Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ac63acda-930d-4831-8ae2-21ee75c39f83.roa
File:                     ac63acda-930d-4831-8ae2-21ee75c39f83.roa (raw, json)
Hash identifier:          iMZULPNXqHE3DzvNVIfv1N5balfgewcig+NGMTPRVuQ=
Subject key identifier:   04:9F:39:B8:23:B4:9A:0B:2A:57:9C:1F:73:8E:A0:10:5F:CA:E8:54
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       5943FBBFB99DC5F6BAB8A5B7D50BDA444220A949
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ac63acda-930d-4831-8ae2-21ee75c39f83.roa
Signing time:             Fri 31 Oct 2025 06:06:57 +0000
ROA not before:           Fri 31 Oct 2025 06:06:57 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:36b8::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:43:fb:bf:b9:9d:c5:f6:ba:b8:a5:b7:d5:0b:da:44:42:20:a9:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 06:06:57 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=060be4139029d0b43d8817331c8c36e45e0f2f8c00c1f7b983f2837f6e382d14, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:23:40:ed:3c:b8:57:fe:ad:81:f6:9c:31:0f:
                    95:56:cd:57:75:8a:3c:72:bc:e9:a3:13:6f:20:cf:
                    51:05:16:9b:ce:02:19:45:f5:5d:97:b9:04:aa:aa:
                    b0:9a:d4:dc:05:8f:0d:51:55:35:63:71:23:30:57:
                    1a:16:1c:cf:8c:8c:80:2f:8e:3f:57:ee:ba:42:e9:
                    e0:0d:d8:af:22:00:65:73:ba:93:34:1d:d7:e2:7e:
                    d1:eb:0b:d3:76:b4:81:1a:ab:51:8b:9b:3d:1f:84:
                    cd:46:6d:64:7b:ac:b2:6d:92:38:10:56:c3:99:2d:
                    b1:09:a2:74:bc:ce:73:0b:0f:02:d9:0f:53:7f:1f:
                    38:93:72:db:fd:b7:36:0e:04:e3:76:00:88:ba:15:
                    db:91:81:f1:a5:1c:4b:ff:03:19:33:56:94:18:a1:
                    cc:9a:10:32:73:4b:a1:d1:cb:fa:e7:cb:bf:31:79:
                    f9:07:ef:68:89:ab:dd:fc:7b:53:0b:bd:c4:e0:89:
                    7e:07:c6:28:5f:46:aa:65:46:a9:fb:dc:39:c5:d2:
                    29:ef:87:02:b5:c7:ea:2f:6c:cb:fe:32:c3:26:d2:
                    c8:82:d5:17:c4:8a:fd:65:8f:e4:5f:1c:54:61:ea:
                    df:85:36:b7:0c:38:98:df:41:f9:c5:21:24:81:32:
                    c8:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:9F:39:B8:23:B4:9A:0B:2A:57:9C:1F:73:8E:A0:10:5F:CA:E8:54
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ac63acda-930d-4831-8ae2-21ee75c39f83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:36b8::/45

    Signature Algorithm: sha256WithRSAEncryption
         b6:92:c5:4a:85:a3:ea:7d:6c:0b:49:fd:80:db:1c:3a:01:89:
         c5:d0:d9:ef:a0:86:1d:7e:64:10:c1:ee:5f:3f:f4:91:b2:8b:
         65:d1:ab:c3:55:09:33:2b:41:b4:3e:c4:d7:a8:23:c8:9b:05:
         6c:19:4d:2a:0c:2c:1e:87:75:74:ab:2f:77:a8:22:b7:03:7c:
         c9:ee:da:0f:5b:6d:0e:43:00:34:92:07:04:38:97:29:92:e6:
         e8:44:0f:b1:31:b5:04:77:65:9b:25:4b:62:54:9a:de:bf:1c:
         13:c5:ec:5d:7f:47:11:0f:77:cf:9e:cc:35:06:94:c8:8c:6b:
         f6:e9:97:05:cc:08:4b:fb:1d:62:ee:fe:cc:71:4e:12:34:68:
         45:dc:37:01:03:05:7f:24:05:e6:6e:c8:c5:47:64:6c:12:d2:
         9d:de:de:4c:e2:b9:11:59:87:62:02:af:a9:0d:3c:74:9c:92:
         3a:c1:04:81:e7:c0:a0:d0:b5:37:3b:63:06:e3:b6:f7:43:8f:
         6b:8e:92:05:10:78:66:f7:28:3c:36:b2:61:40:65:0c:3b:1e:
         71:b3:1d:d4:2e:fc:ae:64:65:82:3c:a9:e9:6a:e9:9f:68:53:
         d0:cf:9c:4b:0f:78:dc:9b:68:4c:40:5f:f4:f4:2f:c4:cc:57:
         a5:bb:8c:e8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 11:07:55 2025 by rpki-client