Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b40d27e4-c2c4-48a2-beef-ee8f9de614ad.roa
File:                     b40d27e4-c2c4-48a2-beef-ee8f9de614ad.roa (raw, json)
Hash identifier:          JBBi+96YvuXRPKJ8MnXKFXos4I5CB5la8Fqi6w1SjEA=
Subject key identifier:   34:7E:C8:60:31:34:77:64:DF:4E:6A:B0:2D:AD:27:91:52:05:84:B3
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       72A88360CC3D6FA46208ECA9A5748647DEF43A10
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b40d27e4-c2c4-48a2-beef-ee8f9de614ad.roa
Signing time:             Thu 30 Oct 2025 22:12:18 +0000
ROA not before:           Thu 30 Oct 2025 22:12:18 +0000
ROA not after:            Thu 04 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1be4::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:a8:83:60:cc:3d:6f:a4:62:08:ec:a9:a5:74:86:47:de:f4:3a:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 30 22:12:18 2025 GMT
            Not After : Dec  4 23:59:59 2025 GMT
        Subject: serialNumber=0a8eba922c1bfdf78fa5ddc9c6209b450de224e878423af0199cae0dde3ef8b4, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:77:92:37:f4:4d:81:72:69:b0:2e:cd:99:7c:
                    61:56:0c:e2:58:35:a7:e4:6d:48:21:45:e8:f5:6e:
                    95:2f:d3:bc:92:01:09:df:1a:b2:a4:2e:d0:a1:3a:
                    4b:fa:89:4e:0b:15:b5:7c:e2:dd:d5:03:83:14:29:
                    d1:21:30:67:95:14:af:4f:d4:67:be:bc:45:05:64:
                    73:04:a7:50:c8:19:30:1e:54:90:a9:96:f6:e3:d0:
                    67:27:e2:e4:9c:a7:5f:d5:0e:b2:da:39:27:31:7b:
                    5d:54:a8:e8:b8:ea:2d:27:37:8c:b5:09:10:ca:10:
                    d3:71:92:8f:af:5d:44:1a:e0:fe:05:29:e7:d9:6a:
                    9c:54:83:5f:f9:2c:41:cc:c5:42:c9:e6:71:d3:5e:
                    fd:01:78:0b:fc:51:90:bf:28:9c:0b:52:c0:74:95:
                    67:a1:0f:d4:f3:0c:df:e5:a5:46:af:4d:bc:be:11:
                    43:3d:a0:62:af:89:65:08:c0:1d:36:fe:0c:e8:be:
                    bb:03:35:22:ec:4a:ff:a7:19:b3:35:68:58:fc:92:
                    eb:4b:af:c4:53:e0:c4:cc:d0:6b:1d:dc:2a:3b:ea:
                    1b:19:11:c1:ef:9b:f8:94:ce:6d:75:e2:35:0c:59:
                    84:17:27:e6:99:d1:4b:54:a0:f9:56:c0:48:1b:d3:
                    82:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:7E:C8:60:31:34:77:64:DF:4E:6A:B0:2D:AD:27:91:52:05:84:B3
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b40d27e4-c2c4-48a2-beef-ee8f9de614ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1be4::/47

    Signature Algorithm: sha256WithRSAEncryption
         19:ab:c0:3b:f0:24:01:38:6e:a2:7e:cd:8e:66:00:d9:d2:5c:
         5e:9b:01:60:45:c2:0b:9b:a7:03:e2:13:d0:af:54:36:9c:cc:
         c4:59:18:f8:e5:60:3b:12:0b:0a:f7:98:5f:c3:10:55:03:2e:
         b5:75:27:56:3b:a6:f2:41:44:91:a5:55:2b:8b:b9:b9:31:80:
         6f:0d:0d:f6:3c:02:00:74:31:58:77:c2:02:74:a2:60:41:8f:
         18:41:c5:7f:37:4d:8f:9b:45:5d:ab:56:48:bf:5b:d3:75:14:
         68:4e:2f:ba:bd:ba:ca:7b:ee:96:aa:1c:b3:8f:27:ba:1f:60:
         44:9e:6e:71:87:ac:54:99:15:55:44:0d:79:c0:bd:e4:6e:5b:
         15:f9:20:a6:be:f0:83:92:f1:fa:57:57:b5:43:72:70:bf:2b:
         22:67:9e:cb:7b:32:d0:d4:2a:7f:2b:6c:e5:68:ee:12:32:46:
         77:30:27:db:df:32:ac:c3:04:8c:eb:84:ed:2f:aa:a8:dd:29:
         ce:94:44:8d:26:e9:0d:6d:42:65:b5:e5:d4:5c:a5:8a:a0:bb:
         9d:82:85:63:ae:4d:fe:a1:f7:ba:86:96:8a:d4:fb:f9:7f:03:
         4f:c7:1d:4c:8a:a6:81:b8:dd:5e:12:4f:08:bb:4d:f8:ad:92:
         66:4f:85:ba
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:43:00 2025 by rpki-client