Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/adc97200-bb1d-4486-9c1a-b893f8bcc17a.roa
File:                     adc97200-bb1d-4486-9c1a-b893f8bcc17a.roa (raw, json)
Hash identifier:          rEobN0G5SHn3IwV/ssnB0Z/VSNZAKUbZMPvTIvyZlww=
Subject key identifier:   FC:D9:1A:5E:19:E8:8D:B2:95:42:C0:A4:98:CB:4D:3E:1E:11:F1:F3
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       221240575704B30998EE873C91C090F3076E1CBC
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/adc97200-bb1d-4486-9c1a-b893f8bcc17a.roa
Signing time:             Fri 31 Oct 2025 03:21:47 +0000
ROA not before:           Fri 31 Oct 2025 03:21:47 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1f74::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:12:40:57:57:04:b3:09:98:ee:87:3c:91:c0:90:f3:07:6e:1c:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 03:21:47 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=a97f78a3b2a4fad916f76860bc162145f0e964fc1ea3e35c5ddb9bcbe3c33ac9, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:cc:9d:17:14:5a:1e:aa:bb:9d:bc:63:0d:fa:
                    1e:81:f6:41:4b:18:50:8b:ea:f3:d6:51:58:95:44:
                    9c:d2:1f:36:92:e5:69:b7:31:bb:73:0a:82:20:a9:
                    bc:09:22:15:12:a1:84:3e:76:14:fa:ca:71:99:9f:
                    4d:e9:10:a3:68:f0:93:a2:14:28:2d:20:af:bc:30:
                    76:9f:45:7e:4a:8a:96:56:ee:e7:99:2c:57:32:44:
                    87:48:15:7f:28:51:32:4c:7d:ef:df:5f:f2:b1:27:
                    f5:4f:e6:86:8c:05:ab:7c:5d:ab:45:6c:00:8a:83:
                    9c:38:51:a0:a9:98:a6:e8:23:1f:75:10:2b:ad:54:
                    fa:2d:f0:ed:50:d0:9e:6e:9c:ff:ce:5b:f4:c4:34:
                    41:b7:53:31:4d:54:ce:64:e9:e1:41:df:4a:39:71:
                    b3:72:4c:70:fe:e3:c2:6b:96:9e:c7:bf:d2:73:ea:
                    27:3f:6f:f4:30:ff:d7:dc:a4:42:63:78:bd:02:58:
                    1a:98:fe:00:35:43:3a:7d:e8:86:1a:1c:a8:7a:36:
                    3e:8f:ca:1a:41:90:da:81:3c:7a:0c:04:15:d5:ad:
                    69:1e:c3:c6:58:b6:14:a6:9b:07:68:f2:ec:20:f0:
                    12:22:90:fd:4a:c0:02:9f:d0:9d:fa:e4:74:67:d6:
                    0d:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:D9:1A:5E:19:E8:8D:B2:95:42:C0:A4:98:CB:4D:3E:1E:11:F1:F3
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/adc97200-bb1d-4486-9c1a-b893f8bcc17a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1f74::/46

    Signature Algorithm: sha256WithRSAEncryption
         54:ee:80:00:14:df:5a:e8:84:5e:56:28:1c:54:1b:72:a5:6d:
         3d:20:ee:ce:e0:48:11:c4:76:c6:c1:01:53:8d:13:1e:d8:55:
         0a:a6:5b:1c:b5:ac:93:2b:24:86:42:62:2c:07:15:b4:f6:e4:
         a4:0d:89:dd:e7:ce:53:13:f0:c9:3d:2e:81:5a:30:b9:62:52:
         34:27:95:4e:70:ba:26:62:a5:fd:fe:54:e8:b0:d3:0e:8f:ac:
         ce:5d:2d:01:92:b2:20:02:d0:7b:2e:3b:17:3f:70:89:c9:4f:
         96:d6:37:5a:de:19:30:5b:fd:56:0a:ef:17:95:56:71:0a:49:
         c4:d9:f9:cb:38:3c:8a:b4:20:f0:cb:90:89:76:ec:66:96:7c:
         08:35:2e:f2:06:ea:11:3b:d8:f3:45:dc:6d:b3:dc:c5:26:e9:
         ed:80:8a:67:69:57:20:c6:ee:3a:60:5e:59:fa:9c:4e:38:a0:
         58:ae:e1:36:81:dc:70:e1:52:6c:36:61:8f:00:42:7a:51:16:
         e6:f0:39:b1:da:45:17:35:f4:6f:7f:48:59:4d:86:0c:a0:8b:
         f2:bb:c3:8c:c9:ef:f2:97:01:83:ae:4c:b7:3a:e4:af:3e:15:
         69:21:fa:a6:d8:75:42:6b:d9:8b:69:d3:72:40:b0:31:01:50:
         ce:e6:75:7a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:26:51 2025 by rpki-client