Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e49067e3-4a68-4431-83a1-6245a8067c04.roa
File:                     e49067e3-4a68-4431-83a1-6245a8067c04.roa (raw, json)
Hash identifier:          PNSE9BJpuq7t//0E6kex6ZQvS9ph42YADMUK1X7jXW8=
Subject key identifier:   E0:5B:23:5E:DE:A1:0D:00:E5:95:6F:5C:65:F8:F9:03:4E:94:8A:6B
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       04815B4836A4FAE49324595822B9ADB9D52BD52F
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e49067e3-4a68-4431-83a1-6245a8067c04.roa
Signing time:             Fri 31 Oct 2025 06:38:56 +0000
ROA not before:           Fri 31 Oct 2025 06:38:56 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1bd0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:81:5b:48:36:a4:fa:e4:93:24:59:58:22:b9:ad:b9:d5:2b:d5:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 06:38:56 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=60560bedfae81484679d5031dfad1c2ee764ff60a5308f578bc6173b584f3ef6, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:93:c7:ac:24:09:cf:3b:87:42:90:08:af:35:
                    e1:d2:6a:ac:10:f7:a2:62:b4:76:38:ce:7d:d3:64:
                    67:79:b1:1b:31:62:29:f3:cf:1b:6a:b0:10:91:02:
                    60:41:3d:51:b5:67:4e:21:a1:07:e5:61:26:b5:2d:
                    a1:d5:67:37:f4:aa:7d:a1:76:18:c9:af:66:09:50:
                    73:a3:fd:80:4f:29:ef:3c:fd:b7:28:08:2f:af:77:
                    38:72:fb:d6:4a:be:b9:ab:b0:45:54:ac:a4:88:53:
                    78:b7:61:b4:de:1d:29:c5:34:a8:53:21:86:b2:16:
                    67:12:d4:c1:b8:9d:a3:77:1e:72:c4:1f:d4:3e:dd:
                    16:49:38:e5:86:e1:09:46:87:d7:64:0e:10:3a:68:
                    1a:2f:3a:cc:af:9a:fd:d3:ae:84:26:c5:7c:88:09:
                    5f:29:c0:82:bf:ee:4c:b2:29:ff:da:d6:09:a4:cd:
                    8a:84:9d:55:4b:4b:f3:41:1b:e3:da:77:7c:ec:08:
                    ac:32:23:fa:01:3b:8a:34:e2:68:ee:80:19:16:8b:
                    ed:55:2c:a4:d2:66:37:a2:69:e6:6e:02:5b:85:3c:
                    23:ff:28:a9:79:83:49:a1:69:17:1d:c3:82:b8:8f:
                    81:f4:41:54:60:17:db:44:9b:91:60:19:47:f8:33:
                    da:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:5B:23:5E:DE:A1:0D:00:E5:95:6F:5C:65:F8:F9:03:4E:94:8A:6B
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e49067e3-4a68-4431-83a1-6245a8067c04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1bd0::/44

    Signature Algorithm: sha256WithRSAEncryption
         6c:64:ce:a2:ca:36:0d:96:3d:c0:7e:90:b3:ae:f1:60:65:3a:
         d7:62:7c:53:19:23:f8:91:26:c4:2a:38:34:73:02:1e:f8:49:
         3a:e6:3c:78:c1:89:5b:25:06:ad:b4:5b:88:5b:0d:e8:9b:13:
         ea:a6:f1:bb:47:0a:41:16:0a:61:b1:f7:56:5c:55:db:77:13:
         67:de:1d:7c:d0:7c:61:87:8c:ec:5e:de:1f:2b:35:6a:ed:66:
         f6:ac:20:71:65:9e:08:25:e0:36:94:6d:b1:31:80:57:b8:91:
         92:f6:db:c1:c2:59:0b:15:31:4f:b4:5e:e0:19:d3:aa:9c:e6:
         7b:6f:1e:70:89:05:b4:44:6b:39:bf:4c:c1:28:e9:13:8a:40:
         78:96:c5:00:70:8e:85:6f:42:52:59:63:26:3d:8c:5b:44:2f:
         d5:21:cc:11:a8:e9:38:4e:fc:e0:4d:98:1f:77:ff:08:a0:61:
         8b:40:51:65:89:91:2e:a7:fe:18:51:c1:d4:dc:80:26:e7:82:
         9d:d8:6a:6c:50:78:81:43:0d:d9:99:b7:77:d9:eb:64:94:57:
         7f:46:7c:8e:36:4d:0d:7e:0e:45:83:25:87:25:d3:4a:0f:34:
         6f:79:d1:73:15:be:f8:50:36:a6:75:71:18:6c:f6:fe:69:a9:
         fa:a7:f7:b8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 12:30:42 2025 by rpki-client