Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a9c874bc-69b0-4c6b-8723-62973157cfd8.roa
File:                     a9c874bc-69b0-4c6b-8723-62973157cfd8.roa (raw, json)
Hash identifier:          z+F/yY7TfOQeWg4QbyleiiA+Vj3p01WI6HKCXNM7y58=
Subject key identifier:   19:78:C7:D3:69:E8:C7:97:25:BA:46:7D:D9:D8:D1:6D:4B:30:54:3B
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       68CE3E704D905C8D1E99E2DBC1E3AD3A4407CF31
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a9c874bc-69b0-4c6b-8723-62973157cfd8.roa
Signing time:             Fri 31 Oct 2025 06:10:19 +0000
ROA not before:           Fri 31 Oct 2025 06:10:19 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3950::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:ce:3e:70:4d:90:5c:8d:1e:99:e2:db:c1:e3:ad:3a:44:07:cf:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 06:10:19 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=3807c8d95a600a5891e8d7dc97a58cb8d62c8e16e99814c3422466a231811197, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:29:72:64:a4:53:5d:b8:77:82:21:56:e1:ef:
                    71:8c:b5:7c:fd:fa:8f:67:4d:82:61:e9:98:b5:0b:
                    80:60:8a:97:2e:ad:72:da:e4:4c:da:bd:64:db:f9:
                    3d:3e:10:07:0d:73:85:41:8b:9f:83:6c:94:77:b3:
                    a4:9e:72:7b:2d:cd:b0:9a:0e:3f:a3:2d:74:7e:66:
                    b6:df:4d:52:41:58:7e:2c:ea:15:2d:db:0d:7b:15:
                    eb:67:8f:a7:07:34:13:69:66:12:48:df:96:f3:86:
                    e0:58:64:76:0f:9b:49:1b:fa:01:44:a6:9c:3a:05:
                    ed:33:c6:d0:c1:5e:d4:1a:da:ea:99:2d:3d:4b:ff:
                    c1:3d:75:8d:6c:b1:f9:c7:9e:a9:f8:79:76:4f:aa:
                    99:c2:b7:74:dc:97:81:9c:cf:c2:f4:e1:d0:7a:f9:
                    d3:2a:69:e9:18:ae:a8:11:21:72:e5:b6:08:a8:13:
                    02:4b:ea:d6:68:3e:cd:b7:16:21:31:c9:73:9c:7a:
                    33:9c:82:34:8f:c8:17:8c:b8:64:2c:0e:ca:52:94:
                    31:2c:5d:85:bf:93:b0:cd:75:28:8c:ee:59:a5:d4:
                    f0:72:bd:fc:10:a3:3e:29:25:d4:2f:7f:1e:d3:b3:
                    f6:26:e7:70:e9:2a:83:93:b3:bb:47:3b:a4:01:ed:
                    2d:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:78:C7:D3:69:E8:C7:97:25:BA:46:7D:D9:D8:D1:6D:4B:30:54:3B
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a9c874bc-69b0-4c6b-8723-62973157cfd8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3950::/45

    Signature Algorithm: sha256WithRSAEncryption
         50:9a:89:2f:14:dd:12:31:e4:37:74:6e:9a:74:c3:1a:1b:0b:
         70:10:59:0f:51:25:68:a0:00:ee:12:7a:7b:77:8c:15:98:bc:
         56:4d:3a:9e:d8:06:31:dd:9a:57:1a:b8:fa:f3:b3:f3:a4:ff:
         1a:04:81:f9:4f:b8:b0:c5:e9:32:67:eb:87:c8:1a:a7:52:9a:
         17:41:53:96:f4:59:4e:98:0a:a5:be:11:1a:68:07:01:1c:da:
         38:01:63:30:4d:1f:ae:8c:85:f7:bb:29:eb:a5:8a:c0:2e:a2:
         79:c7:29:a1:ad:08:6a:0a:f0:f9:b6:3d:3b:01:45:9f:60:f2:
         b6:33:50:b6:d7:98:e6:75:19:2c:67:ae:c3:97:64:b4:53:2a:
         bc:be:82:34:2f:75:1a:e8:2d:18:a6:b8:89:21:2b:59:7a:e4:
         6c:71:43:d0:01:9f:a0:72:34:ff:ee:e8:e6:a2:58:af:6a:4d:
         3a:38:f1:cb:2e:ad:bd:3d:7d:5c:29:84:78:a3:4d:e6:88:d8:
         ca:43:b0:81:f5:ff:57:ce:92:0f:cc:fb:92:58:9c:b0:a3:db:
         13:c2:6e:3a:67:0d:fd:79:26:97:2c:9d:7c:2c:e8:82:b9:ed:
         a9:aa:76:16:1b:a0:e2:36:2b:c3:cf:94:e9:14:d3:2e:16:9b:
         89:e8:4a:3a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:41:34 2025 by rpki-client