Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b24e0da2-3e07-4646-b8bd-fb9a0233215c.roa
File:                     b24e0da2-3e07-4646-b8bd-fb9a0233215c.roa (raw, json)
Hash identifier:          wHntpiR0aYdsD3wtcqwLPx+ZDyosg3rEMblWerCXB/E=
Subject key identifier:   53:08:81:95:C5:F1:F8:18:21:92:6D:26:F8:A0:57:DC:12:50:FB:E5
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       0D89F1985F2D630C8DFF759C5BAA5B36677506D2
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b24e0da2-3e07-4646-b8bd-fb9a0233215c.roa
Signing time:             Fri 31 Oct 2025 03:55:08 +0000
ROA not before:           Fri 31 Oct 2025 03:55:08 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2ff8::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:89:f1:98:5f:2d:63:0c:8d:ff:75:9c:5b:aa:5b:36:67:75:06:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 03:55:08 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=37a37e9697d4adc429906ebf38b2bc8218c81ada108a43e4f365dc3b301ffeca, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:1a:79:0e:b5:90:f2:1d:d9:d8:c9:a8:4b:cc:
                    4c:c7:ed:fc:2b:cf:50:1e:5f:b2:bb:61:cf:bb:bd:
                    4b:e0:45:56:9f:fc:74:c1:34:29:50:63:f8:ae:14:
                    77:aa:16:7f:ef:e5:62:59:b3:80:81:52:f7:26:4c:
                    19:63:8f:89:78:ae:35:25:ab:d1:e0:45:70:5c:ae:
                    85:be:d2:da:eb:48:6a:11:c5:b2:33:e2:d1:a2:5f:
                    92:b0:7d:02:bc:ea:bf:09:75:3d:49:66:68:fc:17:
                    2e:4f:2d:04:73:57:23:d1:55:41:b8:c4:f7:45:64:
                    1e:04:e9:9a:23:34:b0:5c:1b:10:b4:19:e3:07:7c:
                    73:44:53:34:db:fd:29:66:31:4f:65:29:0e:2e:32:
                    39:cd:62:51:7d:45:21:f1:bd:e2:de:96:5c:2e:79:
                    4f:3f:18:ae:d1:a2:f4:ec:f9:b0:eb:04:9c:ab:d4:
                    f2:3f:7e:96:9b:a9:b4:ab:6b:bc:0b:d4:af:3e:58:
                    0c:d9:5b:6c:63:93:1c:87:8c:d5:69:c6:2d:5e:6e:
                    d0:27:7e:60:65:70:47:f6:b3:ec:3f:b3:53:47:79:
                    2b:ec:17:a0:8a:33:d8:31:07:3f:13:cb:e4:b7:c1:
                    87:b0:e7:cb:4a:3e:74:55:64:8f:cb:1e:cd:36:73:
                    57:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:08:81:95:C5:F1:F8:18:21:92:6D:26:F8:A0:57:DC:12:50:FB:E5
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b24e0da2-3e07-4646-b8bd-fb9a0233215c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2ff8::/46

    Signature Algorithm: sha256WithRSAEncryption
         33:42:c9:ce:15:f9:0a:dc:ff:28:8c:62:cb:d9:c5:c8:5e:e7:
         04:63:50:6c:8c:26:70:62:c8:c5:2c:c1:37:a0:38:45:28:15:
         74:39:5b:6a:c0:25:e4:72:d0:d3:5a:93:ce:dc:09:d8:17:ff:
         0a:ee:88:64:ab:d4:8c:14:48:5e:84:72:18:73:65:98:ed:6e:
         8d:a8:2c:33:a4:ad:4b:26:52:5f:bd:30:29:16:2b:d6:bc:a6:
         c9:80:a9:d5:f2:08:4e:3e:c0:a6:ed:99:df:f4:59:2c:a6:2b:
         6e:70:a9:1f:be:15:6c:dd:03:1b:44:ca:87:c2:cc:af:4e:8d:
         08:a4:0e:a8:28:75:b5:12:88:54:59:7c:ad:c9:1c:f1:78:3e:
         9a:76:e7:73:2f:0b:ad:ca:86:b1:58:73:84:81:d1:33:3d:2e:
         c2:a5:42:97:27:76:b6:a4:2f:0a:12:ae:bf:f0:e9:4d:af:7f:
         72:fd:e3:00:8d:45:ec:cf:03:98:d4:62:ae:ab:73:69:9f:2b:
         cd:57:ac:48:22:7d:57:a0:24:8c:6c:27:2c:c4:19:e9:23:42:
         40:ff:53:da:9f:ed:70:35:91:9a:c4:81:72:f6:1d:9e:b7:17:
         d0:c9:49:41:20:fc:8e:5c:cf:38:76:51:4e:c0:75:08:d2:8f:
         03:f1:d4:76
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 12:57:13 2025 by rpki-client