Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ac3f59d7-d6ba-461b-ab1e-3581ed8c3d55.roa
File:                     ac3f59d7-d6ba-461b-ab1e-3581ed8c3d55.roa (raw, json)
Hash identifier:          f5q11DWYY2R3l7SFmLKu0NzAvYkc1s35tEhYIoHZCw4=
Subject key identifier:   51:A1:5B:6B:C9:7E:27:0B:D4:AB:07:0B:27:83:5A:33:FC:77:91:B9
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       63694B879EC50E670E3667CD7126A95005E2729F
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ac3f59d7-d6ba-461b-ab1e-3581ed8c3d55.roa
Signing time:             Thu 30 Oct 2025 22:14:00 +0000
ROA not before:           Thu 30 Oct 2025 22:14:00 +0000
ROA not after:            Thu 04 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1c24::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:69:4b:87:9e:c5:0e:67:0e:36:67:cd:71:26:a9:50:05:e2:72:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 30 22:14:00 2025 GMT
            Not After : Dec  4 23:59:59 2025 GMT
        Subject: serialNumber=74b7d3e24649cc4ced4f11744dfcea675ee953e956e749e980fb08acdb461e98, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d0:72:78:f4:15:62:c2:0d:f5:6e:bd:18:fd:
                    a7:cf:8b:e2:e9:00:33:34:14:04:3b:64:d6:45:4c:
                    4c:cc:19:d2:61:20:96:45:97:c5:16:16:4c:f1:c7:
                    ea:39:a6:f7:23:7f:2c:a9:52:2c:87:17:1c:a0:9c:
                    50:27:dc:1d:08:3c:81:30:7e:da:7e:31:9b:a1:53:
                    1b:87:73:fa:8a:8e:a4:f5:5d:4f:0a:45:ee:e7:88:
                    7d:d0:24:81:e0:56:3a:7b:67:ba:0b:8c:d3:26:14:
                    8b:73:fb:38:d0:11:67:a0:f4:6c:26:02:1a:2d:f3:
                    f2:fe:4d:0b:46:b7:16:d7:6d:fe:99:b4:60:60:6a:
                    86:75:8b:f3:52:21:f3:fe:12:14:c1:ff:b3:4a:22:
                    95:f9:48:47:96:ce:45:85:d8:35:cd:96:e7:da:d4:
                    c7:cd:dc:26:bf:d9:88:4a:d7:7f:ee:84:ed:af:32:
                    7d:99:ee:f7:c9:e4:5f:8a:4c:0e:9a:d0:03:0d:5c:
                    5f:52:a4:2f:14:c7:f7:0a:58:ea:58:82:50:20:e0:
                    11:f3:6a:d4:70:bb:43:dd:da:22:4b:42:da:97:97:
                    b8:0e:9e:87:79:70:a6:03:3b:e1:76:6b:08:1c:98:
                    8f:6d:49:d9:ac:83:83:37:d3:c3:27:2d:c7:79:da:
                    05:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:A1:5B:6B:C9:7E:27:0B:D4:AB:07:0B:27:83:5A:33:FC:77:91:B9
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ac3f59d7-d6ba-461b-ab1e-3581ed8c3d55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1c24::/47

    Signature Algorithm: sha256WithRSAEncryption
         77:e8:05:91:dd:5b:97:fd:8d:f6:4e:9e:19:05:62:8b:54:dc:
         4a:6f:09:16:51:2a:d4:a7:b3:7f:3a:5c:e1:37:3a:bb:02:c0:
         27:30:03:c1:58:cf:d3:7a:dd:09:c5:aa:b4:d0:e2:c2:10:bd:
         f2:e4:1a:84:84:8a:a9:4f:81:9b:20:a4:28:f7:f2:d8:b7:95:
         86:96:db:e6:e3:c2:ba:79:f5:cb:7d:88:fd:30:e8:67:1a:ba:
         4c:3e:73:a6:61:d9:02:dc:65:75:11:a6:a8:41:49:d8:44:bd:
         7d:ca:7a:b9:2a:bf:08:17:6d:14:c5:dc:04:21:0e:25:ae:62:
         23:42:4e:d5:11:6b:a6:c3:57:a1:b4:dc:b8:22:84:2f:fa:a3:
         e6:06:e5:95:f0:72:15:07:60:7c:c5:94:db:99:d6:d3:67:83:
         f7:8d:37:7d:f6:65:4f:93:a2:32:df:7b:66:b6:3f:a0:63:d5:
         a1:cf:41:1a:8c:97:c1:ab:10:23:7b:24:25:77:f8:7c:85:df:
         4a:08:06:44:b1:df:b7:b8:4c:36:ae:f6:27:1a:83:14:4f:a3:
         2b:5a:ad:84:c8:d5:88:0b:9b:8f:ea:2b:97:59:d9:a8:6b:16:
         e0:da:6a:6a:47:3f:e3:16:08:54:0c:c9:dc:6d:ca:61:8b:54:
         0f:12:71:b0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:34:09 2025 by rpki-client