Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/dc56ebbb-ff1b-45df-a774-581e9c93bb2d.roa
File:                     dc56ebbb-ff1b-45df-a774-581e9c93bb2d.roa (raw, json)
Hash identifier:          49wl60h1U8InfaAGNJtXvUC/6nz7kvGBxNxkBYZ611g=
Subject key identifier:   17:C5:AD:2D:43:99:CD:C1:0C:9C:22:48:9B:2E:00:1E:6F:C2:5E:4B
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       68FE764832000467CA237BBE3B05E81F2D940280
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/dc56ebbb-ff1b-45df-a774-581e9c93bb2d.roa
Signing time:             Fri 31 Oct 2025 05:42:18 +0000
ROA not before:           Fri 31 Oct 2025 05:42:18 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2ba8::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:fe:76:48:32:00:04:67:ca:23:7b:be:3b:05:e8:1f:2d:94:02:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 05:42:18 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=958f804c19f1c9e19ced6f6e05adac536d8c1ffd60d3a5f85b50d1d818bd308f, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:1f:a2:6c:9b:72:30:2a:d3:f3:39:ff:53:49:
                    5c:66:07:2b:3c:bc:58:d0:a5:0c:5b:ea:dc:a7:e6:
                    0e:2a:3b:36:45:b0:3e:26:57:b7:8c:81:6c:8c:d3:
                    99:fb:64:90:5e:45:0d:12:70:3b:7f:12:f6:6f:fc:
                    fe:80:39:95:dc:19:72:6a:cd:ec:84:9d:86:b9:4a:
                    c7:e7:51:0b:57:94:9b:66:27:1a:f5:40:97:f4:59:
                    b9:9b:1b:e3:73:09:68:70:4c:c0:d0:c2:99:33:9a:
                    1a:0b:a2:f9:78:d9:68:b2:d2:b0:19:5a:5f:ba:49:
                    ed:cd:a7:48:51:c8:fb:a4:1c:c4:b7:e5:74:05:b1:
                    cc:27:0c:dc:b2:43:c9:2a:b9:2d:86:32:64:65:37:
                    df:ff:5e:d9:69:4d:c8:d8:89:1f:3c:79:b1:48:73:
                    22:ee:2a:c1:d7:f8:34:9d:49:79:cc:bf:4c:82:b9:
                    76:24:cf:63:b4:e4:40:86:32:64:ef:d0:39:81:e2:
                    05:57:fc:3d:ed:97:73:d4:ce:02:e3:57:75:ce:4c:
                    4e:9f:93:5f:70:f2:26:ab:ac:b0:d9:12:9f:cd:fb:
                    e3:9c:24:eb:08:76:2d:3b:7b:36:d0:35:90:21:ce:
                    5b:f1:cc:8c:20:f6:8b:20:6c:08:7c:03:22:17:d5:
                    45:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:C5:AD:2D:43:99:CD:C1:0C:9C:22:48:9B:2E:00:1E:6F:C2:5E:4B
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/dc56ebbb-ff1b-45df-a774-581e9c93bb2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2ba8::/45

    Signature Algorithm: sha256WithRSAEncryption
         47:7d:ca:1d:21:9d:04:09:f6:51:60:97:69:7d:71:af:5c:6b:
         14:e3:ec:c1:1a:31:1a:76:22:7f:65:c2:f2:f0:04:e0:d5:90:
         53:ea:95:d1:58:36:de:93:a7:23:3f:8b:2a:34:df:b9:5e:b0:
         3d:a9:c2:62:dc:f0:34:6d:4c:50:5e:60:32:a7:6c:9e:e8:67:
         56:1e:1a:a7:7d:d9:b9:2f:32:cc:36:22:5e:01:b1:7d:fb:c2:
         c6:ff:3f:58:b0:39:20:99:2c:80:88:a6:88:fe:ec:8a:b2:df:
         fd:79:ea:af:b4:2c:28:e0:8e:5d:c0:d0:d5:19:5e:84:76:0e:
         91:12:45:96:46:46:c3:4a:98:41:d0:26:1e:cb:5b:75:01:23:
         e8:99:ef:b2:c1:28:7e:9c:4f:79:fe:a5:12:e9:5b:d2:53:1e:
         1e:42:d7:64:47:e1:93:a1:8f:5e:b3:d7:c3:50:2e:5d:30:41:
         0c:7b:c9:fa:74:88:9b:0a:32:d3:9e:3a:9f:3c:6d:ef:15:b2:
         f2:c2:fd:6c:2a:70:5c:b2:fd:7e:19:36:39:35:ae:74:ea:c7:
         59:ec:a0:f1:0b:bc:29:89:cf:ac:45:0c:4e:27:87:0c:85:d1:
         f5:9c:ab:5a:30:bf:7c:e6:0e:9b:3b:25:3b:20:a4:24:3d:4c:
         e6:6f:56:ab
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:55:51 2025 by rpki-client