Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d704d3ff-69b3-4e8a-861d-20f8c9ebb2dc.roa
File:                     d704d3ff-69b3-4e8a-861d-20f8c9ebb2dc.roa (raw, json)
Hash identifier:          TYq/fodYA/PoD0LvHgk5zxbm8jmz3V2rAM3ihj7aMYo=
Subject key identifier:   AA:B3:94:ED:A1:BD:81:12:F0:E7:EB:6E:F0:54:54:57:1F:84:AD:F7
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       4189CE24895996FA162C0386AD46BFBD74264E
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d704d3ff-69b3-4e8a-861d-20f8c9ebb2dc.roa
Signing time:             Thu 30 Oct 2025 22:58:51 +0000
ROA not before:           Thu 30 Oct 2025 22:58:51 +0000
ROA not after:            Thu 04 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2a82::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:89:ce:24:89:59:96:fa:16:2c:03:86:ad:46:bf:bd:74:26:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 30 22:58:51 2025 GMT
            Not After : Dec  4 23:59:59 2025 GMT
        Subject: serialNumber=b201421e95b67d5a5f7eef9b527dfd1c7e13601ccf0d1078fbdcaabb94a448cf, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:46:ad:48:90:b8:eb:b3:77:7b:bb:ca:b4:33:
                    c9:7a:60:6e:1a:1b:c5:90:2a:9b:f0:aa:6b:f2:53:
                    17:5d:13:d4:1a:ac:c8:6d:d2:10:a0:95:1a:34:ad:
                    e0:99:f1:bc:d2:69:56:75:66:bf:80:97:bf:24:8a:
                    2b:6a:92:66:ab:9c:74:aa:0a:39:28:1f:41:56:8f:
                    5b:83:b0:0e:2b:b7:a0:88:2b:27:2f:2f:22:34:6e:
                    72:3d:d6:33:fe:ca:7f:fa:ec:37:60:6f:60:df:e3:
                    e3:02:b9:f7:6d:98:9c:2e:19:9d:5b:ab:81:fb:0e:
                    1b:ee:2b:6e:9a:a6:52:95:10:fb:25:1f:2f:05:d5:
                    09:c3:71:ef:a5:1e:0f:cc:42:b4:f5:5c:54:67:e8:
                    94:7c:06:ad:e8:a0:ca:4c:88:e7:9e:f3:96:72:fe:
                    bd:f0:15:7a:8d:17:eb:a3:97:05:76:0d:e8:3c:70:
                    78:37:82:0f:27:de:8f:ee:40:1b:f7:91:d2:2c:b5:
                    0a:81:e1:09:95:46:fd:5d:a1:66:72:9d:38:36:bd:
                    c8:f3:75:80:97:70:c2:39:66:54:81:0e:7e:f2:fc:
                    b4:98:85:b6:a5:a1:40:82:a0:30:b5:fd:c2:82:5d:
                    48:12:43:a0:ba:3b:f8:b4:15:b1:70:63:a0:fb:63:
                    af:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:B3:94:ED:A1:BD:81:12:F0:E7:EB:6E:F0:54:54:57:1F:84:AD:F7
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d704d3ff-69b3-4e8a-861d-20f8c9ebb2dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2a82::/47

    Signature Algorithm: sha256WithRSAEncryption
         8e:f1:43:4b:fd:4a:14:45:87:6e:bd:fb:94:45:65:69:46:d7:
         03:ef:9e:4f:33:d6:0c:cf:de:6e:22:94:64:03:f6:9d:1f:cb:
         ca:83:de:b0:b4:98:4c:aa:53:28:0f:1d:24:b1:8d:60:1a:26:
         a5:4f:f3:17:d9:43:95:98:e9:f4:ce:a1:b1:3d:5c:82:bf:ba:
         8a:24:8b:f1:0f:c0:d1:8d:95:07:1f:02:fd:cf:ae:b5:6b:fa:
         56:ee:0d:9f:28:66:2a:56:59:c5:d7:ec:4b:65:8c:ac:dc:c0:
         3d:e1:90:39:1d:87:ad:51:50:44:d9:ba:08:45:c3:48:70:3e:
         47:c7:c3:77:81:22:d5:59:24:39:14:fa:00:34:02:e0:37:59:
         91:45:96:dc:c4:d9:9f:9e:38:b4:08:4e:0b:6f:b5:f4:be:49:
         e7:e9:21:c3:70:c9:b5:85:66:44:6e:06:a6:77:06:36:7c:da:
         b1:77:7c:02:d6:8f:1e:37:4f:ff:ee:40:74:eb:5a:a5:2a:e9:
         7a:ba:ff:97:4c:2d:a1:0c:f0:7f:c3:9d:2e:b1:94:3a:71:19:
         9c:27:8c:1d:41:13:ed:22:1f:80:ed:68:a3:88:97:b1:cb:57:
         c9:60:28:e6:50:c0:0e:96:06:ba:e2:61:72:c7:ae:40:f4:3e:
         35:a1:c8:13
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:36:07 2025 by rpki-client