Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a92c9b13-f9f0-4b3a-a26d-2a870fc3b1b3.roa
File:                     a92c9b13-f9f0-4b3a-a26d-2a870fc3b1b3.roa (raw, json)
Hash identifier:          eEn2bcOxfNc0Y+mTDYeXMxoD8LdF8km4F8Sh+fMPcAA=
Subject key identifier:   AB:AF:4A:E7:B1:F0:F4:3C:6C:82:48:7D:1C:28:B9:C5:DB:1A:F9:F2
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       15888EFD593413D8C2FCD552A5711628DBA39A29
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a92c9b13-f9f0-4b3a-a26d-2a870fc3b1b3.roa
Signing time:             Fri 31 Oct 2025 06:13:50 +0000
ROA not before:           Fri 31 Oct 2025 06:13:50 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3c28::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:88:8e:fd:59:34:13:d8:c2:fc:d5:52:a5:71:16:28:db:a3:9a:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 06:13:50 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=609fadbbb353d5a04bd6eb2226f4d50ade4043a751b85627c80bb11e3db30a06, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:de:11:89:93:06:0a:18:ac:bf:c4:3c:70:d9:
                    4a:bb:ba:fc:29:28:6c:43:e4:05:18:21:5f:f0:ab:
                    dc:b6:85:e7:b7:a5:d4:3b:ed:94:63:a8:3e:2d:15:
                    fd:2e:1c:f5:6c:ae:42:28:7b:11:8a:04:82:33:0c:
                    c6:d4:f6:a8:3d:3f:44:53:ae:b5:d2:f1:d8:98:5d:
                    1e:8e:2c:58:4b:67:4b:83:f3:63:b8:56:25:4d:4f:
                    b6:55:24:b1:7c:94:eb:d5:36:8d:09:95:0c:51:5c:
                    f0:e5:14:a5:31:44:a2:40:31:2b:9d:17:f7:b2:8b:
                    60:f5:c7:08:ff:5d:3d:2e:f2:ad:31:4d:5b:f9:3d:
                    00:6d:46:50:84:6e:40:6b:d1:4d:13:8c:45:45:6d:
                    ec:63:22:df:8b:b9:80:50:8f:ce:73:fd:30:59:6a:
                    c2:53:ea:5d:08:53:0f:ba:70:5a:48:be:8c:0a:d1:
                    a1:31:88:fd:56:91:ee:0e:8c:31:7a:46:08:6a:bc:
                    01:68:04:e1:87:31:0e:b5:ef:2f:dc:ed:ca:f8:23:
                    dc:60:01:c9:17:5b:a8:32:17:36:24:c3:6b:1b:93:
                    70:9c:e0:30:21:a3:00:89:40:9e:3b:7e:52:b5:23:
                    79:47:4d:32:5a:29:22:b4:34:5f:b4:18:37:2d:4f:
                    97:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:AF:4A:E7:B1:F0:F4:3C:6C:82:48:7D:1C:28:B9:C5:DB:1A:F9:F2
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a92c9b13-f9f0-4b3a-a26d-2a870fc3b1b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3c28::/45

    Signature Algorithm: sha256WithRSAEncryption
         4f:a7:a8:2e:6c:ad:9b:01:c2:d9:5f:84:8c:31:10:bb:b7:d5:
         fb:76:a7:c4:80:9d:bd:f5:78:0a:a9:71:04:07:fa:e9:b0:96:
         02:31:9c:21:66:14:89:fb:33:a6:49:dc:6a:27:d2:fb:08:e6:
         21:66:ef:6c:ba:60:4b:52:b2:91:2b:63:88:15:de:a5:d7:c4:
         89:58:68:a8:9d:ca:a6:d2:a0:e9:a9:2f:40:94:24:61:04:23:
         50:d1:3b:a4:f2:9c:75:23:c2:f4:cf:65:d1:ab:21:82:7e:ed:
         ec:2e:ff:0c:d5:29:a2:b0:53:e4:7e:6c:51:3d:6a:6e:e3:cd:
         be:4f:c7:df:04:d9:b1:dd:96:bf:d7:d7:ec:78:f8:26:91:8a:
         b3:58:f8:73:dc:a4:50:b3:ab:73:57:16:36:6a:7a:8b:f1:79:
         3e:72:79:f2:db:14:7a:c2:be:f4:39:d2:9c:ee:f9:45:67:6e:
         86:c5:ba:19:f3:71:04:28:b2:7d:ed:d1:86:da:f1:58:c1:ba:
         33:24:0d:f5:1f:38:62:dd:37:d7:60:d9:6f:12:2c:dc:aa:58:
         c6:63:1b:06:4d:4d:56:cb:c2:3f:d7:38:ff:b1:06:6b:4c:fb:
         88:e4:7e:1e:7a:dd:d7:1f:77:e6:33:7c:28:eb:a6:86:c3:b9:
         9e:a9:d2:df
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:34:30 2025 by rpki-client