Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/dd1c5267-8f66-4819-8e79-0e7740bdf5d4.roa
File:                     dd1c5267-8f66-4819-8e79-0e7740bdf5d4.roa (raw, json)
Hash identifier:          s4xocyPWku8yXEN9D8/Q4osP3TiObPigLN8HQ47elIw=
Subject key identifier:   D9:67:5F:17:3A:74:08:BC:74:F9:A9:04:9A:06:46:AB:AF:0B:B8:C1
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       1F410A541FF9670A99AD95D007129213D691C8FE
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/dd1c5267-8f66-4819-8e79-0e7740bdf5d4.roa
Signing time:             Fri 31 Oct 2025 01:53:26 +0000
ROA not before:           Fri 31 Oct 2025 01:53:26 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3e26::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:41:0a:54:1f:f9:67:0a:99:ad:95:d0:07:12:92:13:d6:91:c8:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 01:53:26 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=329998af1d352a2bedab90837e03b3b732465a86679f5fdd335a8436d5217537, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:14:67:a1:be:df:af:5c:42:3d:35:1f:be:71:
                    09:c0:a5:e7:d2:da:b3:bc:fc:b0:0f:bd:13:6f:a1:
                    bb:b7:de:26:4f:98:dd:4f:84:cb:d5:b2:c9:b2:35:
                    76:e6:c6:86:0e:24:7f:b7:fa:5b:c1:b4:5c:09:80:
                    16:b3:56:0d:61:37:f0:a2:7b:dc:0d:0b:83:d4:fb:
                    6b:08:c8:23:b2:6e:1d:63:0a:39:d7:ad:1a:cf:ae:
                    c7:32:ed:25:00:50:48:3d:71:8e:18:d7:c9:9b:92:
                    76:6b:08:18:81:58:fe:32:9c:17:36:26:83:aa:7e:
                    53:6c:e4:65:4e:ed:dd:09:73:42:1a:7c:e3:8e:bc:
                    ea:29:d4:94:88:90:69:21:56:3e:43:b6:47:cb:a3:
                    78:6e:48:a3:7b:7c:19:77:47:65:75:42:db:0c:5e:
                    d3:6d:4b:46:45:a0:d1:ff:bb:8a:0b:b2:96:f4:92:
                    40:f5:6c:88:f4:6b:8c:6a:d8:cb:44:26:9e:1c:e7:
                    d6:51:44:41:97:28:11:3b:cc:8e:a1:ce:2c:dd:1a:
                    da:84:76:84:90:c8:23:7a:cc:59:67:0d:f4:c3:54:
                    80:d2:68:41:af:51:0b:8a:d4:ba:c2:d5:b8:52:f2:
                    b1:a2:42:16:fa:ac:dd:92:7a:be:18:14:43:a9:51:
                    a0:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:67:5F:17:3A:74:08:BC:74:F9:A9:04:9A:06:46:AB:AF:0B:B8:C1
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/dd1c5267-8f66-4819-8e79-0e7740bdf5d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3e26::/47

    Signature Algorithm: sha256WithRSAEncryption
         17:d0:61:8b:05:64:7c:e4:b2:e7:19:18:ca:9b:ea:ca:03:bc:
         c7:b4:82:f6:52:cc:f0:ee:9e:d9:2e:50:8d:9f:6d:1b:7c:a2:
         eb:05:70:c2:d6:12:12:d1:87:f1:ca:e3:52:0e:fa:70:9e:b5:
         92:73:54:8e:2c:75:e0:26:30:8e:af:82:32:26:54:5c:4a:95:
         f4:75:fd:85:07:b3:e2:ea:04:da:f8:21:4c:a5:67:75:1e:e2:
         d2:64:5e:f1:44:ca:6f:40:84:e9:84:14:0f:9b:81:99:4a:ec:
         d4:69:af:26:28:0f:c3:32:fd:c5:cc:66:25:70:3b:61:c3:7b:
         b0:47:7a:cf:f3:b3:06:1f:5c:7a:ee:91:1a:c1:e0:9a:e3:99:
         48:51:47:ce:83:80:54:d0:3a:bf:26:3c:24:b4:c0:79:63:bc:
         96:bf:af:bb:f1:ac:1c:58:99:c9:0e:54:12:47:8b:0e:20:9e:
         ad:d1:56:82:ed:8e:d7:e8:19:8a:fe:6c:25:c5:73:15:7b:46:
         80:ac:63:21:62:f6:01:ee:3f:d9:1a:ca:20:ad:c0:9d:a8:bc:
         d6:d0:b2:fe:96:93:92:f0:02:1b:3f:3a:85:3f:ca:a6:95:57:
         78:3f:7e:f6:8e:4b:8a:92:9d:96:f6:0a:c2:bb:08:9d:cd:75:
         b7:11:8b:ea
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:45:39 2025 by rpki-client