Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a90e18f5-a1ca-4613-9786-e9d9b340bd53.roa
File:                     a90e18f5-a1ca-4613-9786-e9d9b340bd53.roa (raw, json)
Hash identifier:          UupiXmt4U+CrJYMlH6KoG41bcj33mqaEAEfeC6pMdGM=
Subject key identifier:   93:04:65:19:0E:3A:4B:BF:62:69:E6:75:85:D1:C2:AF:0F:B2:F0:22
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       6986DB4FEDA2E02153D5C07588C6002EFE622F5A
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a90e18f5-a1ca-4613-9786-e9d9b340bd53.roa
Signing time:             Fri 31 Oct 2025 02:52:14 +0000
ROA not before:           Fri 31 Oct 2025 02:52:14 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:18dc::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:86:db:4f:ed:a2:e0:21:53:d5:c0:75:88:c6:00:2e:fe:62:2f:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 02:52:14 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=5acf98e41fd9bef5b84fc1576b4ab34f4c8c94b3921864804e6721ccc37f8fef, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:2f:31:a6:64:75:57:1d:c4:f6:5c:0a:f5:b0:
                    5a:6a:d6:a5:82:91:aa:99:dc:1c:81:85:9b:41:0c:
                    95:5e:e9:33:60:31:3e:89:14:81:1e:87:f8:46:93:
                    ef:92:91:74:06:fe:01:7a:85:54:83:63:6c:0c:1e:
                    6b:05:f7:18:36:0a:42:37:69:13:3e:78:0d:0d:ea:
                    93:bb:04:82:43:cb:af:df:7b:09:2a:99:cf:32:7f:
                    3d:bf:ab:b7:8e:35:37:b3:6a:34:75:40:14:4a:ab:
                    a6:73:30:d9:f1:f9:4a:28:ec:14:df:12:95:7e:5c:
                    9c:c6:cd:59:39:3e:d1:62:2b:80:3c:9a:09:6f:fb:
                    61:5b:b1:9d:c8:1d:3c:3b:d4:2f:61:90:cc:61:b0:
                    9f:01:a9:a1:0f:d9:13:f7:7f:e9:ef:7c:83:6d:b9:
                    a3:eb:08:4f:bb:0c:78:34:27:a6:d7:ed:a7:f6:26:
                    11:38:f6:a2:c9:a8:38:fe:2f:f4:4e:03:91:2d:46:
                    94:38:d3:77:31:b6:cf:58:8d:12:2f:13:62:22:fa:
                    b6:9c:9c:fa:a1:ca:1e:08:1c:ee:21:dc:45:58:89:
                    d5:84:96:c2:da:01:87:4b:95:97:b1:37:41:cf:3d:
                    91:32:8b:eb:90:df:e8:f3:48:bf:3d:08:16:7f:b5:
                    52:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:04:65:19:0E:3A:4B:BF:62:69:E6:75:85:D1:C2:AF:0F:B2:F0:22
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a90e18f5-a1ca-4613-9786-e9d9b340bd53.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:18dc::/46

    Signature Algorithm: sha256WithRSAEncryption
         21:be:1e:f2:03:bc:04:49:1c:2d:ad:f0:b2:c2:b0:fe:bb:4b:
         81:ff:68:dd:70:48:91:90:83:88:47:4d:e6:d0:01:a5:8e:c2:
         68:98:f0:04:3a:0a:b3:c0:94:34:8e:96:b4:a3:b9:be:c8:1c:
         0e:24:40:cc:02:bb:07:74:66:7d:4b:84:9f:ca:4b:62:cd:ed:
         81:0a:67:4e:76:d8:50:63:e7:2a:c1:74:bf:14:81:9d:3e:a7:
         2c:23:dc:e0:54:08:dc:09:a2:e1:08:1c:c7:54:b1:ac:f8:7c:
         23:ce:3e:3f:67:53:98:22:97:bd:68:31:6b:1a:a1:17:5c:f6:
         a5:5e:09:17:b8:57:c3:b0:5e:1d:db:07:4b:89:d6:75:bd:77:
         70:89:0f:44:9f:38:26:49:89:b9:bb:89:a7:bf:b1:a7:c9:e5:
         94:92:eb:08:6e:af:9c:20:8f:72:4c:7b:89:1f:03:76:f4:d1:
         3b:2b:4c:0d:cf:4f:03:43:b3:8b:13:20:09:28:72:79:bd:07:
         24:88:1a:43:d7:d4:86:ce:3d:a4:52:9b:db:bb:80:6f:bc:48:
         9f:5b:af:d5:e5:a6:cb:b8:72:df:a7:f9:07:1c:7f:11:1e:f7:
         7c:2e:19:25:c5:7a:a7:61:25:c8:11:8e:ec:48:8e:e7:1d:7e:
         97:96:67:b7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:37:53 2025 by rpki-client