Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d713b47f-3039-4e78-a25c-e92130df3dbb.roa
File:                     d713b47f-3039-4e78-a25c-e92130df3dbb.roa (raw, json)
Hash identifier:          BuZ12ZkPRht+Yka5mCmULdT9nyUlONsQSjTZ93mtCoI=
Subject key identifier:   67:CA:9B:ED:66:8D:76:5D:93:50:BE:7D:EE:1C:43:28:BC:52:6E:E0
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       74AFC9746BE8841C34104AD972609BABA703F78F
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d713b47f-3039-4e78-a25c-e92130df3dbb.roa
Signing time:             Fri 31 Oct 2025 07:51:54 +0000
ROA not before:           Fri 31 Oct 2025 07:51:54 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2e00::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:af:c9:74:6b:e8:84:1c:34:10:4a:d9:72:60:9b:ab:a7:03:f7:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 07:51:54 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=145c417143d0737e36b4dee877e633a9dd7e7101b1826584a5fdb0ccaade15b9, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:15:ef:6d:c4:c0:3a:9d:0d:00:3e:21:77:17:
                    43:02:f0:a0:bf:86:20:69:54:66:68:0f:5a:bd:fe:
                    de:8a:cd:8b:e2:6e:8c:b1:c6:ec:49:cc:a9:44:b6:
                    8b:65:d5:80:22:9a:64:43:c9:d4:71:75:c5:72:29:
                    45:a6:2e:4a:7d:94:1b:73:c4:3b:f0:df:a1:ae:2b:
                    b7:db:c1:a5:b1:b2:33:fe:ca:da:8d:84:69:1d:fd:
                    23:43:52:48:b0:8f:93:a1:cb:9a:36:71:b8:75:9f:
                    08:1a:6f:f8:28:89:2d:91:f5:8b:91:9e:4f:12:67:
                    b7:f0:cb:a9:b5:a4:25:47:c3:52:c7:72:86:c2:56:
                    0c:de:fd:de:6a:db:1e:4f:95:87:e5:39:5b:5c:72:
                    ff:b8:76:81:5a:da:41:67:aa:c0:21:2a:89:d5:85:
                    5c:44:57:06:70:14:91:fb:68:13:45:b2:94:78:c8:
                    b1:bd:c5:e8:dc:96:a9:cf:1d:1e:8d:1b:5c:8c:05:
                    f4:ba:b3:9d:6a:43:dc:5e:98:93:6c:10:a1:d8:2c:
                    82:d7:f3:8a:d8:68:12:49:a9:d2:7c:c4:4d:12:0a:
                    c9:1d:3b:48:b2:e0:11:ac:36:0c:ac:7e:24:aa:2a:
                    a7:f5:16:6c:eb:c7:3e:ca:d8:b8:96:6f:9e:98:f5:
                    18:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:CA:9B:ED:66:8D:76:5D:93:50:BE:7D:EE:1C:43:28:BC:52:6E:E0
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d713b47f-3039-4e78-a25c-e92130df3dbb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2e00::/41

    Signature Algorithm: sha256WithRSAEncryption
         a5:a7:dc:47:9b:21:7d:c7:9d:35:4c:8a:27:fe:db:25:b2:97:
         47:1f:e0:26:e6:09:81:9a:a1:67:56:e6:66:e8:89:01:42:67:
         5c:36:f5:c0:48:c7:7e:ae:44:20:16:61:97:89:7f:0a:33:df:
         f5:dc:7f:c0:7c:41:78:1c:05:0b:79:da:34:e7:a7:be:e7:58:
         d0:a8:e2:46:d4:9f:25:83:7a:74:35:c2:fd:1e:30:48:8c:09:
         b2:c2:ae:98:1a:eb:12:17:24:61:29:63:a7:6c:a4:a7:d6:d6:
         d8:d0:86:9a:67:09:6b:5f:b1:e9:8a:3a:e7:32:9d:ae:6d:d3:
         c6:18:fa:28:e4:0e:60:a6:66:2a:f8:92:96:23:84:fc:b0:2f:
         41:4f:f9:9f:45:a8:f5:84:7e:b5:1e:41:f6:05:99:7f:f5:c4:
         5b:6c:d1:7e:10:cb:fb:5f:7f:a9:9d:2e:94:61:91:ad:09:bc:
         6e:eb:8f:0f:cd:05:53:a9:49:d9:b4:c1:cf:ed:10:83:84:07:
         69:9f:38:ed:d3:74:f7:a5:06:62:0c:92:d0:12:70:5c:9d:49:
         ff:e8:9c:8a:50:0c:c5:cf:c5:e2:04:08:ed:2f:3f:99:3a:b2:
         29:c0:43:26:f7:49:be:6a:23:87:e9:58:a3:a1:96:e3:18:e2:
         f3:e7:28:b3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:43:12 2025 by rpki-client