Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b0ba3e6f-ebcf-4f73-8f02-7add81f6534c.roa
File:                     b0ba3e6f-ebcf-4f73-8f02-7add81f6534c.roa (raw, json)
Hash identifier:          yzc4g6TiOmyIWYaX/qQEipNKOrpNPdJ6lGfzFI2IVsI=
Subject key identifier:   94:17:F4:28:EB:AD:0C:B2:0D:E9:FF:1B:79:7F:D3:23:91:1D:F7:E0
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       576E666177034484DDA6E547114B13B0C6DD378C
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b0ba3e6f-ebcf-4f73-8f02-7add81f6534c.roa
Signing time:             Thu 30 Oct 2025 23:57:18 +0000
ROA not before:           Thu 30 Oct 2025 23:57:18 +0000
ROA not after:            Thu 04 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:324a::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:6e:66:61:77:03:44:84:dd:a6:e5:47:11:4b:13:b0:c6:dd:37:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 30 23:57:18 2025 GMT
            Not After : Dec  4 23:59:59 2025 GMT
        Subject: serialNumber=adf7455ca8b15ceb2f8f1d746b0009e8702459d94e8814f578fc8df7e92df475, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:12:0b:4d:f3:03:89:bc:59:de:30:8f:36:81:
                    4c:fc:7b:b5:4d:c5:08:2e:46:f4:d9:c5:d4:ea:f4:
                    a5:b1:dd:c6:7d:59:4a:8a:a1:83:5c:c2:71:90:f8:
                    fe:43:c7:f4:a7:53:fd:3d:64:e8:e3:a9:9c:cd:6f:
                    3b:e1:37:ea:72:2e:98:fa:13:43:d0:4b:88:34:44:
                    40:67:00:be:4b:9e:47:d2:44:2d:f1:89:1b:82:71:
                    ed:74:da:00:93:28:11:21:68:71:fc:a5:7e:24:1b:
                    ee:26:f8:8b:bb:24:0e:1c:a6:a7:da:50:d7:05:2e:
                    fc:65:9b:bd:30:f3:36:95:45:6a:0c:5b:90:82:e1:
                    9c:83:91:66:f0:dd:66:4e:c0:00:f0:ce:08:72:2c:
                    07:9d:8c:a1:f0:78:85:cf:42:de:7d:95:72:ea:72:
                    21:e9:ac:b6:62:29:15:32:0b:86:4e:6a:bb:6c:78:
                    02:40:10:83:42:90:1f:11:da:1a:a4:1c:8c:b9:86:
                    a0:e8:42:79:5f:85:25:b5:b8:58:ee:e9:ec:0d:8f:
                    d5:0e:d9:a7:54:87:d7:81:64:9d:5c:48:6c:0d:e3:
                    7c:bb:d8:e5:f6:d0:39:d1:87:09:ac:2f:67:84:f6:
                    d3:39:fc:31:97:4f:cf:ba:70:b6:91:8f:ab:57:fd:
                    69:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:17:F4:28:EB:AD:0C:B2:0D:E9:FF:1B:79:7F:D3:23:91:1D:F7:E0
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b0ba3e6f-ebcf-4f73-8f02-7add81f6534c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:324a::/47

    Signature Algorithm: sha256WithRSAEncryption
         1d:6b:42:41:b3:60:19:e8:01:8d:a2:f1:8f:cc:13:a9:25:34:
         8a:1a:3e:07:1f:95:52:3b:3f:82:20:30:b7:c7:56:8e:f7:81:
         d2:6a:79:f2:5e:c3:98:91:90:8c:af:14:14:0d:23:ef:51:9d:
         c5:e9:5b:c5:1d:80:15:4b:47:e5:94:b5:34:6f:5d:01:9a:6c:
         90:27:08:fa:ad:24:e4:42:e4:16:dc:6c:c1:20:37:f7:3c:54:
         e3:02:c4:26:84:da:6f:18:a0:97:c1:40:e4:f2:66:b4:86:81:
         40:ea:e6:f2:d1:33:9d:61:32:ce:3e:1a:12:f7:be:75:65:a8:
         8d:83:78:1b:ce:0b:ae:5f:53:9f:d4:2c:97:58:29:a6:0f:d9:
         02:b6:69:45:9a:dd:dd:3e:2d:30:9f:8b:87:37:9f:ab:10:dd:
         db:11:df:dd:c6:75:f2:6d:a3:33:ae:80:74:b8:5e:f8:fa:20:
         2e:7a:65:27:e0:72:69:e9:b1:f1:60:ff:ac:2f:de:0d:48:6b:
         bc:1a:06:2d:19:1b:bd:8d:52:76:62:76:ca:20:1c:36:a6:14:
         09:15:1b:75:2e:00:f0:fd:5a:e0:e1:19:6f:ae:9a:d6:cc:ae:
         65:f3:a6:b1:b8:3a:4a:c2:d8:78:5d:d2:b8:d9:d7:bc:27:07:
         fa:27:c7:44
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:38:10 2025 by rpki-client