Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ce676b25-39da-4653-a655-19ae703e7e57.roa
File:                     ce676b25-39da-4653-a655-19ae703e7e57.roa (raw, json)
Hash identifier:          HFBynYCW3qOgYiCjnohTebxPj7vg+00Fad869pg7Gos=
Subject key identifier:   72:0C:E4:84:74:3F:82:15:5C:91:1A:CC:4E:61:DD:84:49:8F:D4:A8
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       570E3E3CEABE7EAF23C7270FD682E429DCC7839C
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ce676b25-39da-4653-a655-19ae703e7e57.roa
Signing time:             Fri 31 Oct 2025 01:42:53 +0000
ROA not before:           Fri 31 Oct 2025 01:42:53 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3d9e::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:0e:3e:3c:ea:be:7e:af:23:c7:27:0f:d6:82:e4:29:dc:c7:83:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 01:42:53 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=48fbb6074fd1f2524e9eb3fabb3496c932100ae4cbe4d24564ed85202cfc0dee, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:fe:e2:53:c3:07:3e:60:ec:24:c9:c2:0a:87:
                    3f:61:38:c1:7c:0e:8f:1b:a0:c1:20:1e:3e:11:67:
                    4f:07:db:c8:95:a1:f8:c1:29:93:cb:f4:3d:0c:71:
                    24:64:67:f2:f6:80:8f:4d:0d:d3:45:05:8e:a7:6f:
                    58:c9:fa:81:8c:39:86:6f:8f:c0:30:d5:02:18:da:
                    27:0d:ce:46:5b:f7:c7:bb:84:25:83:8f:fd:3e:06:
                    59:d9:94:a2:78:b1:cc:0b:88:9d:2b:cb:71:70:6c:
                    73:a8:2e:5e:99:4b:40:f3:7b:0b:74:65:f8:c0:f9:
                    51:d5:98:34:1f:0d:e1:7d:21:e6:84:b4:b2:7c:5f:
                    0a:2e:39:ed:8c:90:f0:38:7d:d7:0b:ab:e8:ad:46:
                    26:2d:70:53:1f:33:da:36:6d:b6:41:f1:6e:41:7f:
                    ff:94:db:6d:0b:86:fb:3d:1c:ca:2d:24:30:e6:e0:
                    51:fa:21:75:76:78:f7:6a:63:54:f5:a7:72:49:af:
                    9f:f5:b7:e8:5d:7f:fb:3d:8a:84:44:30:79:84:03:
                    8a:3c:d0:b9:c5:a8:8d:58:fa:4d:bd:d9:23:22:1b:
                    f5:38:a5:be:7a:82:db:74:02:76:7e:4f:c8:fa:03:
                    2e:f7:07:7b:5c:6e:53:29:5e:c1:f7:8a:57:29:19:
                    d4:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:0C:E4:84:74:3F:82:15:5C:91:1A:CC:4E:61:DD:84:49:8F:D4:A8
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ce676b25-39da-4653-a655-19ae703e7e57.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3d9e::/47

    Signature Algorithm: sha256WithRSAEncryption
         23:7f:5f:a9:45:41:e6:1a:da:c8:57:d6:84:3b:21:50:89:76:
         ce:51:b2:46:0c:7d:a7:4a:ee:27:00:ce:ff:0c:48:6f:01:6f:
         9f:88:25:e3:db:34:7e:af:57:e2:dd:e4:90:bd:ce:05:dc:67:
         53:09:80:45:4b:b3:db:d0:32:91:6b:91:0d:d8:18:18:f4:df:
         09:fd:d2:81:e0:0e:a4:fb:4c:13:f8:55:08:2f:b3:72:8c:77:
         6c:3e:c1:e9:d2:fe:a2:5e:f6:b1:8d:27:3c:28:70:47:01:45:
         da:03:02:73:d1:30:84:b0:dc:e9:af:63:44:6d:39:68:2b:98:
         61:80:3f:ce:b9:3a:96:81:da:ee:49:60:70:e7:d3:b6:db:4e:
         76:ef:89:a5:dc:4e:68:7b:f9:02:76:c7:bc:a4:e3:11:c3:16:
         a9:58:74:75:d3:d8:93:47:a8:0c:90:64:c9:7b:21:29:3a:97:
         1e:9f:a6:f2:7e:40:84:c6:29:c2:27:be:07:8d:b8:8f:c3:88:
         e5:69:a8:95:b7:a3:ce:5c:08:a1:93:de:56:e4:6f:51:6e:88:
         41:da:a8:e5:64:a6:92:5b:9c:15:dc:f6:7d:13:6e:a3:eb:b5:
         4c:f8:a8:a9:b9:36:73:3b:ec:41:82:45:64:0e:24:40:c6:5b:
         d7:c0:a2:76
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 12:30:47 2025 by rpki-client