Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d13e4de0-6d5b-43f2-963e-7b0c25beb744.roa
File:                     d13e4de0-6d5b-43f2-963e-7b0c25beb744.roa (raw, json)
Hash identifier:          7x27ttlMSAkIp76CoXSIMY3U9nhb/g4n/Bi+jT7TE8E=
Subject key identifier:   09:44:F6:6A:C9:E2:39:EB:39:3A:5B:BF:A3:68:F6:49:CF:A1:92:0A
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       0461CE055FACA57CF720FFA3C7A0819DE816F1FF
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d13e4de0-6d5b-43f2-963e-7b0c25beb744.roa
Signing time:             Thu 30 Oct 2025 22:38:25 +0000
ROA not before:           Thu 30 Oct 2025 22:38:25 +0000
ROA not after:            Thu 04 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1ee6::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:61:ce:05:5f:ac:a5:7c:f7:20:ff:a3:c7:a0:81:9d:e8:16:f1:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 30 22:38:25 2025 GMT
            Not After : Dec  4 23:59:59 2025 GMT
        Subject: serialNumber=1f0d74387087c07b1f64ee1e640f325e734978c6720eb0e27dc52013aba63113, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:fe:be:ec:e1:93:c5:99:1f:51:e1:5b:e9:b8:
                    30:1e:45:2c:c4:24:15:ff:2a:a1:94:34:f5:4b:67:
                    c3:58:a9:65:11:d4:c7:86:0a:e1:bb:10:92:7f:e8:
                    a0:99:b0:15:e4:1b:54:99:54:e7:ed:6b:d5:3e:9a:
                    c1:6b:28:b7:3f:c0:72:ce:c2:9a:08:73:d8:54:56:
                    24:82:ba:d5:fb:c7:11:d1:81:8e:df:36:e3:bd:f5:
                    69:8d:83:70:bc:9b:13:5c:1a:38:6f:fb:e3:ab:b6:
                    19:28:18:7b:79:1e:b1:fe:06:13:e5:38:0f:60:63:
                    b3:b6:6c:76:be:ff:de:b1:3e:0a:7c:dc:25:b3:62:
                    2b:24:dc:93:20:2a:c5:42:e3:ea:44:f0:6d:2b:54:
                    1b:d2:dc:da:fb:a8:e2:d3:ee:ab:77:73:57:2a:63:
                    c8:38:9e:29:cb:3c:bb:df:2d:5a:19:2e:85:70:5d:
                    7f:ab:8f:14:e7:f8:20:87:7d:a6:81:42:27:02:4f:
                    5a:bd:67:96:80:1e:d0:f9:fc:1d:ad:1f:1d:a5:ca:
                    c8:70:50:6b:05:e0:95:3b:0b:f3:32:f4:ae:74:d7:
                    f8:51:b7:20:1a:27:f6:65:0c:0c:34:1a:fc:b9:eb:
                    fc:68:33:8c:22:be:c0:c9:1e:2a:6b:52:74:a8:5d:
                    66:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:44:F6:6A:C9:E2:39:EB:39:3A:5B:BF:A3:68:F6:49:CF:A1:92:0A
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d13e4de0-6d5b-43f2-963e-7b0c25beb744.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1ee6::/47

    Signature Algorithm: sha256WithRSAEncryption
         11:7c:fe:04:8d:f2:f1:9e:d8:b1:af:66:03:4d:54:ce:ea:12:
         75:17:bc:76:6e:d5:a9:b5:e7:20:51:34:e3:da:0a:c9:a1:50:
         2f:1e:02:a6:b8:4e:20:0e:28:d3:33:e7:41:c2:4d:1a:f9:75:
         9e:67:52:e1:c2:e5:02:30:37:0f:82:c3:59:cd:50:29:83:c0:
         cc:01:dd:d9:c6:fd:78:c2:9a:07:50:37:97:91:e4:50:0a:f1:
         d6:27:8b:5b:6e:15:de:fb:e8:da:fb:4f:5c:ac:4d:0f:14:63:
         72:da:71:02:cb:ee:ec:e7:04:3d:bc:ea:ba:c6:79:30:1c:b0:
         39:b6:19:f0:ae:28:bc:83:df:1a:e0:1f:5c:81:08:d6:1d:15:
         bf:53:92:31:6c:3b:f1:04:40:9f:8a:e7:56:b9:08:9d:10:b6:
         fb:25:ab:cf:29:96:0e:bd:b3:a6:91:0c:52:2b:6e:dd:f5:05:
         1e:c9:7d:3b:af:a2:28:73:1c:87:d7:c6:dc:3f:15:aa:db:25:
         f1:60:06:7e:52:21:64:3f:fb:2f:35:eb:68:95:48:9f:1b:72:
         c3:4a:a8:9b:e6:83:1b:15:b3:56:46:72:94:5c:36:79:7d:65:
         08:3e:19:68:d1:99:41:5b:39:5e:f3:2c:f8:6e:05:5e:84:b3:
         61:c8:22:4e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:55:27 2025 by rpki-client