Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/dd51efe1-53c3-44eb-b6e1-2347d3158b8c.roa
File:                     dd51efe1-53c3-44eb-b6e1-2347d3158b8c.roa (raw, json)
Hash identifier:          pZ8b1YPVJQ0WA0YOeHTjGPVZEcH6PJ3blypIDqTri6k=
Subject key identifier:   D0:1D:15:0A:53:E9:6E:59:5A:A4:43:5C:03:25:EC:E7:70:B9:D9:DB
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       64B315015B5CA79A49B7F5068C3E4F45B4EFF3FD
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/dd51efe1-53c3-44eb-b6e1-2347d3158b8c.roa
Signing time:             Fri 31 Oct 2025 03:10:07 +0000
ROA not before:           Fri 31 Oct 2025 03:10:07 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1d10::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:b3:15:01:5b:5c:a7:9a:49:b7:f5:06:8c:3e:4f:45:b4:ef:f3:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 03:10:07 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=195654ab9a28db42f5e1ebccdb580dd068cc43757b1717d2a2e0e415efb65ed3, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:04:29:55:96:88:13:3a:76:c7:e2:68:b6:6c:
                    72:c7:69:7e:57:09:e5:f7:54:e8:ca:16:10:2d:0c:
                    46:70:ed:c5:dd:f9:5c:ed:f4:b1:75:dd:af:08:c1:
                    a9:60:ae:98:f8:8a:de:0d:ce:91:3b:92:0b:6f:d4:
                    75:49:34:39:0b:a1:5e:eb:03:c7:82:de:68:16:b9:
                    51:99:86:bb:c2:b0:eb:a5:eb:14:f8:3a:78:0a:a2:
                    c8:9a:a9:2c:6e:98:ac:59:4c:5b:02:0f:bf:79:93:
                    f5:7f:cb:4e:43:64:82:dc:d8:be:36:67:2d:fe:4c:
                    91:9f:26:0f:c7:d6:a0:fd:78:64:eb:a7:98:4d:e1:
                    4a:b2:70:18:e8:9d:02:9f:d0:fa:3a:f7:3e:ea:45:
                    50:5c:17:ca:be:23:96:6e:bb:ca:5f:88:44:fe:15:
                    57:b2:98:c0:a2:79:06:9f:ec:0e:b6:ce:6c:11:d5:
                    ec:6c:50:93:bb:2c:b0:69:cb:a6:8d:38:ab:f9:08:
                    7c:46:a5:ef:cd:16:ab:6e:4a:c2:4f:9e:eb:75:45:
                    53:97:a1:aa:cf:49:b2:e9:20:c9:9b:e7:5c:73:2f:
                    78:94:32:75:13:1e:e0:ef:c2:cc:af:3d:fb:8c:80:
                    e4:a9:ce:13:6f:5e:f6:f5:c8:77:60:60:15:b1:a5:
                    76:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:1D:15:0A:53:E9:6E:59:5A:A4:43:5C:03:25:EC:E7:70:B9:D9:DB
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/dd51efe1-53c3-44eb-b6e1-2347d3158b8c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1d10::/46

    Signature Algorithm: sha256WithRSAEncryption
         c2:25:2d:95:c8:9b:df:49:ac:9d:5a:63:8c:64:ff:9c:08:96:
         74:1d:8c:cd:8e:8e:bd:d8:bb:c6:38:12:08:db:76:de:bf:d5:
         c3:29:fb:fa:68:9a:a0:e1:3e:0a:32:71:9b:7e:ff:3b:d2:f5:
         ec:20:2d:3e:f9:52:3c:95:d5:c3:bd:6c:1e:e7:cd:6e:9b:4a:
         bb:24:52:ca:c4:fe:5e:4b:26:1b:60:4f:33:59:b0:40:b5:97:
         ff:e0:4f:7b:bf:18:b2:7d:00:34:c8:ae:ad:8f:a3:b9:30:73:
         68:0a:af:f4:b8:01:40:52:10:a9:a5:a5:f8:ca:52:39:05:d3:
         94:bc:df:1c:7a:e3:b0:36:a7:39:9a:2f:87:55:85:29:c1:c7:
         b6:8f:1d:3e:ca:cd:04:cf:a9:e3:9c:0a:88:23:5a:69:80:f8:
         38:37:9e:21:09:69:3a:b6:f0:40:38:8e:a7:15:37:45:62:ce:
         86:52:33:27:69:81:85:de:41:0a:c8:94:b9:3e:85:59:0d:e6:
         78:5b:d7:ab:9c:5e:5c:53:45:41:35:66:1a:b1:5f:2e:40:40:
         67:13:14:14:96:8d:14:93:9e:d7:ce:c0:7c:b4:41:2a:f6:22:
         6f:ea:67:74:1b:ef:76:1f:d4:8a:72:2c:68:2a:1f:35:7c:d4:
         6c:87:fa:90
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:45:57 2025 by rpki-client