Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/dc54e743-5164-4f0c-be89-d775bde544fc.roa
File:                     dc54e743-5164-4f0c-be89-d775bde544fc.roa (raw, json)
Hash identifier:          ZEVH3fyqbFUsE2Tj3TfaIIZGkV/1tm/E80CT932ej6Q=
Subject key identifier:   AF:3C:07:89:62:70:E7:80:5F:F1:1F:8B:03:1B:F1:FB:D3:A0:84:D3
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       250D94E4D7F99DD9DA7FD53B8B5E4CE4D6843A9F
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/dc54e743-5164-4f0c-be89-d775bde544fc.roa
Signing time:             Fri 31 Oct 2025 06:25:32 +0000
ROA not before:           Fri 31 Oct 2025 06:25:32 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3f78::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:0d:94:e4:d7:f9:9d:d9:da:7f:d5:3b:8b:5e:4c:e4:d6:84:3a:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 06:25:32 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=0376134007af03615027831f2abb0b3fa44bd486a8bc0986db9ef648091026a1, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:8b:61:b5:22:5b:f7:e1:80:3f:a0:01:5d:27:
                    c3:ac:ee:d7:e9:4f:6e:81:e6:9d:b0:8c:0a:91:1e:
                    7f:62:f1:23:04:32:58:c7:9c:c8:b8:5f:4a:ef:d8:
                    bb:83:72:c1:0c:43:96:a9:9a:e5:24:54:62:06:dc:
                    a0:fb:ca:92:9d:86:42:82:ef:12:45:f6:e2:2a:0d:
                    f4:a3:dc:35:ec:e4:a0:0e:5c:f1:0c:be:17:b2:fb:
                    9e:4b:a1:da:bd:2f:8e:a2:2d:e1:0c:ac:89:f4:d3:
                    f9:33:23:0f:bf:07:57:d0:54:7f:65:08:96:0f:a6:
                    cb:0e:67:71:e7:98:32:a2:09:a8:31:ff:47:f5:cb:
                    64:1d:46:f1:b0:a8:41:8c:f5:56:3a:9e:f0:71:cf:
                    fa:5b:57:38:a4:2b:3c:58:4c:8f:90:f4:15:2a:f9:
                    e3:b6:7e:f0:b0:07:1f:f5:98:1e:d7:ab:d9:ce:56:
                    66:34:e6:b3:20:19:6b:c3:b7:fa:f9:bf:e6:d3:d0:
                    f6:2b:59:d2:f4:a8:34:88:88:16:0e:3a:f7:dc:e6:
                    71:f5:65:59:55:7c:4c:9b:4a:7e:8f:05:3b:e9:6d:
                    23:31:be:3d:8f:e3:5a:4d:b2:60:8c:77:49:6b:91:
                    b3:41:45:35:c8:c0:a6:ae:60:18:a9:e8:c7:45:e4:
                    80:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:3C:07:89:62:70:E7:80:5F:F1:1F:8B:03:1B:F1:FB:D3:A0:84:D3
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/dc54e743-5164-4f0c-be89-d775bde544fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3f78::/45

    Signature Algorithm: sha256WithRSAEncryption
         7e:a4:84:81:e2:1f:6c:3d:68:90:59:7e:ce:af:a4:f7:7c:c9:
         b2:e4:d3:15:dd:0b:9c:2e:48:16:79:5e:ba:5d:61:ea:87:61:
         13:4e:c8:ca:99:4f:16:8a:9e:3c:1e:cc:d9:1c:9a:65:77:9e:
         fe:95:28:b5:5b:9d:bf:26:3b:a4:5a:d5:63:69:07:b0:62:4c:
         b2:d7:99:17:26:b5:6a:53:19:c4:fd:cf:53:31:1e:69:a3:83:
         2f:08:3a:8f:90:51:86:52:43:e5:75:27:9c:83:3d:a1:c5:a3:
         8c:55:8c:07:ba:11:8a:de:bf:a1:02:e1:2d:8f:d7:86:15:63:
         84:0e:04:73:dd:e7:b5:8f:ab:40:44:ab:14:5c:a0:36:81:c6:
         df:85:e9:94:c2:35:20:15:3a:a1:6e:c3:87:2f:0a:9d:25:4e:
         94:08:0e:f1:d3:7a:4a:ca:7c:e4:d7:ed:0b:18:43:ce:bb:a6:
         60:55:95:9d:05:91:83:09:94:28:a5:31:d4:e3:d3:8d:a0:b9:
         94:4c:c3:a9:79:ba:76:e1:d8:47:e1:e8:05:d9:bc:f8:6f:4a:
         56:4c:76:96:74:fa:6a:4e:54:84:bd:da:3c:32:77:d9:9a:0a:
         b1:3e:39:db:98:bb:62:ce:cd:d5:87:36:16:9a:a5:47:75:8a:
         ea:07:6f:d9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:40:40 2025 by rpki-client