Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a800cbb2-f237-425f-b7fa-c01165507fc8.roa
File:                     a800cbb2-f237-425f-b7fa-c01165507fc8.roa (raw, json)
Hash identifier:          17qL8NK/QrFsE56M1pqPlVwLF91cMZD1DONhKcZtvdM=
Subject key identifier:   E9:27:B0:2E:D6:34:63:37:62:AC:8B:A8:82:E0:3D:10:C3:15:33:43
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       468E632B912A6FAAD59133FE8522E793837EFE8E
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a800cbb2-f237-425f-b7fa-c01165507fc8.roa
Signing time:             Fri 31 Oct 2025 06:37:01 +0000
ROA not before:           Fri 31 Oct 2025 06:37:01 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1840::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:8e:63:2b:91:2a:6f:aa:d5:91:33:fe:85:22:e7:93:83:7e:fe:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 06:37:01 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=1a19418210bf4e1af5bbffc7a2af0e9243fe3f223e34ac932dac7746d450e6b0, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:a6:b9:80:ca:28:83:52:95:51:d6:72:68:be:
                    76:3f:f4:d8:65:ea:1e:92:88:94:3c:eb:a3:4f:20:
                    b4:6d:7c:62:40:fb:4a:17:d7:e1:6b:26:17:ac:ea:
                    ec:da:0b:a7:86:b3:92:38:27:6f:7a:b3:20:83:45:
                    d1:cb:5a:0d:27:84:9f:00:74:9c:5f:21:ce:16:97:
                    64:9d:93:cf:76:af:9e:52:69:f3:71:cc:a8:4c:cb:
                    f9:fb:7e:e0:fa:27:9f:d4:83:49:2a:69:0b:7e:1f:
                    2a:a7:63:1b:35:e1:5f:fd:51:6c:36:53:6a:f4:40:
                    ad:88:e4:18:ae:e7:b4:cc:52:b4:ce:42:0e:a4:7c:
                    8f:a2:b3:46:6b:fe:52:b2:20:14:89:49:57:fb:18:
                    1b:7f:0a:29:fb:b8:eb:71:39:df:f8:6e:82:de:56:
                    54:2f:68:cd:29:f3:5a:36:93:df:4b:99:75:bf:58:
                    f8:15:89:ec:6d:43:c7:ac:c4:82:fa:2a:f3:19:50:
                    87:59:00:11:4f:05:18:28:61:41:06:1c:9b:ae:ab:
                    45:3b:ca:54:5e:2a:d6:56:15:9f:2b:69:70:a1:e6:
                    ac:b5:c0:10:9c:b0:ac:73:cf:a6:69:47:34:c2:3e:
                    ec:c8:55:0b:be:13:ee:5e:e2:f2:55:dd:18:e8:60:
                    7d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:27:B0:2E:D6:34:63:37:62:AC:8B:A8:82:E0:3D:10:C3:15:33:43
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a800cbb2-f237-425f-b7fa-c01165507fc8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1840::/44

    Signature Algorithm: sha256WithRSAEncryption
         02:ad:8e:78:e1:58:46:c3:21:3e:a1:30:29:f3:63:6a:e2:1f:
         33:ff:db:81:da:3c:77:ee:4d:19:f1:89:20:bf:f1:e7:1e:f4:
         76:04:a5:38:ca:ca:14:ef:12:fe:89:93:ea:52:e7:fc:64:4c:
         c3:57:72:df:82:13:2b:7c:70:3c:78:40:67:4c:37:6f:53:de:
         f9:5b:39:4b:15:77:61:b2:8f:ca:40:2f:6e:cd:0e:8e:dd:03:
         a6:f8:35:28:84:6f:73:c8:0e:58:22:0d:42:cd:c6:15:a8:72:
         80:37:9d:98:72:c7:8b:9d:f2:3e:06:3c:ff:64:cd:3e:af:90:
         ef:32:f1:cc:77:bd:45:46:8c:f7:f3:99:e9:3e:fe:fb:87:25:
         a2:30:b2:70:ec:bc:37:49:cd:92:48:c6:6b:7a:7b:02:65:74:
         a2:a0:29:28:16:f9:40:49:73:01:fa:f4:40:62:24:9f:67:9e:
         1c:ce:eb:2d:fd:e1:31:f2:51:d4:92:ce:d5:56:db:3e:9b:8a:
         9c:7f:72:d0:fe:a3:a3:65:13:7d:44:43:10:84:52:e3:31:5b:
         5d:44:3b:b2:aa:c5:8f:3f:e8:3e:6a:19:8b:d7:bf:9f:8f:2a:
         9d:11:74:71:8f:1f:68:b8:4a:49:25:22:52:9a:72:2c:56:c2:
         26:d4:cb:99
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:27:51 2025 by rpki-client