Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d935aee4-fda5-4c09-a9ed-8ed72668d4bb.roa
File:                     d935aee4-fda5-4c09-a9ed-8ed72668d4bb.roa (raw, json)
Hash identifier:          a6GkWHsyRXXqSMZXwgSXV17/v/BbxwfpAype7Q4C33E=
Subject key identifier:   29:22:F8:EA:A4:2E:6E:12:4B:29:9D:45:EA:3F:42:84:0E:0F:09:05
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       4A7B459FEECFF61E53DB33B9FDF47FE003B187E8
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d935aee4-fda5-4c09-a9ed-8ed72668d4bb.roa
Signing time:             Fri 31 Oct 2025 05:55:19 +0000
ROA not before:           Fri 31 Oct 2025 05:55:19 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3228::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:7b:45:9f:ee:cf:f6:1e:53:db:33:b9:fd:f4:7f:e0:03:b1:87:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 05:55:19 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=57dddae4ca1474cbd441ab2d261f9fcf89d558e8db82d04d1498bb121449b9f1, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:1e:1b:16:02:4a:7d:0d:85:67:d3:28:e7:2f:
                    19:61:c1:1d:f0:f3:87:c4:94:e4:6f:ea:51:c7:45:
                    20:0f:7f:ab:d2:de:f4:43:84:a1:c6:45:b1:26:09:
                    9a:7f:cf:f2:fb:7b:87:b3:18:f1:4f:24:2d:d6:b1:
                    00:3d:0a:ca:af:31:ae:47:b7:22:d6:99:9c:26:a8:
                    24:79:67:9c:5e:a9:51:88:59:77:a1:e0:03:ae:ac:
                    b8:2d:27:29:69:ab:fa:f4:c6:8f:55:16:ad:fc:ad:
                    43:bf:4d:11:90:c9:66:83:27:18:b9:f4:1e:88:d7:
                    22:f8:8f:55:45:98:83:18:33:43:30:ea:04:03:2c:
                    42:d8:ef:a8:c0:e6:92:a9:f1:90:68:2c:27:a5:d8:
                    43:28:f8:5c:1b:02:63:30:eb:11:2b:68:16:73:ab:
                    0e:37:59:31:3d:39:6a:47:c3:21:53:9e:5a:a7:a5:
                    76:b9:f9:30:e1:20:c9:f3:a1:8e:fe:80:d6:a7:d3:
                    a9:fd:c7:38:8e:3d:74:fa:14:28:4d:dc:33:f6:40:
                    e7:2e:78:3e:a9:3b:87:57:ad:3b:a8:ff:87:02:80:
                    90:9c:de:bf:28:fd:e7:92:fe:aa:03:3f:0c:68:2b:
                    1d:0c:5b:09:34:5f:32:c1:a3:05:52:16:28:f7:07:
                    88:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:22:F8:EA:A4:2E:6E:12:4B:29:9D:45:EA:3F:42:84:0E:0F:09:05
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d935aee4-fda5-4c09-a9ed-8ed72668d4bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3228::/45

    Signature Algorithm: sha256WithRSAEncryption
         7a:df:e7:3e:45:58:8f:4d:80:86:14:60:a9:e2:d1:ae:d8:2a:
         72:ba:d7:59:79:4e:ec:63:b5:47:0c:72:25:a7:60:ce:ef:27:
         d4:68:16:75:36:39:c6:ad:fc:37:b9:ba:36:03:d2:aa:14:47:
         ba:fd:32:16:02:7d:72:b6:89:5d:9e:5d:da:05:16:91:9b:c0:
         6b:fc:97:03:15:25:ef:62:f1:c8:6f:49:c7:7e:f8:d8:02:74:
         9b:63:64:ad:dc:14:1a:39:a5:e2:de:5b:fa:77:02:5d:8b:15:
         93:c1:6d:62:c3:00:1d:5e:b0:63:bc:06:ba:76:f4:31:02:78:
         36:63:c0:52:74:dc:b8:2e:c1:38:d8:c7:fd:66:30:22:0a:9a:
         01:2e:c0:43:e7:27:c5:41:88:0e:e3:a0:8e:4c:46:73:b4:bf:
         74:77:b0:d5:ed:50:1b:f6:29:b3:f0:d9:0e:00:c7:da:ce:03:
         5d:8e:dc:dc:f5:8d:4e:98:3e:24:5b:1f:d7:e0:c3:81:3e:fc:
         c0:ca:9d:83:a2:82:58:a7:95:5e:23:df:04:97:00:5d:81:de:
         6a:4f:46:3b:6e:27:62:97:43:1f:69:80:e7:56:0b:18:22:b6:
         eb:9d:e8:19:f6:a0:ed:87:b0:9c:4d:25:3d:dd:7e:e6:65:9f:
         ea:c2:48:ab
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:43:00 2025 by rpki-client