Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a8a19adc-4f25-4682-8a0c-7e8d5de68d2a.roa
File:                     a8a19adc-4f25-4682-8a0c-7e8d5de68d2a.roa (raw, json)
Hash identifier:          UGwAno8Chab6wqimsGP3/qfzNResrLFXX6z+L1nRGXw=
Subject key identifier:   ED:09:38:9A:88:7A:25:FD:0B:50:5B:42:8D:BA:BB:D1:19:55:13:FF
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       32FFBF5A65D37E74AB397E2C7C80C6C9024DC34C
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a8a19adc-4f25-4682-8a0c-7e8d5de68d2a.roa
Signing time:             Fri 31 Oct 2025 01:23:26 +0000
ROA not before:           Fri 31 Oct 2025 01:23:26 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3b32::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:ff:bf:5a:65:d3:7e:74:ab:39:7e:2c:7c:80:c6:c9:02:4d:c3:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 01:23:26 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=425b4286a12f51bf418bc8da8155574cd8604d6a121945b0c786faca01d80db4, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b4:d4:6e:98:5f:49:31:80:1c:d3:6f:d8:06:
                    a3:bf:5b:b8:4b:9a:fb:1d:fd:9e:49:22:2a:5f:59:
                    0e:34:c1:45:e7:4b:f6:7c:bd:e4:aa:aa:31:b5:0c:
                    8c:26:73:83:13:02:38:46:58:0a:62:7d:b0:5c:1a:
                    7f:ce:92:f4:7d:e2:db:e1:0a:b6:3a:de:bc:41:86:
                    6a:12:1d:84:2a:76:33:3c:db:4e:0c:f1:1a:5e:76:
                    8d:b9:d7:38:dd:85:0d:9e:cf:c0:09:72:f8:94:cf:
                    26:2f:b1:7d:d3:05:e0:1b:0b:39:a4:f5:a9:8c:09:
                    6a:c7:fe:7d:2e:79:a9:ed:7e:b4:18:e8:61:38:7c:
                    6e:99:42:03:8c:81:51:3c:a1:b2:66:81:31:1e:77:
                    d4:40:54:2b:3c:1b:28:2c:15:34:f4:87:92:1d:bd:
                    03:ad:f9:1a:e3:dd:86:8c:35:ad:0d:de:a8:4f:3e:
                    44:5c:be:f8:c6:65:15:bd:e2:a4:cf:e8:ff:c0:5b:
                    f3:30:c1:e3:eb:1e:4d:2d:4f:7d:6b:bd:f4:d7:50:
                    51:c1:b7:48:ea:16:4e:8a:20:17:6d:b7:3e:72:27:
                    43:2e:1d:10:9d:8e:85:a0:1d:d4:fd:64:bb:b0:86:
                    66:f9:18:e8:f3:f0:94:ba:4c:fc:61:8a:2f:58:f2:
                    48:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:09:38:9A:88:7A:25:FD:0B:50:5B:42:8D:BA:BB:D1:19:55:13:FF
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a8a19adc-4f25-4682-8a0c-7e8d5de68d2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3b32::/47

    Signature Algorithm: sha256WithRSAEncryption
         21:2b:01:59:05:8d:19:03:3e:0f:95:eb:22:0f:94:49:ae:ac:
         9e:55:49:f2:51:bc:5c:15:13:52:65:4a:44:4a:e2:ac:17:e0:
         fe:ed:18:62:01:29:bc:ef:6b:96:4b:cb:b9:b8:ac:b8:5f:d4:
         f3:ac:1f:81:3a:d0:68:6d:24:54:a6:29:56:5a:73:ff:23:ac:
         1b:fe:a8:f7:24:1e:4d:c5:c2:06:81:30:09:be:39:20:74:ab:
         4d:5e:cf:26:aa:6b:e0:5b:21:8c:7a:e1:f2:e0:8f:0b:95:d6:
         63:ff:8a:8c:93:e9:87:21:a9:3e:33:53:0c:7b:c0:13:ab:e9:
         d5:12:d4:47:91:ae:0d:44:99:c8:0e:37:b8:66:47:ec:49:e8:
         94:4c:17:75:07:fd:ca:0e:8c:22:ea:ca:e2:e7:fd:0b:93:e5:
         e1:13:5f:56:78:ae:1b:f4:4a:55:f6:72:74:f9:71:a4:fd:d2:
         87:67:84:72:37:dc:c4:67:f3:ed:51:a8:85:3e:c9:22:16:2c:
         99:59:27:bc:77:39:bc:63:91:54:4d:70:df:af:60:80:a5:ef:
         04:00:55:f7:88:56:6f:65:f0:6e:1f:1e:26:2d:e6:53:b2:38:
         4e:4f:5b:94:f2:aa:ab:64:82:88:a1:3c:25:42:c6:f1:0a:82:
         3d:f7:94:08
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:42:58 2025 by rpki-client