Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c4c79fd8-5dd7-4695-96f6-ad0f1e64745c.roa
File:                     c4c79fd8-5dd7-4695-96f6-ad0f1e64745c.roa (raw, json)
Hash identifier:          aWzPLYVNivXhYsi89LlMUmsYtVfIXlKFQY9GsSMoQww=
Subject key identifier:   90:AF:18:29:6C:CB:6D:E2:82:90:CF:4E:EF:7D:2D:2D:1E:11:9E:1A
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       1DDDC168B9D73EC3B79B8BB61BFB7A0B548A1FF9
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c4c79fd8-5dd7-4695-96f6-ad0f1e64745c.roa
Signing time:             Thu 30 Oct 2025 20:43:07 +0000
ROA not before:           Thu 30 Oct 2025 20:43:07 +0000
ROA not after:            Thu 04 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1322::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:dd:c1:68:b9:d7:3e:c3:b7:9b:8b:b6:1b:fb:7a:0b:54:8a:1f:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 30 20:43:07 2025 GMT
            Not After : Dec  4 23:59:59 2025 GMT
        Subject: serialNumber=6db660c53e8a08a65f251771c7703d6a8a36f34d05acb0bced850bb2568f6532, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:25:b2:4b:4b:06:f8:40:c5:2e:ab:da:bb:d1:
                    df:fe:49:bf:7f:97:eb:af:46:af:99:eb:23:38:82:
                    dd:ad:f8:03:ff:fe:3a:6b:50:da:e2:cc:14:ef:a3:
                    71:ac:0c:01:2a:76:40:fd:94:98:c5:aa:b8:bc:8f:
                    91:f8:9e:d3:b9:f7:87:78:9c:03:e9:5e:7d:d8:92:
                    8a:d5:b7:9d:95:86:11:4e:06:9f:44:ad:09:b6:af:
                    05:ff:17:2d:f9:4e:74:98:fe:b7:3e:97:cc:8e:d6:
                    a8:0b:fd:e1:ac:45:c0:4c:7e:a5:71:86:bb:76:87:
                    ac:fa:5b:34:fd:dd:3f:44:0f:9e:fe:32:b4:d5:f8:
                    02:10:a9:60:d2:42:74:18:58:f5:a4:2e:67:45:42:
                    07:a8:83:aa:73:8f:19:c0:85:98:1c:84:46:63:bd:
                    3f:b5:04:47:32:2d:9f:8e:63:34:cd:50:69:77:8a:
                    b1:45:30:44:f7:97:b9:ef:25:b7:d2:dd:15:9b:ba:
                    4c:a9:5e:a4:e2:d6:b6:0f:b2:f1:ff:ea:42:d1:f7:
                    f6:02:de:ba:d0:a5:54:08:99:1d:22:98:fc:06:6e:
                    ef:ca:4c:e4:e6:d0:fe:87:e0:43:fe:ce:43:a0:ef:
                    2f:96:e6:8f:5c:ff:1c:82:4e:f3:d4:65:2e:79:08:
                    a7:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:AF:18:29:6C:CB:6D:E2:82:90:CF:4E:EF:7D:2D:2D:1E:11:9E:1A
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c4c79fd8-5dd7-4695-96f6-ad0f1e64745c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1322::/47

    Signature Algorithm: sha256WithRSAEncryption
         29:88:6c:07:56:41:f1:7d:7d:50:db:7a:da:be:81:0b:79:09:
         b7:7e:e2:44:b8:1c:f9:34:43:8f:d8:06:6d:e4:45:9e:8f:4b:
         a9:e5:00:66:d2:82:62:d1:8c:55:93:18:66:7d:36:19:ce:d2:
         85:85:de:30:47:f6:81:6e:22:d2:4a:21:85:5c:08:c9:f3:c0:
         00:55:af:90:04:d5:e5:20:12:a7:b3:7e:15:1c:7d:4f:86:93:
         ce:7c:97:50:80:d7:9f:96:18:4a:f7:23:02:d2:96:d6:27:e8:
         f1:b0:60:ed:b8:af:eb:cd:10:1d:13:31:48:39:18:89:98:5f:
         54:d9:02:00:54:7c:d0:4b:b2:68:fc:53:ef:67:60:f0:36:86:
         bb:a0:2c:65:49:ae:17:60:b4:77:62:50:05:98:96:f6:6f:dc:
         47:10:a7:36:c0:5f:a2:cb:b8:94:2a:cf:72:eb:22:77:32:79:
         29:32:5a:2e:74:71:d7:ef:e6:87:16:80:79:7b:e5:d9:56:5e:
         c7:36:b7:08:68:e2:69:60:a3:7a:a6:f5:12:6e:09:97:1a:b4:
         0b:a5:03:e5:77:67:4f:04:b0:81:97:2b:9a:a3:d6:9c:78:cc:
         a6:47:00:57:88:5f:ca:76:51:0b:0e:d3:75:59:9d:dd:be:b1:
         7b:72:ce:27
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:38:12 2025 by rpki-client