Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/afbdbfb1-b487-474b-b91d-19ca3713d2f6.roa
File:                     afbdbfb1-b487-474b-b91d-19ca3713d2f6.roa (raw, json)
Hash identifier:          MxUAXDocOtEbv9ZFitNSPeTb518a1Vo17MwN8fS4ufQ=
Subject key identifier:   F1:E5:E0:98:72:DA:D7:CC:22:C9:AE:70:B6:B4:8E:42:7E:D8:61:2E
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       3A567D5CE0743388EF85EC47F7411A1616AE4F5B
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/afbdbfb1-b487-474b-b91d-19ca3713d2f6.roa
Signing time:             Thu 30 Oct 2025 21:29:01 +0000
ROA not before:           Thu 30 Oct 2025 21:29:01 +0000
ROA not after:            Thu 04 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:176a::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:56:7d:5c:e0:74:33:88:ef:85:ec:47:f7:41:1a:16:16:ae:4f:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 30 21:29:01 2025 GMT
            Not After : Dec  4 23:59:59 2025 GMT
        Subject: serialNumber=23d4767e731df553ef06077b230f98f18fb617d25728b2812b2f7b1dfc111c7f, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:bb:47:8a:08:ad:ce:45:bb:24:fa:c9:9d:b6:
                    6b:b4:c9:8c:58:9b:38:05:81:41:f8:21:cb:df:64:
                    e9:4c:75:a0:02:ba:3b:5a:0a:9c:a3:e0:d2:b9:23:
                    83:e1:a7:5a:76:c2:b1:58:67:db:38:80:d4:c7:d9:
                    b9:1e:1a:b0:44:62:fd:21:10:2b:ee:ff:35:9d:44:
                    e9:24:25:64:43:6b:bc:20:32:07:3a:56:28:cb:6d:
                    e0:7d:24:f0:a5:f4:b5:83:67:5f:08:f4:ef:90:f6:
                    c5:0a:d0:33:aa:77:a4:85:b5:c4:6c:0e:37:8c:89:
                    3d:aa:6a:f2:85:5b:9d:a6:98:86:79:08:ea:c3:c1:
                    25:55:f7:04:33:c4:d2:be:73:e2:d9:db:1e:dd:2d:
                    00:af:ba:f8:b0:6d:e0:15:e1:3f:2a:b2:29:27:a3:
                    2f:02:0f:19:33:43:58:e0:f7:8e:2e:37:f6:08:9e:
                    a7:a1:2e:4d:45:7b:00:5d:b3:1a:fd:80:3e:e0:3a:
                    4d:97:4c:c8:f5:25:51:63:21:2e:a7:3c:a4:e3:41:
                    78:00:37:9e:0e:15:bc:5c:a5:a4:ad:3c:8d:35:fd:
                    bc:d4:0f:c7:5d:4f:84:30:1b:03:3d:a2:90:ba:6f:
                    9c:63:5a:0f:2c:c7:9f:75:3a:59:8a:6e:bc:6f:8b:
                    24:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:E5:E0:98:72:DA:D7:CC:22:C9:AE:70:B6:B4:8E:42:7E:D8:61:2E
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/afbdbfb1-b487-474b-b91d-19ca3713d2f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:176a::/47

    Signature Algorithm: sha256WithRSAEncryption
         7e:f4:8e:da:db:47:94:dd:c9:26:38:cd:9b:4d:3e:32:5e:96:
         15:c9:4a:44:8e:f3:31:0e:bc:e7:e1:7e:df:1c:00:fc:8c:7f:
         f2:46:bb:58:65:50:0f:f6:d5:2c:aa:d4:83:cc:76:02:1e:67:
         be:05:07:28:16:9e:c4:14:2f:fc:37:fb:5b:1e:a1:95:a9:5d:
         15:01:59:ab:fa:39:45:6d:de:8c:94:55:fc:46:68:de:73:83:
         dd:12:fe:c7:d6:3f:60:56:f3:17:b8:5c:b2:e1:74:6d:c6:d5:
         f3:62:28:29:2a:36:1e:c1:fb:59:0e:74:aa:5e:9a:00:fa:2d:
         e1:71:18:27:c9:b6:10:60:ff:d5:61:be:8f:68:ac:3c:97:99:
         1b:49:92:f8:18:f0:bd:29:51:d3:e9:55:ce:5a:3f:28:e6:4e:
         c7:68:1a:8e:eb:72:0c:78:42:4b:19:79:e1:ff:a6:dc:06:35:
         00:7c:97:17:e8:ea:33:7a:9c:bb:70:d6:3c:ff:dc:74:f0:49:
         ff:1c:8a:6e:cd:1e:87:fc:3e:15:0c:64:d4:f2:77:48:50:67:
         d9:56:89:2e:a9:79:ff:45:0b:ed:a1:04:7e:52:a6:83:ce:e4:
         bc:59:69:e0:ec:32:d8:a9:e6:6f:b3:bf:0b:8f:08:2e:17:46:
         c0:44:db:0c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 11:07:54 2025 by rpki-client