Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c0dcb101-dad8-408a-9c7d-e3319632a997.roa
File:                     c0dcb101-dad8-408a-9c7d-e3319632a997.roa (raw, json)
Hash identifier:          jMAeHoDEzSBNXskZbYdCVl8nW0hDk5D9WGt7H9HtwVs=
Subject key identifier:   F6:13:2C:A6:44:3F:C5:39:7B:48:59:F6:9B:4A:06:8F:A3:8E:15:1B
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       040630403C036B0A397FA558C53244160B261145
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c0dcb101-dad8-408a-9c7d-e3319632a997.roa
Signing time:             Fri 31 Oct 2025 05:55:13 +0000
ROA not before:           Fri 31 Oct 2025 05:55:13 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:31c8::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:06:30:40:3c:03:6b:0a:39:7f:a5:58:c5:32:44:16:0b:26:11:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 05:55:13 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=59c5dbd2dfa7be2a4d7f81d77aaac41e0aaf3ad1e8e4e77fd928a9e28c79f5bb, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:9b:3c:9a:70:19:00:e9:3c:95:03:2c:37:16:
                    de:36:b5:fe:dd:df:47:e7:26:f1:e0:cf:88:aa:f1:
                    96:c4:c1:93:36:1f:b5:29:6a:b1:38:1f:55:a2:f8:
                    b3:4b:d9:a0:f6:3b:5d:72:36:a4:df:fc:14:bb:9c:
                    7a:99:e2:ea:78:67:13:69:4f:c3:f1:33:37:88:55:
                    54:81:01:2d:f4:43:ec:93:59:2c:31:e1:40:c8:42:
                    38:97:b8:cd:02:c9:01:b6:eb:2c:aa:42:e9:a5:86:
                    a1:63:17:38:25:29:24:d2:79:0e:6c:ee:1e:ce:37:
                    e2:a3:a5:b3:7b:06:8d:3d:bf:fe:6b:35:6a:ef:fe:
                    d5:31:f8:60:ea:0d:7f:cd:41:3f:91:57:65:2b:8c:
                    d5:7a:06:ee:d2:12:31:fe:6e:4a:04:97:b4:a8:91:
                    6a:49:94:06:eb:90:74:e3:08:10:80:9b:2b:7a:8e:
                    bc:73:16:89:30:81:43:c8:95:4b:9b:54:92:8b:34:
                    76:72:ce:67:31:14:c6:af:32:31:3b:83:17:b6:c2:
                    61:cb:7d:15:31:b5:98:18:af:36:cb:17:26:8c:86:
                    7b:ae:77:41:20:33:59:68:c5:c1:33:cc:f7:69:c8:
                    99:80:4d:03:e0:db:42:eb:15:4f:47:6b:87:3c:63:
                    4c:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:13:2C:A6:44:3F:C5:39:7B:48:59:F6:9B:4A:06:8F:A3:8E:15:1B
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c0dcb101-dad8-408a-9c7d-e3319632a997.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:31c8::/45

    Signature Algorithm: sha256WithRSAEncryption
         b1:24:e0:1d:a9:c1:8a:9f:f3:14:80:91:73:f6:f4:e7:21:f1:
         10:58:7f:e1:dc:04:11:f7:10:85:b6:3d:74:ed:68:87:84:2e:
         d9:fc:1a:cf:a4:96:2d:20:ad:84:9b:08:b8:6a:21:46:aa:71:
         c5:e2:7f:56:26:cd:92:b6:bd:32:85:67:9b:52:ee:99:ed:41:
         93:13:6b:2a:45:78:eb:36:87:cd:c9:b7:d2:74:78:a3:cd:ae:
         40:a0:3f:5f:c5:71:20:d2:a7:2d:35:56:e3:61:c0:56:3f:29:
         8d:ef:9f:d4:f8:b8:14:51:e1:ee:e8:f8:07:4b:89:ca:f5:f8:
         d4:31:a6:23:ff:a3:30:40:a4:d7:43:3f:1f:52:fa:35:c1:33:
         37:8d:60:26:a4:7f:4b:1d:a3:7a:74:f2:90:50:25:e5:ff:7b:
         04:17:c8:f2:8d:b6:3c:85:f2:08:36:32:25:be:6c:db:1b:a6:
         8b:e8:54:77:e2:91:62:be:f1:39:a8:06:42:3e:27:e9:6a:84:
         f4:e8:75:06:5a:d7:df:81:bb:54:e5:bc:7e:56:b6:bb:37:35:
         30:ce:c0:dd:6a:bd:8d:a7:42:72:e0:78:d8:9b:43:a2:1a:08:
         cf:a0:35:32:3b:ce:03:9d:86:66:25:e7:af:de:23:89:2a:de:
         6f:20:78:67
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:32:20 2025 by rpki-client