Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e37a5d02-080a-483f-9cf9-26f08bfcef27.roa
File:                     e37a5d02-080a-483f-9cf9-26f08bfcef27.roa (raw, json)
Hash identifier:          xnhnglCBHvCnM0oa+PIYApHEp2mJrk5tPqZHYZWkRqU=
Subject key identifier:   72:A5:07:9C:44:2A:EB:8E:A3:08:04:E0:62:78:AC:7C:BC:1F:A7:72
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       049470B0A13F8B43FF25E891EB9E7AC5A4727669
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e37a5d02-080a-483f-9cf9-26f08bfcef27.roa
Signing time:             Fri 31 Oct 2025 00:24:58 +0000
ROA not before:           Fri 31 Oct 2025 00:24:58 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:351a::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:94:70:b0:a1:3f:8b:43:ff:25:e8:91:eb:9e:7a:c5:a4:72:76:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 00:24:58 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=c272087e9bb3ca4aa5740bfc996914db4ffae731394148f44642fd20f47e89f6, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f8:d4:73:ee:6c:d6:de:9a:9b:76:23:cc:41:
                    94:9d:4e:06:62:8e:72:9f:27:08:68:10:99:0e:f8:
                    bf:65:ad:d3:8d:72:4f:fe:11:fa:f0:ef:8e:9d:db:
                    32:56:6b:e4:e9:64:c0:ba:ae:b3:15:91:d4:a3:f2:
                    45:69:37:ab:23:e3:dc:a6:03:69:ed:36:93:2b:96:
                    56:99:9b:59:3c:86:1f:b7:9c:49:ef:fb:30:dc:8b:
                    48:c2:bd:58:4c:d6:89:b0:e9:cc:56:f1:3d:a4:28:
                    71:b2:00:24:8f:61:d6:6f:84:42:7b:cd:aa:f7:99:
                    ce:a2:50:02:a8:9d:1a:04:79:98:64:73:89:32:16:
                    20:ac:8e:24:20:cf:26:fa:be:51:c4:ee:db:a4:24:
                    20:4b:97:31:af:01:37:de:81:74:7c:c8:c1:d8:d2:
                    6b:8d:03:a3:e7:be:7b:a8:64:92:4d:a1:92:44:69:
                    85:2a:1e:7b:e3:db:74:2c:b6:a7:6a:89:49:f5:f2:
                    df:06:82:64:49:a1:d6:c1:ac:2d:c5:4e:5a:2f:74:
                    58:45:c4:10:af:8e:33:f6:5a:81:e2:bf:2d:66:4e:
                    09:26:78:85:14:5e:98:ed:4e:aa:a7:93:fc:94:fa:
                    5c:67:2d:18:32:11:ca:af:5a:6d:b0:f3:79:91:16:
                    26:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:A5:07:9C:44:2A:EB:8E:A3:08:04:E0:62:78:AC:7C:BC:1F:A7:72
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e37a5d02-080a-483f-9cf9-26f08bfcef27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:351a::/47

    Signature Algorithm: sha256WithRSAEncryption
         c2:0e:a2:33:5a:70:59:07:3b:bf:0d:e3:25:ff:26:ce:35:a2:
         c0:d1:c9:0d:be:13:45:1d:88:6c:4a:c9:05:a2:fe:97:f7:c9:
         e7:7c:1f:1d:b4:23:fa:29:95:78:94:8b:cd:9e:11:0d:79:3b:
         99:29:7e:2d:a1:1c:61:d2:68:d4:eb:c7:49:0d:8e:41:49:50:
         7b:8a:5a:23:b5:62:59:2a:08:c0:1f:75:f9:af:51:ad:cd:fc:
         c5:78:d2:fa:f2:09:10:1e:68:b4:ee:cf:88:63:1e:05:c3:2a:
         58:43:10:bb:81:6b:ca:05:2d:9d:bb:42:08:e7:7d:e3:77:f8:
         1f:14:c4:34:4c:46:6e:01:49:fc:16:0c:68:5f:66:96:ed:88:
         fd:c6:e7:50:ed:d6:fa:cd:b0:c6:02:0f:a7:62:49:12:f6:e1:
         9b:a5:17:43:26:2e:e2:2d:f2:da:18:dd:07:8d:34:d3:78:02:
         4d:2a:1d:a6:53:48:a0:ea:69:1c:ee:0b:1b:92:b5:30:86:89:
         e5:c9:6c:c0:02:55:58:97:d6:4b:94:7c:c2:9c:6a:0c:04:b8:
         23:01:af:7a:1d:9a:11:d0:01:72:93:11:f1:78:0c:e0:e1:a6:
         0f:5e:ba:10:cb:03:42:61:f7:b0:d2:9b:ed:b6:aa:55:4f:f6:
         6a:63:13:f7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:38:22 2025 by rpki-client