Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e1273019-ab81-4bc9-8551-1b48add4aa74.roa
File:                     e1273019-ab81-4bc9-8551-1b48add4aa74.roa (raw, json)
Hash identifier:          SNHs5V+zC04mSQKi2JZfKDUmngJdcJdHynNnygz1Hrs=
Subject key identifier:   70:A9:D7:C5:96:29:2A:36:36:D4:0A:B5:D3:14:3D:FC:FC:E5:52:3F
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       13BDF81ECCC861EDA670595407171C8465D1E349
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e1273019-ab81-4bc9-8551-1b48add4aa74.roa
Signing time:             Fri 31 Oct 2025 07:44:35 +0000
ROA not before:           Fri 31 Oct 2025 07:44:35 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2b80::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:bd:f8:1e:cc:c8:61:ed:a6:70:59:54:07:17:1c:84:65:d1:e3:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 07:44:35 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=e2f08ebe010a7044cb97fd15a7740822aa205992b4a7a8d27ea3dbc48a114fa8, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:fa:fa:2d:01:7a:d6:73:16:ef:7c:72:c8:39:
                    7c:86:90:6e:2e:8a:6a:41:52:42:4e:97:80:3c:bd:
                    67:f3:e8:ee:f7:cc:b6:f4:33:2a:3d:28:c4:3c:20:
                    0a:57:a5:3b:dc:a3:9f:b3:25:ba:d3:06:d2:e1:ef:
                    54:1c:f5:c9:e5:bd:0f:21:36:aa:c0:41:15:2b:51:
                    c6:0f:64:f2:8f:a9:87:c6:b5:14:39:59:00:e1:64:
                    e4:60:4a:05:6a:8f:88:59:f4:a1:d3:88:81:9e:a1:
                    d0:82:97:33:fb:68:08:cd:f8:14:1d:b2:bc:e9:fb:
                    64:87:45:46:6f:5a:7e:a7:ec:83:b6:06:7c:a9:3c:
                    96:68:f4:fd:1e:f2:81:1f:54:72:c7:08:d4:e1:5e:
                    da:90:93:02:c3:c7:ba:97:f0:a0:b7:97:54:99:a6:
                    c1:8f:fd:a6:8e:65:7e:cb:b4:ce:f3:6d:ae:61:35:
                    e7:3b:12:9d:bc:a1:e0:d0:b8:2c:88:40:1a:30:62:
                    1d:6b:c9:25:55:45:d3:14:b9:d5:b5:55:52:01:a8:
                    8f:57:90:4f:d1:23:15:7a:87:2c:12:44:cf:20:87:
                    cb:e8:be:c8:f9:52:70:0d:00:d7:7d:5b:4c:a8:43:
                    9a:5d:da:46:a7:34:f2:ab:2a:2c:ba:3b:ff:01:5c:
                    05:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:A9:D7:C5:96:29:2A:36:36:D4:0A:B5:D3:14:3D:FC:FC:E5:52:3F
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e1273019-ab81-4bc9-8551-1b48add4aa74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2b80::/41

    Signature Algorithm: sha256WithRSAEncryption
         53:5f:32:9b:c7:38:5d:29:9e:21:0c:32:b1:de:36:5b:66:b3:
         dd:3d:92:36:c6:f9:8b:6b:58:21:29:f9:ee:94:cf:4a:5f:85:
         29:f2:4c:29:11:63:a7:20:f6:d2:59:ec:c5:8b:c8:b5:d7:a5:
         0c:ef:b1:d0:cc:72:f7:0d:5c:47:ed:f1:67:c1:63:3b:c1:5f:
         03:99:d0:44:2c:5e:63:1a:a8:93:fa:a9:96:ab:d2:74:db:c1:
         0e:07:de:bd:98:56:9b:dc:b7:77:1f:fc:b2:3c:28:93:3c:f0:
         c2:46:a7:19:f4:c0:95:13:98:fa:24:47:bb:54:88:31:a2:df:
         f1:68:da:3e:08:d8:87:92:89:7e:16:69:2c:ca:76:27:66:38:
         43:b4:75:b0:91:55:dc:44:d3:e5:6a:a2:99:e8:5e:e0:68:55:
         2e:f4:24:14:61:de:a4:77:e7:1a:a0:73:55:62:69:5a:6b:07:
         e7:02:e5:5e:d4:f3:ac:25:84:93:e1:f5:f6:6b:f0:b4:38:bc:
         d0:63:e9:2c:dd:a4:6b:9c:be:c8:13:86:d0:27:44:57:73:d6:
         de:94:7c:c5:3d:57:c4:71:19:bc:eb:2c:76:2b:47:60:70:11:
         a8:23:87:ba:83:4f:f0:61:be:5d:ee:ed:4a:06:92:97:85:ec:
         1e:78:4f:a6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:54:01 2025 by rpki-client