Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e476fead-2e8d-4b52-ab90-914ccbfdb162.roa
File:                     e476fead-2e8d-4b52-ab90-914ccbfdb162.roa (raw, json)
Hash identifier:          YKQ1elKAx4j7x/v8PmU4SNhE0I2VnfBcbt9AM6wtz7I=
Subject key identifier:   7D:F1:FD:62:B6:4D:4C:24:C2:60:1C:16:84:BE:B9:A3:1C:DC:5D:03
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       37AF1F856488481E9C45255ACEDEF3EA847BC90D
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e476fead-2e8d-4b52-ab90-914ccbfdb162.roa
Signing time:             Thu 30 Oct 2025 22:38:37 +0000
ROA not before:           Thu 30 Oct 2025 22:38:37 +0000
ROA not after:            Thu 04 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1f10::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:af:1f:85:64:88:48:1e:9c:45:25:5a:ce:de:f3:ea:84:7b:c9:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 30 22:38:37 2025 GMT
            Not After : Dec  4 23:59:59 2025 GMT
        Subject: serialNumber=6c00286e8da46e46e67bdf946d86734ef05793f67db2a8a9e47a140593817c8b, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:ed:af:e6:ad:02:77:1d:f6:f3:88:cb:85:90:
                    2a:5d:e9:c4:9b:ae:1b:a0:d2:d4:a6:ce:cd:66:6d:
                    61:75:dc:ac:8e:67:db:56:69:4d:60:56:99:c2:20:
                    83:84:4a:e5:a4:88:10:04:e0:2a:97:85:28:03:a8:
                    b8:c0:43:93:1a:81:22:33:d5:65:a0:c2:b9:2f:3d:
                    11:35:0e:64:77:51:11:2b:5e:50:97:54:93:52:d4:
                    a9:7a:db:38:15:5d:e4:07:98:1e:8a:02:fa:fc:2b:
                    d7:02:35:20:f9:a2:86:ea:15:cc:77:71:14:a8:4c:
                    5c:70:aa:14:1d:58:2d:df:95:54:8d:61:33:e7:41:
                    b5:f7:8f:3f:a9:3f:f7:25:94:08:ba:80:26:79:30:
                    c2:69:d1:1e:8e:66:96:c5:dc:7c:42:90:f4:8d:2f:
                    cb:66:c0:78:48:a8:31:38:51:0b:ad:0c:5d:53:42:
                    32:70:82:f3:aa:8c:a0:93:85:a8:f5:f7:de:4f:bc:
                    bd:79:16:82:fe:4d:46:63:89:bd:e9:39:a1:22:cc:
                    03:fd:9e:4d:fc:76:41:42:d0:c3:d7:7f:20:f8:3c:
                    4b:c6:e4:73:99:dd:34:9f:c2:fa:23:d2:2b:09:23:
                    83:16:a8:e4:2d:97:72:03:2c:71:09:1c:42:7a:45:
                    27:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:F1:FD:62:B6:4D:4C:24:C2:60:1C:16:84:BE:B9:A3:1C:DC:5D:03
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e476fead-2e8d-4b52-ab90-914ccbfdb162.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1f10::/47

    Signature Algorithm: sha256WithRSAEncryption
         81:62:e1:26:95:65:e6:2b:d7:f3:f6:96:45:49:86:89:36:86:
         c4:65:c7:5e:8b:91:b5:3b:27:32:08:ff:5a:8f:37:4a:5b:33:
         e1:7b:53:48:05:6c:8b:a8:11:30:39:d1:f6:a1:3f:14:a0:9b:
         ad:29:96:11:15:74:55:66:4b:9e:9e:2c:8d:1c:29:50:49:03:
         6a:5b:c4:a1:f4:30:cc:35:ca:13:46:d6:08:93:5e:4a:23:5a:
         aa:6d:02:f8:e2:73:da:c8:1d:a5:f0:5e:11:81:7c:ae:be:41:
         2b:a9:e1:98:db:39:dd:2e:35:a7:e7:09:bf:0e:1c:85:0d:fd:
         51:43:60:7f:96:9d:87:a1:fa:a9:56:bc:e5:a1:c6:ff:a0:af:
         79:de:7f:83:b1:f1:dd:05:51:13:6e:b9:b6:7c:c7:54:c1:57:
         88:ac:84:5b:c1:1c:91:dc:24:18:bc:c5:d4:e5:2c:13:26:60:
         ff:01:51:9c:86:85:78:a1:ca:39:ba:03:28:37:56:06:c6:63:
         0e:f0:0c:bd:81:3d:90:98:0a:da:40:e9:20:e7:a7:dc:ec:83:
         3c:93:5c:b9:56:d7:da:35:5b:79:76:a9:43:65:cd:ad:d7:a3:
         ec:2c:2f:5a:4c:b5:83:9d:ac:63:80:ea:18:6f:53:e3:aa:52:
         16:bc:0d:2a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:41:22 2025 by rpki-client