Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a6942c06-fa38-4c3e-acd0-5b76f0eed5c3.roa
File:                     a6942c06-fa38-4c3e-acd0-5b76f0eed5c3.roa (raw, json)
Hash identifier:          LFYh3aBUpTBIA43LiKUQZXStm3d5+Afe0ShLw/aGLPc=
Subject key identifier:   E8:45:50:84:18:30:DA:73:EF:BE:7D:83:EE:1D:94:FA:E7:E1:35:0E
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       5B91699B1819245C0F33B8E50008E742AB243E48
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a6942c06-fa38-4c3e-acd0-5b76f0eed5c3.roa
Signing time:             Thu 30 Oct 2025 22:12:18 +0000
ROA not before:           Thu 30 Oct 2025 22:12:18 +0000
ROA not after:            Thu 04 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1be2::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:91:69:9b:18:19:24:5c:0f:33:b8:e5:00:08:e7:42:ab:24:3e:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 30 22:12:18 2025 GMT
            Not After : Dec  4 23:59:59 2025 GMT
        Subject: serialNumber=d571f06a462888b8708d817bdac4dadcc008b473b08ed7a99c774cfe3028a870, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:6b:d8:d4:12:94:46:ca:ae:30:9f:8c:5d:e2:
                    51:98:8a:0d:3f:2a:61:f8:15:8c:f9:96:23:6a:ad:
                    2b:ec:82:54:d4:44:3b:ef:89:f0:a5:13:78:28:3d:
                    76:ca:b5:6f:56:55:87:60:93:3f:3e:b8:ba:0d:57:
                    30:e2:be:aa:b3:bb:88:b4:5d:4d:bb:aa:59:33:5b:
                    e3:41:c6:56:db:6a:ed:8d:cf:19:18:8a:2c:2c:1c:
                    b7:b7:23:d0:b9:44:4a:70:44:45:28:25:17:89:f4:
                    cf:8a:38:06:e0:11:7c:67:a5:e0:e6:85:dc:8c:a2:
                    c3:91:a3:22:a6:40:4e:60:1f:e6:c2:14:c9:a1:28:
                    36:ed:03:d3:ed:32:e2:10:59:1a:72:fe:4e:45:77:
                    4c:ab:d0:cc:2e:77:97:87:45:45:24:f1:d1:5f:e6:
                    65:8c:5c:06:f4:f3:f4:65:a0:6b:43:8d:60:55:82:
                    2e:0a:6e:6d:69:d3:27:ab:e4:7e:d0:bb:54:9e:ab:
                    0f:a6:60:da:0e:d8:1b:1d:30:0c:95:af:73:8d:df:
                    74:fd:1c:70:75:f3:9a:fb:5d:60:06:ad:b9:73:5d:
                    9a:3d:a1:05:52:29:bc:eb:8f:5b:a4:0a:cd:94:a4:
                    5f:ea:47:a8:99:5c:64:27:94:51:fc:c6:5b:d8:6c:
                    fa:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:45:50:84:18:30:DA:73:EF:BE:7D:83:EE:1D:94:FA:E7:E1:35:0E
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a6942c06-fa38-4c3e-acd0-5b76f0eed5c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1be2::/47

    Signature Algorithm: sha256WithRSAEncryption
         60:5d:13:41:cd:52:15:b5:b9:36:1a:6c:00:f8:ab:f7:96:e8:
         4f:0e:ad:5c:7d:b4:6d:ed:83:36:5d:20:f0:f5:01:c4:de:fb:
         d3:3b:2f:55:4d:9e:78:04:54:bf:fa:9d:f2:65:c6:49:08:f7:
         d6:b2:af:74:d7:e3:14:2e:f3:b6:76:0c:3e:59:b0:dc:98:22:
         c3:5d:0a:48:15:1a:b0:d3:e9:18:8d:f4:5c:97:49:52:54:f1:
         7b:ad:82:4f:6c:27:c6:23:53:25:16:7f:3e:50:66:c4:a2:b3:
         4b:b6:56:6d:9b:49:46:d5:a2:31:dc:67:ec:bf:5f:24:e2:74:
         9b:c5:8f:de:d3:7e:fd:16:aa:3e:33:b4:6e:61:1b:96:94:66:
         06:ca:76:78:dc:23:e1:0c:95:23:d8:e3:9e:a1:5a:b0:28:6b:
         b5:ba:d3:2d:89:2d:68:dd:5a:58:76:79:e0:bf:d2:0b:72:35:
         be:a7:f5:1b:c5:78:40:6a:8e:4f:db:df:68:ec:35:ab:c5:b3:
         12:45:04:9f:c8:2a:b7:f8:ff:f2:dc:70:e5:7d:f5:ff:3b:38:
         6b:4b:db:32:be:6b:8d:86:fc:0f:27:e7:cc:8b:62:b0:3b:31:
         41:6a:55:de:db:f2:fa:82:e7:33:6d:1e:59:59:ce:18:14:2b:
         d0:8d:c8:48
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:42:20 2025 by rpki-client