Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b20606c3-90c6-4f69-a0ef-d1cc23090cfb.roa
File:                     b20606c3-90c6-4f69-a0ef-d1cc23090cfb.roa (raw, json)
Hash identifier:          1uyBHHUKYDScDd7zxgABuNp0LUSOwAGj2Dal1NfXBEo=
Subject key identifier:   F6:63:13:72:FF:BB:5B:0C:8A:95:D6:71:68:BB:43:F3:5E:A6:4C:22
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       05CA91EF435F3728AA5D4EFA88A3F141B3247887
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b20606c3-90c6-4f69-a0ef-d1cc23090cfb.roa
Signing time:             Fri 31 Oct 2025 04:28:22 +0000
ROA not before:           Fri 31 Oct 2025 04:28:22 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3994::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:ca:91:ef:43:5f:37:28:aa:5d:4e:fa:88:a3:f1:41:b3:24:78:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 04:28:22 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=eea64008a1bdc572ae003ca646091a9221d353d32b9575bee81518ec3e5b7046, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a0:e2:9c:13:63:48:23:2b:51:25:95:9d:9b:
                    2b:d8:10:08:30:81:14:6d:b9:b3:92:bf:87:ba:75:
                    e6:ac:ce:ef:a7:3f:63:3d:eb:b4:05:ad:a6:69:99:
                    fc:ab:e4:30:3c:5b:ec:1d:4c:2f:b1:ee:8e:53:23:
                    94:7d:8f:92:c3:fb:35:3b:4e:be:71:40:eb:d8:d6:
                    30:28:b7:10:dd:39:cb:f4:05:ed:23:88:60:16:42:
                    5f:b1:9a:43:99:e6:50:13:c8:c4:64:fe:97:f8:5b:
                    a6:7b:99:34:93:bd:3c:e9:e9:7c:11:76:f8:c5:47:
                    70:3c:33:1f:3b:fa:c8:10:8a:62:dd:03:96:b6:35:
                    c3:fc:e2:ed:e1:81:0e:22:8a:da:18:85:74:58:46:
                    4e:be:47:62:28:55:4d:5f:be:05:c0:86:0a:33:72:
                    e7:c0:e0:9c:c8:04:66:40:8f:6c:ca:93:20:39:66:
                    4a:f3:71:f0:86:19:28:22:15:fa:3a:97:28:4e:6a:
                    35:24:70:26:2e:84:9d:08:3c:ce:95:b3:6f:be:d8:
                    69:a7:a3:42:81:0c:e1:88:8b:ae:5d:b1:a6:b8:fa:
                    fd:fa:ff:b2:d9:8a:61:e5:75:93:53:4d:c8:db:fa:
                    ce:6c:f1:61:6b:c3:c9:6d:54:8a:90:00:93:b7:fa:
                    56:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:63:13:72:FF:BB:5B:0C:8A:95:D6:71:68:BB:43:F3:5E:A6:4C:22
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b20606c3-90c6-4f69-a0ef-d1cc23090cfb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3994::/46

    Signature Algorithm: sha256WithRSAEncryption
         45:2b:2e:8d:01:7d:9a:78:d3:52:2c:79:03:49:02:a2:19:cf:
         de:28:89:ce:50:92:7b:03:67:11:00:4f:d6:23:20:fb:8a:cf:
         5d:d7:fd:91:77:a9:bc:bd:51:c1:82:f3:ba:99:f7:ec:3d:9a:
         1d:00:3e:95:7d:bc:fe:b1:81:a5:aa:12:c7:43:12:2d:84:31:
         af:05:db:84:19:48:9e:6a:39:18:0b:0e:55:31:ac:f8:68:30:
         1f:f3:b0:f0:6e:e2:a1:94:44:c3:a0:48:0e:a9:4c:36:68:61:
         e6:a2:be:6a:ac:e1:6b:ef:39:0d:af:31:85:49:4f:8c:a2:27:
         a8:11:70:73:4a:e8:f5:63:2f:3b:be:5c:db:19:25:8d:08:da:
         2f:91:e3:93:b0:d8:13:75:09:49:be:b7:26:2e:63:6a:d7:76:
         21:b9:fd:64:73:2c:61:fc:3a:b1:d3:1a:e5:fb:a7:ee:61:56:
         5d:53:bf:27:fa:14:b6:9b:90:ea:8a:cf:94:18:32:19:69:60:
         ae:97:ce:55:1e:df:06:26:f9:16:ae:78:fe:0e:58:5f:58:f0:
         5a:a0:55:eb:cd:b0:0f:1e:55:d1:f4:2e:dd:63:f9:ae:7b:a7:
         21:85:1f:37:4c:7e:d6:82:41:5c:4a:28:e3:95:88:92:ad:4c:
         68:71:57:ab
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:27:37 2025 by rpki-client