Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e4ed6fc3-6a72-4f36-9aed-89a341d079a2.roa
File:                     e4ed6fc3-6a72-4f36-9aed-89a341d079a2.roa (raw, json)
Hash identifier:          uJsjbHtvXT2X+VJHbG6/yaTCTpZvOZ8rd2jIR9zbf48=
Subject key identifier:   0B:20:67:36:CE:EE:E0:66:69:63:A4:35:DF:37:71:F6:D0:6C:68:09
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       408083440FFFEEC6787BD5FDF683955602EFB030
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e4ed6fc3-6a72-4f36-9aed-89a341d079a2.roa
Signing time:             Fri 31 Oct 2025 07:13:15 +0000
ROA not before:           Fri 31 Oct 2025 07:13:15 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1fa0::/43 maxlen: 43
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:80:83:44:0f:ff:ee:c6:78:7b:d5:fd:f6:83:95:56:02:ef:b0:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 07:13:15 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=6f5d69f106fb8688e688e6d3a9fc46d7900ab946c7d2074dc1268b0e4f826d59, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:34:da:49:fb:b3:b5:54:49:b8:f3:a2:35:4c:
                    67:4c:22:64:f2:d5:4f:31:e7:56:78:6c:40:3a:92:
                    3b:88:e2:6c:11:af:03:30:64:c8:dc:42:a8:64:6c:
                    22:83:50:f0:a1:1e:c0:a4:d9:45:18:84:50:df:4d:
                    38:5c:9b:82:93:7c:36:57:e7:88:79:23:23:12:18:
                    d5:83:94:8e:04:f2:b3:cc:b7:8f:35:61:72:8f:cf:
                    48:fc:84:a5:08:27:94:07:0e:e6:7c:15:6d:ad:b7:
                    bd:9b:8b:19:90:d4:ef:5b:2e:8a:64:1c:b8:b8:fb:
                    55:0a:3a:2a:c3:bf:53:f0:38:92:97:c4:3e:eb:a5:
                    5b:df:5e:8e:9b:93:9b:bd:62:1e:5a:84:eb:42:a1:
                    28:5a:af:bb:4e:7b:02:a9:b2:6d:9c:9b:5e:b3:c6:
                    d7:0e:6a:1f:bf:a0:32:f6:7d:d4:bb:96:37:e2:e3:
                    d2:32:a8:fc:ab:a1:2e:d6:2d:7f:29:92:fd:eb:4b:
                    d3:40:45:a0:d2:80:12:38:f8:47:d0:f1:4e:95:54:
                    d0:74:1c:22:4d:c5:65:3b:6e:d6:c6:28:8a:af:21:
                    aa:fb:b4:a3:6b:72:d7:f6:7d:2e:da:f0:e6:46:9f:
                    ee:ae:bd:6d:19:8c:28:1d:49:ea:3d:49:0e:33:bb:
                    95:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:20:67:36:CE:EE:E0:66:69:63:A4:35:DF:37:71:F6:D0:6C:68:09
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e4ed6fc3-6a72-4f36-9aed-89a341d079a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1fa0::/43

    Signature Algorithm: sha256WithRSAEncryption
         c1:83:40:3d:1b:9b:1d:66:cf:ba:34:d3:d5:d3:b0:dd:35:a7:
         e5:4e:0a:f3:05:b1:91:05:04:76:63:4e:29:df:86:2a:af:04:
         74:0e:4e:81:e0:21:9f:cb:95:02:5c:19:d9:33:52:27:6a:b8:
         84:f7:8b:cf:f4:fe:13:80:b2:89:fa:28:82:d2:07:7e:eb:ef:
         38:dd:14:55:c4:b3:3e:a1:70:10:31:f1:aa:b3:a6:cb:68:66:
         5c:f7:a0:ed:94:17:7c:90:6b:4c:51:e5:98:d1:26:cd:f3:6d:
         f7:a9:cc:14:9d:85:3f:73:17:52:17:d0:21:a8:2b:8b:5a:1f:
         f9:18:e9:23:2b:cc:27:36:10:b4:25:0a:ec:8b:89:7c:df:c8:
         6d:bd:f6:1e:47:d9:a4:b2:86:bd:ca:8b:62:f2:5d:62:a0:94:
         e5:96:ec:50:f9:65:eb:a1:30:7a:87:b6:ed:91:cd:b1:c7:9a:
         f2:42:8e:b7:9c:d9:3c:50:4c:02:0e:1b:f4:46:af:8b:3f:f8:
         67:8a:de:c7:5a:22:05:90:f1:d5:3c:2f:f0:6f:f6:55:de:f5:
         ec:49:41:fb:ae:c8:fc:8c:20:fd:73:b3:c4:ef:f7:ff:25:bd:
         65:26:92:7d:9b:93:ec:23:4f:df:52:bf:1f:36:65:42:5f:10:
         e9:4d:99:70
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:46:13 2025 by rpki-client