Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b6943690-e512-4d92-bc00-0f2b09a2846c.roa
File:                     b6943690-e512-4d92-bc00-0f2b09a2846c.roa (raw, json)
Hash identifier:          1EX98wXCNO1cDP8vCo39LDVPj1X+QAg9GEMu/qFQHT0=
Subject key identifier:   A4:2B:9E:E0:7B:27:12:E6:78:F7:6B:B9:FF:72:33:9B:6C:FE:7A:A2
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       72DEF70CA6CFDBA1EE43C7C6DFF778F0E8874CA9
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b6943690-e512-4d92-bc00-0f2b09a2846c.roa
Signing time:             Thu 30 Oct 2025 23:37:03 +0000
ROA not before:           Thu 30 Oct 2025 23:37:03 +0000
ROA not after:            Thu 04 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2e04::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:de:f7:0c:a6:cf:db:a1:ee:43:c7:c6:df:f7:78:f0:e8:87:4c:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 30 23:37:03 2025 GMT
            Not After : Dec  4 23:59:59 2025 GMT
        Subject: serialNumber=71b0253970abe5690fde3bf08b1457c628c1af69cf2decfdcdd3e89238021670, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:fc:8a:cd:94:18:c5:cd:76:da:6f:eb:17:e9:
                    cd:b4:52:43:d3:6e:79:15:36:4e:f3:39:04:0b:b4:
                    0e:c4:f4:40:67:89:52:8c:8f:a6:d3:99:3c:32:3a:
                    4a:07:2e:ae:9b:57:f2:c2:4c:6c:a6:7e:d8:f3:a7:
                    5d:4b:fd:07:03:12:44:d4:4a:d4:78:9e:6d:b9:6d:
                    10:1f:a3:34:f1:62:8a:76:9f:e1:2b:21:11:5d:52:
                    ef:c4:e0:9e:cc:c6:69:0f:65:27:4f:8b:4e:83:0b:
                    2b:1a:1d:2d:37:a7:f6:f3:71:53:d8:43:f6:66:de:
                    0e:87:da:ed:b2:4b:ee:bb:e5:b0:b2:6c:3e:f1:ea:
                    c8:b8:f9:52:33:90:7b:a1:3d:92:23:c1:d4:e2:ea:
                    75:6e:2a:1b:ab:c6:7b:63:b7:17:e4:28:94:13:08:
                    d1:0e:c4:1e:c0:36:7e:27:05:41:93:99:0a:27:e7:
                    3e:01:6b:8d:92:1f:63:8d:1e:0e:5f:bf:cc:1e:df:
                    1f:6d:26:90:aa:85:ef:06:84:e2:6a:93:8d:65:5d:
                    ca:51:c7:81:68:e7:50:f1:26:88:83:fb:1e:25:99:
                    87:98:1d:4e:2d:d6:45:bc:cb:ba:8b:24:86:bb:6d:
                    87:90:e9:f4:98:d6:13:53:d3:9b:c6:aa:3b:68:6f:
                    bb:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:2B:9E:E0:7B:27:12:E6:78:F7:6B:B9:FF:72:33:9B:6C:FE:7A:A2
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b6943690-e512-4d92-bc00-0f2b09a2846c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2e04::/47

    Signature Algorithm: sha256WithRSAEncryption
         16:13:12:6d:71:10:1d:da:df:fb:91:e9:09:04:f5:ab:b4:3d:
         ff:ac:8e:cd:87:c6:63:bd:14:b6:e9:0f:de:28:b7:53:f2:30:
         19:a0:39:04:e7:bf:5b:67:ff:74:84:43:53:9f:66:aa:a8:29:
         88:6b:8d:92:6f:5d:98:f3:c3:69:b9:84:8c:b7:c5:63:6c:a5:
         06:14:28:47:ad:d3:1e:9c:ac:f4:25:cd:52:03:5c:a4:43:e5:
         83:92:89:d4:5b:e5:5b:51:91:35:58:2e:17:d5:6f:3e:d2:ff:
         b7:46:49:f7:24:4e:fe:f8:31:ee:97:f3:60:53:21:94:e8:33:
         31:64:5a:bc:20:3b:ab:5a:91:0e:d8:f8:da:cc:f4:68:2a:7e:
         dc:e5:97:5d:4a:94:61:6b:8a:ea:d1:85:5d:ca:38:47:64:91:
         45:56:98:53:34:57:1e:7c:89:54:f0:f9:b4:4f:d1:d3:f0:70:
         bf:78:e2:37:27:5a:7a:24:ca:68:f2:bb:a0:3f:6f:49:a6:34:
         d1:1c:13:3c:ac:3b:8e:92:ad:b5:e0:5f:f6:99:91:d1:ef:2d:
         ff:4f:4f:fb:e9:4b:f0:a3:37:0a:43:8d:6d:e2:a6:11:30:91:
         7a:0d:9f:eb:bb:a3:69:10:98:cd:8a:91:a3:88:22:3b:ed:37:
         d3:28:b6:84
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:39:10 2025 by rpki-client