Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a59af8fe-44bd-4608-8d03-fe1a63f4ffd5.roa
File:                     a59af8fe-44bd-4608-8d03-fe1a63f4ffd5.roa (raw, json)
Hash identifier:          CN9h4RvQewWk7JxCVIyU27Cewx2ccpwR/VwKtsiYqH0=
Subject key identifier:   56:09:BD:CB:64:80:A4:D0:EC:5E:19:6A:8F:C1:27:1B:B2:48:8A:75
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       50F8B68DA613DF2F65DD2B5929BB6ADA80A0970C
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a59af8fe-44bd-4608-8d03-fe1a63f4ffd5.roa
Signing time:             Fri 31 Oct 2025 05:23:45 +0000
ROA not before:           Fri 31 Oct 2025 05:23:45 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1a20::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:f8:b6:8d:a6:13:df:2f:65:dd:2b:59:29:bb:6a:da:80:a0:97:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 05:23:45 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=f22eaee18818c85c299487eb8d07884968c3b727e792bee8a4081ebf3fe3a891, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:91:09:b9:cf:23:ab:18:c6:a9:fd:8a:91:0c:
                    98:0b:61:e3:34:dc:6d:59:61:cb:92:2c:ae:ec:5f:
                    f8:8e:75:4f:20:0c:9b:7b:5f:11:00:58:99:57:fc:
                    9f:ea:04:88:27:b5:bc:4c:df:e6:f8:b3:24:ec:20:
                    0f:95:a4:23:50:b0:ef:d9:97:e8:b2:bc:f3:a4:8e:
                    da:87:a5:c6:4d:e2:3b:39:7f:59:dc:f4:2b:89:8d:
                    32:90:6b:9f:e3:21:ea:49:26:00:2b:9b:6e:f1:32:
                    79:97:99:de:30:67:13:f9:ca:18:6a:4d:04:6f:82:
                    29:20:a5:7a:12:31:f5:78:af:d8:2f:eb:0f:af:96:
                    b0:8a:cc:29:7f:b1:7c:00:31:ea:f3:2b:e2:f6:17:
                    4a:79:3b:e5:a0:6b:5d:ca:ef:d3:d6:7b:38:00:10:
                    f5:5a:69:d9:22:6d:66:c4:bf:b3:2e:f0:39:13:f9:
                    61:4e:56:f7:95:b2:15:82:a0:3d:79:14:7f:45:54:
                    7d:c2:49:8d:7d:a9:b5:02:33:b0:e0:89:e9:34:72:
                    3d:62:84:97:73:f7:9c:f3:ba:6f:f6:ae:73:41:25:
                    35:87:e3:c2:63:3c:36:95:24:ab:b1:73:7e:49:0f:
                    e1:03:41:95:2f:45:3a:df:74:2a:c7:d1:29:83:76:
                    6f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:09:BD:CB:64:80:A4:D0:EC:5E:19:6A:8F:C1:27:1B:B2:48:8A:75
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a59af8fe-44bd-4608-8d03-fe1a63f4ffd5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1a20::/45

    Signature Algorithm: sha256WithRSAEncryption
         3b:12:fa:6b:7f:d2:e8:6c:63:d8:18:75:de:71:94:8c:b3:99:
         51:b7:04:e5:dc:43:78:90:e9:c7:ab:01:0c:66:04:0b:8a:7b:
         c0:07:b9:7b:4b:8b:d3:41:7a:f9:6d:6b:1e:50:9d:2b:29:f8:
         d1:46:a4:a2:27:24:13:88:ba:e7:cf:1e:0f:e0:67:48:34:4b:
         af:94:52:0e:2a:38:05:c6:85:7c:a7:21:48:82:6f:2a:e3:80:
         df:1b:39:29:4f:e3:fa:98:f2:5c:ea:4c:e9:28:5d:52:89:78:
         5c:02:cb:3b:ab:8b:dd:41:22:55:a0:71:c9:bc:c8:20:0b:22:
         97:19:f1:62:03:02:6e:b6:cc:b1:f0:90:38:0e:8b:03:ac:0a:
         53:75:30:31:1b:e7:aa:6d:69:18:66:86:9b:0d:e7:ae:a2:b6:
         1b:79:ed:03:b5:19:83:6a:a6:2f:09:0b:91:ef:4f:e1:93:e2:
         65:02:05:52:22:ac:ef:ac:dd:19:d2:0b:f1:03:8b:97:c9:1e:
         68:1f:fb:ea:0f:41:85:7c:7a:29:0c:9b:09:b1:ed:21:50:5a:
         26:e9:56:1d:69:49:46:23:46:5a:b7:3d:ea:38:97:0c:b5:bb:
         89:27:2d:4d:68:97:fb:6b:b5:67:c4:e5:04:75:7e:64:57:72:
         63:75:bf:36
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:55:58 2025 by rpki-client