e:2f:1a:44:
         3b:8d:0d:92:fe:40:db:55:13:65:bd:f3:13:d9:5b:86:d6:dd:
         5a:87:e8:e7:19:5a:69:02:0f:3b:78:50:04:74:21:2e:a1:e9:
         00:87:0b:5a:63:77:ea:51:4e:39:ef:80:72:5f:93:c1:27:e3:
         37:dc:7e:bb:75:fb:1e:e3:da:02:99:c3:65:5e:7c:e2:e6:99:
         53:9d:0c:d2:64:28:7a:73:3d:e7:11:58:03:30:2a:0c:8e:fd:
         ab:12:27:20:23:67:bf:6e:5e:f5:63:5e:1e:16:d9:40:78:0c:
         f0:be:33:f0:fc:59:81:aa:c9:de:a4:4c:3c:2e:28:66:cd:97:
         e7:3b:13:c1:e7:f8:d3:24:03:40:6f:fa:07:6b:6d:f5:d6:3d:
         3c:3d:00:b0:3e:35:db:1a:9f:07:10:d6:00:46:f9:ea:b2:a1:
         eb:f4:2f:76:21:59:e3:d7:01:cb:2b:2e:83:c6:e4:d3:04:6a:
         e1:ab:1d:98:5f:f4:c4:1b:09:12:5d:27:09:25:1b:3d:99:bc:
         39:90:f2:e9:e4:42:f3:d0:a5:60:a4:2a:ac:54:1b:29:7f:05:
         ad:59:1e:ee:4f:ee:15:69:90:2b:18:bf:1b:b6:7b:59:e5:a3:
         c6:b6:c9:09
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:34:19 2025 by rpki-client