Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/dcfad036-98d6-42ee-bcab-3cbaa1fd15c1.roa
File:                     dcfad036-98d6-42ee-bcab-3cbaa1fd15c1.roa (raw, json)
Hash identifier:          +o3LqWBlYKsnN+oaDF984px5Q5bE/hjPGoyrfaccezs=
Subject key identifier:   17:DA:55:33:3F:0A:72:33:A0:39:FE:3B:4A:D5:F1:7C:2F:35:8A:1A
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       56A640EDED43AD805C43427DBD5FEE0097F6CC3C
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/dcfad036-98d6-42ee-bcab-3cbaa1fd15c1.roa
Signing time:             Fri 31 Oct 2025 03:13:15 +0000
ROA not before:           Fri 31 Oct 2025 03:13:15 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1f1c::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:a6:40:ed:ed:43:ad:80:5c:43:42:7d:bd:5f:ee:00:97:f6:cc:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 03:13:15 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=08d7d83f2bdc7ad0d9626fb243342957b38a11d03f378c6b424a3c7fe3f345ea, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:1b:2f:8b:c3:87:18:6c:8e:9f:65:1a:f7:6f:
                    a4:c0:9b:17:16:b8:74:9b:61:95:b1:a0:82:eb:c4:
                    bc:7d:c0:13:0a:b1:be:40:3a:93:0b:8b:4d:db:60:
                    ff:52:f8:91:b4:ec:2d:7f:eb:fc:63:94:3c:68:d2:
                    99:b4:57:6c:8f:8d:c1:a4:0c:c0:2f:9b:5a:b2:4a:
                    f3:4a:e6:8d:ce:86:44:9b:f4:d8:ae:e5:fe:47:ae:
                    89:40:35:79:27:80:29:05:94:c3:0f:aa:88:34:b6:
                    ac:9d:48:05:a6:fa:43:f4:83:8b:5f:41:cf:16:01:
                    7f:38:84:53:d0:20:6b:e6:a5:89:56:df:07:6d:2d:
                    7d:17:1d:9b:c8:81:53:03:d8:5f:82:1f:d8:9c:26:
                    46:cb:ba:81:02:d8:76:21:99:ff:96:ac:8a:54:6b:
                    84:24:1a:50:28:73:af:09:29:6e:3f:a2:6f:26:dd:
                    dc:11:5d:66:6f:4c:f2:bd:2e:e2:4a:ca:f9:a4:f2:
                    ab:67:5d:a9:8c:51:61:12:a7:ab:7f:91:9b:f2:b2:
                    ce:9f:08:42:13:8b:1b:cc:d1:14:ef:03:43:64:24:
                    13:2b:08:7d:37:bb:d6:5b:93:ff:47:63:18:1e:e2:
                    1d:ce:9a:f0:f7:93:9b:d6:21:4a:08:c9:90:fd:81:
                    51:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:DA:55:33:3F:0A:72:33:A0:39:FE:3B:4A:D5:F1:7C:2F:35:8A:1A
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/dcfad036-98d6-42ee-bcab-3cbaa1fd15c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1f1c::/46

    Signature Algorithm: sha256WithRSAEncryption
         aa:35:43:f9:ad:83:0f:50:6d:29:72:92:64:80:e5:5c:27:b5:
         59:97:02:c7:57:1a:c4:d1:03:fd:d5:ec:89:33:d1:3a:e6:31:
         66:7e:a3:bd:0d:a6:39:38:f1:3b:dc:86:5d:65:81:99:9e:4d:
         18:e1:70:51:f2:a6:29:9f:41:e8:f6:2b:b7:db:99:f2:18:1c:
         0a:7a:88:d6:24:49:b5:6a:2f:bb:16:85:64:54:95:8f:93:24:
         4c:e0:b8:95:47:95:cf:2e:26:cd:91:2f:3a:80:be:08:e3:aa:
         e5:24:42:87:51:93:d4:20:d0:65:ef:fd:df:02:5c:b3:a9:88:
         5d:42:bf:e8:f9:36:01:5b:40:64:2f:43:c8:fa:7c:16:6d:38:
         e0:d2:d2:89:5b:89:e3:3b:4c:b3:a6:2d:11:66:d4:99:69:04:
         bc:a4:5d:27:05:4f:b7:3e:66:a3:37:e0:ca:da:66:23:bd:ca:
         8f:71:18:ea:ef:6a:ad:e2:e3:88:a7:29:0c:c2:c8:a6:3a:59:
         84:e7:25:0a:f8:94:31:48:2f:de:1b:30:ad:18:e0:d2:bf:fe:
         31:7e:ca:b5:09:ff:98:9e:c4:aa:ea:03:1e:3b:97:c2:bd:df:
         8b:d9:a5:0a:95:fd:d9:ae:2c:40:f8:37:16:99:67:d1:a9:1b:
         7d:e8:99:68
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:38:50 2025 by rpki-client