Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b4fc9e1b-edc5-4eb8-bab5-b2dc89a90b87.roa
File:                     b4fc9e1b-edc5-4eb8-bab5-b2dc89a90b87.roa (raw, json)
Hash identifier:          +vAKgxwOSHEAZ7TtmF5zaW+L8jHz1ovmX0NIH8AJgYA=
Subject key identifier:   71:E8:32:A0:BC:B1:73:72:4C:47:E0:47:AC:65:4A:2A:E3:70:AF:47
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       5125C7273BE305AC683354082318BBF60A84464E
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b4fc9e1b-edc5-4eb8-bab5-b2dc89a90b87.roa
Signing time:             Fri 31 Oct 2025 04:53:30 +0000
ROA not before:           Fri 31 Oct 2025 04:53:30 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3dc4::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:25:c7:27:3b:e3:05:ac:68:33:54:08:23:18:bb:f6:0a:84:46:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 04:53:30 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=851ccb4faab3608f1f7612237b301957f9a94627840eaf708ca7c2c23788ee60, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:4c:40:d6:fb:97:40:9b:28:ad:c3:76:23:f7:
                    e5:c1:39:95:01:c5:33:c4:3c:2a:d3:eb:77:51:12:
                    a6:68:16:70:e7:da:b3:1f:fc:9e:64:33:51:69:78:
                    49:bc:80:0b:76:48:dc:03:1a:d8:90:77:8c:07:2a:
                    9d:a1:37:23:d4:8e:18:d1:a8:6a:14:e5:7f:4f:7f:
                    39:81:22:78:fe:a4:c8:cc:f4:11:dd:60:30:13:57:
                    36:f6:b9:4e:d9:32:c8:25:c2:75:bb:90:a0:6b:cc:
                    71:d3:71:9a:0d:62:0c:ab:b9:48:eb:07:83:03:d0:
                    12:96:b0:f0:31:e1:38:79:c3:e1:73:42:f1:cc:6d:
                    56:ef:5d:19:84:6c:dd:87:94:13:4c:89:56:06:46:
                    a3:e2:81:9f:8c:c8:c1:f9:74:56:1e:68:71:6d:f0:
                    0e:3a:26:28:7c:22:02:cf:72:4b:b5:d1:36:76:4a:
                    54:0f:d0:0a:a3:99:d6:5f:01:bb:1a:82:77:e3:cc:
                    25:8e:3c:55:e5:14:35:7a:35:79:cf:55:00:a6:a4:
                    84:85:36:05:5c:91:60:cb:a0:a6:e4:e0:38:9d:f2:
                    dd:30:e5:4c:41:fd:94:24:bd:09:e3:39:67:d0:4c:
                    0e:91:48:8e:f6:03:a3:e2:9c:8f:74:54:24:b5:82:
                    c6:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:E8:32:A0:BC:B1:73:72:4C:47:E0:47:AC:65:4A:2A:E3:70:AF:47
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b4fc9e1b-edc5-4eb8-bab5-b2dc89a90b87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3dc4::/46

    Signature Algorithm: sha256WithRSAEncryption
         a7:74:db:96:89:15:39:3b:78:ab:42:23:80:0b:1b:e2:8a:20:
         49:76:50:6a:0f:42:8a:36:66:81:11:37:a1:14:cf:73:ce:cf:
         83:d5:09:12:f9:6d:c8:d7:be:7b:b9:26:69:09:71:85:69:1f:
         ac:6e:ab:28:41:06:46:11:35:8b:60:a8:3f:f4:ef:b5:c3:be:
         8e:ba:b3:61:c6:b2:38:a4:03:47:10:f8:76:50:c3:d4:e9:81:
         1c:27:53:55:7d:2c:a4:98:c3:75:d4:cd:1f:48:1c:47:81:7d:
         da:66:c3:74:f7:c6:30:fb:0e:ea:a0:bb:a8:a0:7b:93:00:74:
         83:72:9a:5b:5f:b9:b7:64:79:2d:d2:ba:35:6c:1e:fe:41:5f:
         af:df:d3:c4:a3:0f:b9:96:10:7e:d9:b6:cd:21:93:85:c8:f2:
         dc:7a:9b:04:d9:b5:7f:aa:cc:6f:db:0f:92:76:95:0d:3e:4a:
         3c:07:af:05:04:ba:15:de:92:f2:d5:36:05:8f:8a:c0:d6:d1:
         d6:c2:f5:23:a3:c4:1d:6a:b1:3b:c9:2c:fb:7d:a5:27:b7:0c:
         85:15:a4:ce:64:2f:8a:a6:9c:0a:3e:bc:01:0d:e5:67:bd:7f:
         29:bd:4c:b4:90:09:6c:58:82:45:9b:4b:78:d0:b0:57:12:22:
         de:99:a2:f9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:38:24 2025 by rpki-client