Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c4d6a4c1-3d30-41fd-b4cf-1bf8ad2f3f85.roa
File:                     c4d6a4c1-3d30-41fd-b4cf-1bf8ad2f3f85.roa (raw, json)
Hash identifier:          MyOEa+XUunUtXT/ggszDMCVTy4Ge3lfVJ5bPzYF7cnA=
Subject key identifier:   97:1D:87:EB:56:CB:B7:C9:BB:E7:14:3B:63:47:C1:5C:B4:C3:2C:F9
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       29A0D1BF8D9906B9FFAE7D23F9FB61128EA776C2
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c4d6a4c1-3d30-41fd-b4cf-1bf8ad2f3f85.roa
Signing time:             Thu 30 Oct 2025 20:43:06 +0000
ROA not before:           Thu 30 Oct 2025 20:43:06 +0000
ROA not after:            Thu 04 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1320::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:a0:d1:bf:8d:99:06:b9:ff:ae:7d:23:f9:fb:61:12:8e:a7:76:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 30 20:43:06 2025 GMT
            Not After : Dec  4 23:59:59 2025 GMT
        Subject: serialNumber=976b4c145aa33af6f606142be30d65a996fea11cd7e4a92f6e3e79c94f024d9d, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:1c:2f:fb:21:6d:18:7c:79:53:a3:7e:44:28:
                    49:0e:2e:8d:f8:da:34:3b:80:e2:d9:d7:a3:5e:30:
                    37:e1:09:cd:b6:16:2f:61:1c:e8:bf:a4:cf:6e:af:
                    78:09:b6:6b:8f:80:3c:7b:f5:06:e6:5c:d9:ac:65:
                    09:12:de:25:77:0d:cc:a5:c0:68:17:eb:af:23:e9:
                    4b:c3:68:05:fa:5f:b9:10:f0:4e:63:05:a2:85:eb:
                    5f:fc:0a:9f:82:74:cf:7e:14:7d:0a:15:8a:b2:1c:
                    4d:d9:4b:a8:62:23:e0:30:86:8d:28:2b:f1:45:82:
                    b2:c3:2f:46:3a:a7:6a:07:9d:1e:c3:d8:5d:7e:1f:
                    4a:52:70:1d:02:12:2e:b9:b9:86:99:f8:27:f8:06:
                    5e:3a:79:e9:bd:a0:4f:e8:02:7c:32:81:15:d3:e6:
                    d3:67:b8:cb:28:89:13:ca:a0:8a:77:13:30:dd:03:
                    c1:45:2c:fe:72:8a:8c:a3:8c:60:3e:5f:0d:9b:70:
                    e6:58:8d:81:1f:b9:86:41:f9:68:d7:10:37:71:4a:
                    79:3a:5e:2c:c8:59:df:7a:56:83:73:6b:84:4a:72:
                    5c:31:b0:eb:db:ac:84:f6:6a:10:ef:a2:ff:c6:78:
                    37:bc:bd:ef:a4:b9:1d:c9:9e:3b:4f:b1:bd:39:2b:
                    5d:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:1D:87:EB:56:CB:B7:C9:BB:E7:14:3B:63:47:C1:5C:B4:C3:2C:F9
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c4d6a4c1-3d30-41fd-b4cf-1bf8ad2f3f85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1320::/47

    Signature Algorithm: sha256WithRSAEncryption
         76:f6:18:4e:ad:28:09:5e:ef:e6:40:55:ae:59:84:a6:5d:63:
         5d:9b:76:43:75:d0:5b:d5:c0:8e:16:40:0e:81:7d:58:5e:68:
         67:69:93:0e:48:bd:19:5e:1c:60:0c:8b:6c:6d:18:ab:ba:bf:
         69:f6:cb:22:7b:2b:5c:36:17:c1:4f:36:18:93:82:21:8d:8e:
         39:05:06:cd:fe:0f:a5:d6:c4:08:6c:13:71:7b:12:46:e0:22:
         1f:2b:4c:4a:cb:cc:3c:f4:9f:4e:24:48:9e:c5:c0:f6:5b:fa:
         8e:e5:ea:1d:aa:06:0d:81:06:f3:a8:a1:94:98:d7:3a:36:ff:
         a1:bf:16:be:0f:f8:ed:5d:ee:e5:00:03:66:54:3f:a2:a1:41:
         09:73:e8:18:f1:e4:4f:ac:4e:d5:21:2d:cd:df:a1:8a:df:56:
         89:96:17:48:8f:e4:53:03:0e:07:8e:93:33:5e:13:c1:65:76:
         f0:20:7f:c0:93:14:96:29:c2:a4:6d:84:f2:e3:93:0a:14:67:
         40:24:1f:b1:bb:22:e9:0a:a5:b5:8a:df:01:46:a2:31:f6:d5:
         72:c0:41:ff:6b:db:66:77:f1:dd:34:4e:00:45:6f:56:ae:00:
         9c:be:52:21:c7:41:d9:80:c9:70:6f:2e:9c:9f:2d:a0:48:b3:
         f3:2c:b8:21
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:34:07 2025 by rpki-client