Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c4c834bb-2d9a-4b1c-bf2a-136d5f62af15.roa
File:                     c4c834bb-2d9a-4b1c-bf2a-136d5f62af15.roa (raw, json)
Hash identifier:          R+Bff34IkSdjI1QEz6fNe2WSEhxPDKEzBmKI6GtCu6c=
Subject key identifier:   43:6B:BA:5A:AC:34:EA:8E:F6:92:BD:13:FC:A5:90:3F:27:E5:DB:0A
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       6DBAEB8F20C24E86D6060BAED7166DF2D917358F
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c4c834bb-2d9a-4b1c-bf2a-136d5f62af15.roa
Signing time:             Fri 31 Oct 2025 00:28:08 +0000
ROA not before:           Fri 31 Oct 2025 00:28:08 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:35d8::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:ba:eb:8f:20:c2:4e:86:d6:06:0b:ae:d7:16:6d:f2:d9:17:35:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 00:28:08 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=06759daa5ca2c6e7a83ca6af75c1ba71e8b81f3130ee02164f9551d81efb3782, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:12:a7:32:03:e2:87:50:98:18:02:0d:83:08:
                    bc:b0:9c:47:78:26:d5:4f:fa:e1:1d:13:8a:4a:d7:
                    19:4d:ee:d6:c5:63:38:92:f1:e5:34:81:16:cb:c7:
                    42:e9:76:c1:b6:30:bb:d7:9a:44:ec:d9:c6:21:86:
                    a0:5b:32:a0:76:64:30:25:84:00:fb:3d:5c:5c:f0:
                    0c:82:59:f5:5d:05:1b:65:b1:c1:2e:72:78:ae:43:
                    a0:a4:1c:70:41:17:bd:b7:cd:c1:f0:ba:48:3d:f4:
                    c8:70:67:8e:39:32:f9:1b:df:e5:d9:d7:69:50:22:
                    95:1f:26:c3:28:6d:c4:2e:dc:64:63:15:e3:cf:72:
                    d4:13:1b:87:b3:33:04:64:75:41:51:40:b1:d2:0c:
                    8e:49:a5:24:cb:42:1e:06:c7:3b:ea:fd:86:9c:f8:
                    1b:ce:ad:2c:82:49:8d:21:e7:ac:51:1d:2a:93:68:
                    d6:a7:f3:7c:72:02:59:b5:1e:60:c1:7b:9b:b7:05:
                    42:f6:f1:8f:f4:ca:34:c2:8a:97:94:50:6d:ee:25:
                    26:9c:51:a7:16:80:d2:ad:23:c4:56:10:63:54:16:
                    5c:d8:01:54:93:67:26:8a:6a:8a:a5:1a:e1:69:57:
                    0f:f0:57:27:8b:8a:f1:a6:53:d7:83:d7:14:d7:6e:
                    90:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:6B:BA:5A:AC:34:EA:8E:F6:92:BD:13:FC:A5:90:3F:27:E5:DB:0A
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c4c834bb-2d9a-4b1c-bf2a-136d5f62af15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:35d8::/47

    Signature Algorithm: sha256WithRSAEncryption
         59:71:26:46:8b:86:b5:d4:7b:b9:21:c2:23:6e:14:eb:6b:98:
         62:9a:78:1c:25:0e:ea:50:2d:a0:af:da:73:85:70:3a:f9:cd:
         87:0a:a6:06:20:b8:4d:e3:b4:5d:bc:6b:6f:9b:84:0e:08:6e:
         3d:39:58:28:12:5f:81:8d:49:b8:7a:1a:a0:e6:70:6a:44:78:
         78:89:b4:ad:01:65:d2:e4:55:14:0f:7f:fb:dc:c8:1f:cd:a4:
         91:d7:51:66:01:c7:22:14:c1:2e:53:87:dd:8d:d7:e6:2b:ee:
         78:0d:a8:b4:25:cb:91:99:43:d6:ed:d9:6d:e0:b8:cc:d2:3a:
         80:3d:90:93:e6:32:52:14:63:64:d1:e6:23:9e:f1:6b:9a:ef:
         11:2c:76:d1:05:eb:e5:9a:bc:9e:b1:85:d9:0e:d3:9f:43:b5:
         45:e3:e0:9c:a7:27:3e:9e:76:79:7c:f4:b7:b5:5b:52:77:4f:
         4d:21:f8:ed:89:ce:f6:b8:4c:bf:25:b1:29:fb:98:b5:9f:41:
         1a:83:42:9c:0c:d8:a8:c2:3c:03:57:8d:2b:f3:3e:71:96:76:
         70:9b:c1:42:1e:d7:b0:8f:df:61:de:b8:e5:42:ae:7d:a2:27:
         57:c3:1d:b9:e3:3d:af:1e:94:13:32:64:09:b1:66:db:51:25:
         51:e3:9d:47
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:54:49 2025 by rpki-client