Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ae01caab-e5a8-4e08-865c-4f3d0dbd12b2.roa
File:                     ae01caab-e5a8-4e08-865c-4f3d0dbd12b2.roa (raw, json)
Hash identifier:          Lu3oeSEUWMWL3qioo9Zy7HiVsn8e8lbBYp0Jf3hPhUM=
Subject key identifier:   1F:D0:40:01:26:E5:F6:0E:8C:A7:3C:F2:17:0F:37:E7:57:FF:15:C2
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       62F2E2678074298C73960092645AAC7C2DA13F7B
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ae01caab-e5a8-4e08-865c-4f3d0dbd12b2.roa
Signing time:             Thu 30 Oct 2025 22:10:20 +0000
ROA not before:           Thu 30 Oct 2025 22:10:20 +0000
ROA not after:            Thu 04 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1b50::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:f2:e2:67:80:74:29:8c:73:96:00:92:64:5a:ac:7c:2d:a1:3f:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 30 22:10:20 2025 GMT
            Not After : Dec  4 23:59:59 2025 GMT
        Subject: serialNumber=e7929a6b575777fcfb286f54f14c1db80a870b187e06de0234d24c2b6706fe9a, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e4:df:37:57:31:88:d5:c3:d8:db:ad:c2:81:
                    01:9b:c1:e1:1e:01:4e:d1:c3:78:cf:ac:dc:83:c9:
                    a8:55:0b:2c:ff:00:f7:50:0b:cc:37:c5:55:19:1a:
                    17:7b:1e:23:65:d6:65:65:df:98:05:31:0f:df:19:
                    1b:c8:bf:64:51:32:00:d2:96:7f:2a:48:47:da:09:
                    42:e5:d4:13:23:47:4f:70:f9:46:d0:00:3a:f1:94:
                    7b:c4:ef:d3:a1:c2:9b:5b:be:37:f8:c7:7b:64:67:
                    f0:7a:c1:b3:48:a7:61:25:71:f3:90:b5:57:2c:b3:
                    d0:ef:c7:4c:d8:cf:4a:86:c8:cc:ac:63:49:05:7a:
                    76:8e:29:f4:21:cd:36:6f:95:29:8e:0b:cb:16:32:
                    60:45:91:97:2b:75:25:8e:f8:7f:e3:06:2e:05:e3:
                    bd:66:a0:99:cd:70:19:39:5e:59:73:f8:b9:e3:fe:
                    d4:10:4a:3e:cc:19:f8:b5:f5:6a:9b:2e:a0:ac:ec:
                    8b:61:be:69:7e:77:78:9e:b3:cb:03:d4:89:49:79:
                    85:bf:0f:bb:d5:74:c6:96:ac:93:02:aa:bd:b5:46:
                    ca:cf:19:46:c8:86:07:73:d7:b5:2c:01:35:42:47:
                    dc:c3:03:57:9b:db:c5:d7:2f:3e:07:9b:5b:2f:79:
                    99:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:D0:40:01:26:E5:F6:0E:8C:A7:3C:F2:17:0F:37:E7:57:FF:15:C2
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ae01caab-e5a8-4e08-865c-4f3d0dbd12b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1b50::/47

    Signature Algorithm: sha256WithRSAEncryption
         1c:d9:ed:27:ac:ca:37:28:e7:40:14:50:73:b9:4e:24:d1:15:
         0d:e1:98:f2:f0:d5:18:e2:fe:d6:4b:6a:3e:a6:08:32:cb:d0:
         12:a4:70:dd:d3:a1:2e:47:96:6f:61:15:1f:77:a8:f0:de:17:
         10:31:ad:9d:68:8f:04:c7:fd:a4:80:c9:76:a4:99:82:95:f3:
         6f:56:79:ac:bb:31:c1:58:53:66:06:1e:31:8b:43:d5:32:77:
         37:81:ba:f8:ec:e7:63:8e:55:9b:ee:d6:fe:6b:3a:9a:9c:75:
         84:f4:b8:87:e7:59:e9:ba:ed:8d:89:ad:ca:52:a2:87:62:b3:
         a3:ff:c8:8c:79:89:17:93:09:c6:b7:2c:ae:a8:7a:30:cf:10:
         1b:d0:72:82:00:67:45:ad:49:cb:f3:a4:bb:c3:d7:07:8e:ad:
         d1:71:89:af:09:04:d5:c1:02:31:f6:0b:16:42:a1:aa:69:02:
         23:02:64:74:6b:f5:10:d5:cd:99:f9:ac:04:c6:b2:93:a9:4e:
         dd:2c:c6:17:04:42:38:ef:4b:c8:81:82:4d:c5:e5:3b:f6:3f:
         fc:fb:a7:fc:de:bb:57:f5:e7:b7:35:ef:dd:b7:6a:e4:f7:b4:
         9e:b2:0f:f7:7f:fb:a4:05:44:1c:e8:e5:b4:e4:ee:c8:6c:78:
         7b:d7:d3:66
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:43:42 2025 by rpki-client