Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b3192841-7b2d-4563-afd9-dd8d60aabd28.roa
File:                     b3192841-7b2d-4563-afd9-dd8d60aabd28.roa (raw, json)
Hash identifier:          QqHIATlG7F7pveHmJ+oCW7WAQZrKboLrbItGX3W3MIY=
Subject key identifier:   54:0E:F4:C7:6A:5E:C8:6E:88:EB:20:D9:5D:1E:AA:EA:40:A6:C7:39
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       021FA83CC6E506F630656FFC6375DE67F8AE28E2
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b3192841-7b2d-4563-afd9-dd8d60aabd28.roa
Signing time:             Fri 31 Oct 2025 07:27:26 +0000
ROA not before:           Fri 31 Oct 2025 07:27:26 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3840::/43 maxlen: 43
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:1f:a8:3c:c6:e5:06:f6:30:65:6f:fc:63:75:de:67:f8:ae:28:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 07:27:26 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=2bf89b273ef9ca8888f295a0b6729fd3f5014ddf0559431785023efdd570e2e1, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:e0:0e:be:eb:ee:f7:0c:dc:5f:da:b1:83:d9:
                    21:14:30:9c:bf:1b:b5:25:06:1f:cb:a9:a1:78:e5:
                    21:cc:d7:74:4d:4d:12:8e:97:80:0d:48:ed:f5:07:
                    0f:1f:e3:c5:60:4d:ba:2f:8d:dc:0a:df:94:5b:d2:
                    26:a8:6a:55:a8:ce:74:2d:7a:ff:ad:4d:44:2d:a3:
                    7b:60:34:ff:08:38:27:79:44:65:87:7f:36:2e:44:
                    d0:95:db:19:ad:ab:88:e4:09:4a:a2:ec:ba:6e:4b:
                    e9:37:7c:45:c4:bb:76:8a:58:9a:c3:ec:47:63:10:
                    4b:f7:a3:ba:e9:c3:cf:73:8a:9f:6d:c9:9d:f9:af:
                    71:45:30:b6:8a:53:df:28:ee:09:e4:6d:d0:6c:70:
                    1a:47:97:fa:86:60:6e:eb:1d:e6:cd:bc:83:1c:6e:
                    7e:2e:fb:70:14:7f:95:e9:31:87:d9:77:31:4a:8e:
                    74:c3:ee:ba:c4:89:b5:33:de:cd:94:5b:4c:46:65:
                    9f:d3:f4:79:f3:5d:30:1c:0b:96:52:b4:67:7e:ff:
                    fe:42:a4:e3:1e:75:b5:9d:db:63:c5:df:44:9d:71:
                    50:5e:a9:a5:49:c1:d0:0c:40:68:c1:6a:8e:09:75:
                    c6:6b:4e:ad:cb:c1:38:b9:9d:4d:a2:d4:f3:85:db:
                    f7:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:0E:F4:C7:6A:5E:C8:6E:88:EB:20:D9:5D:1E:AA:EA:40:A6:C7:39
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b3192841-7b2d-4563-afd9-dd8d60aabd28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3840::/43

    Signature Algorithm: sha256WithRSAEncryption
         b1:11:1c:0b:97:a1:4d:45:c0:10:6e:ad:05:62:35:cf:9a:ff:
         34:fa:27:fd:37:c8:19:45:62:5a:97:6b:71:03:e4:d6:fe:8f:
         3a:1a:49:71:9e:ee:fa:6f:a3:8c:ff:15:34:cd:7f:99:2b:81:
         24:67:36:25:f8:a4:aa:45:24:43:8d:30:7e:3b:37:cc:18:a9:
         61:b4:80:6c:14:e6:62:15:c5:5e:cc:4f:a8:64:d8:45:9f:b2:
         d3:fa:1d:cf:20:83:5c:70:6a:02:cc:99:f3:02:64:77:0c:54:
         96:c6:f3:51:0e:57:23:13:25:76:9a:34:8c:0f:8c:ef:bb:f8:
         fc:7a:dc:f2:b4:0c:15:c1:87:6c:ae:73:9f:47:33:7a:a5:70:
         73:cc:61:e8:85:d4:13:e0:41:01:a7:db:ba:68:9d:04:66:ae:
         54:45:f9:10:92:e6:f9:ca:30:5f:10:5a:d3:32:a7:ee:00:0d:
         45:1b:3b:3a:a9:83:51:76:4e:9c:8e:c7:67:8e:6b:7f:cc:4e:
         75:d0:cf:d6:23:33:92:a4:20:13:7c:7f:e8:74:00:5f:86:a5:
         51:96:dd:32:c5:42:dd:9a:58:60:03:3f:c0:7b:16:a3:79:12:
         b1:ae:87:84:05:93:48:82:83:8e:b2:46:10:02:eb:7f:56:87:
         8c:94:db:d8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:36:49 2025 by rpki-client