Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d4d5b1e4-500a-4ad3-85c7-5950b4dd33bf.roa
File:                     d4d5b1e4-500a-4ad3-85c7-5950b4dd33bf.roa (raw, json)
Hash identifier:          Z1HYKmp73ZQ0Gb3iurSLs6hLBWdoVnACOkLRb5Rzabc=
Subject key identifier:   04:5A:21:94:2E:0F:A3:33:E9:F4:21:A0:69:DE:9C:6E:C5:25:EA:CD
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       1C6399AE7A013454B4A2BDE2FC1D8CB3BC3AD4A6
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d4d5b1e4-500a-4ad3-85c7-5950b4dd33bf.roa
Signing time:             Thu 30 Oct 2025 23:57:15 +0000
ROA not before:           Thu 30 Oct 2025 23:57:15 +0000
ROA not after:            Thu 04 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3242::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:63:99:ae:7a:01:34:54:b4:a2:bd:e2:fc:1d:8c:b3:bc:3a:d4:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 30 23:57:15 2025 GMT
            Not After : Dec  4 23:59:59 2025 GMT
        Subject: serialNumber=17e31a18552cb513d602ba76c9dc670e9394aeeae5dcf1e1371f16de74012500, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:50:e1:75:7e:22:1f:14:d3:7c:96:15:59:41:
                    86:ce:f0:47:2b:d3:06:39:01:64:a3:69:ac:c9:34:
                    a1:4c:37:4e:b5:5e:ce:57:45:47:66:8c:72:90:d7:
                    b5:ee:5b:27:19:45:10:a6:cb:3c:26:d7:fb:e5:9b:
                    9a:34:60:69:37:25:41:9d:05:75:f9:3a:19:cc:fd:
                    d2:be:b4:73:de:3a:0d:8c:c2:a0:66:66:53:41:6b:
                    62:d2:30:c3:29:13:1b:ff:58:73:d9:08:38:fd:a6:
                    24:77:9c:86:6f:87:e5:73:0c:00:c8:0b:a8:b4:08:
                    40:45:bd:e8:30:3c:82:12:45:3f:e7:82:b9:35:65:
                    65:0a:2e:64:2d:d1:87:3e:8f:91:27:49:f3:17:28:
                    d1:4e:f3:d6:c0:5a:67:f8:49:af:36:d3:41:cf:04:
                    00:05:de:25:99:87:14:73:34:7f:7e:9a:65:08:0e:
                    c8:93:9c:3b:74:e9:6f:09:db:7f:af:14:18:53:6b:
                    f9:aa:d1:82:a7:79:0b:18:72:9e:ac:7b:9d:1d:9b:
                    c1:09:2e:71:02:14:a3:75:a5:65:71:93:07:b4:dc:
                    1d:40:90:18:6b:7a:cf:fd:3e:0c:24:fa:01:34:9b:
                    82:f4:9c:51:3f:fc:6a:c7:d1:70:28:ac:3c:70:2a:
                    d1:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:5A:21:94:2E:0F:A3:33:E9:F4:21:A0:69:DE:9C:6E:C5:25:EA:CD
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d4d5b1e4-500a-4ad3-85c7-5950b4dd33bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3242::/47

    Signature Algorithm: sha256WithRSAEncryption
         54:67:b5:7b:73:85:5f:98:8f:c3:35:0d:18:a6:c6:52:82:4a:
         85:73:27:51:cf:2b:31:63:a1:59:29:5e:92:c2:df:83:cf:49:
         bd:cf:a7:c9:a7:6c:16:10:0e:0d:24:ca:ea:1a:77:30:15:61:
         3e:88:66:dc:f5:c3:2c:dd:35:25:93:0b:bd:3e:14:03:7b:4e:
         83:68:a3:de:69:fa:4e:4c:25:cb:87:a4:b2:27:f4:dc:31:05:
         ac:e5:f1:2b:66:c2:61:b9:5a:a2:ac:8c:52:6c:1e:7f:c0:70:
         f6:63:8d:93:9e:93:fe:e3:8a:81:54:72:40:d2:32:0d:5c:e0:
         5a:0e:50:03:87:81:0e:0a:34:35:ad:89:22:ab:27:b7:b6:ea:
         90:5a:d7:51:e0:4a:4a:b7:f9:ce:bb:ee:3e:c7:45:35:f3:7a:
         63:95:4d:54:a2:5f:d9:be:d4:f3:25:e2:f0:39:87:39:f6:3b:
         e2:16:40:a2:01:04:ee:ab:5f:f4:be:65:c1:8b:95:40:9f:e7:
         61:70:67:54:a5:6c:a9:ae:df:71:04:e4:38:c5:bb:a3:d3:09:
         ec:36:30:4c:65:3f:ac:44:11:03:e9:4a:78:d5:95:a2:88:3d:
         d7:ec:95:33:c3:b4:86:92:40:48:34:9e:d6:f7:3a:72:0e:9e:
         70:45:4e:7e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:39:06 2025 by rpki-client