Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e6941922-f6f4-402c-b244-1fa09e26de68.roa
File:                     e6941922-f6f4-402c-b244-1fa09e26de68.roa (raw, json)
Hash identifier:          VbkQdU86Y8clpcIFLMHjvSSnIu52TupQFYgzXRZSuWo=
Subject key identifier:   B3:FA:A7:70:05:CA:91:8C:1B:14:A6:CC:68:31:3A:89:F3:5E:5B:A4
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       02609C2DAA6B3E9995DAB790240FCD68E00B8868
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e6941922-f6f4-402c-b244-1fa09e26de68.roa
Signing time:             Fri 31 Oct 2025 02:25:25 +0000
ROA not before:           Fri 31 Oct 2025 02:25:25 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:13b8::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:60:9c:2d:aa:6b:3e:99:95:da:b7:90:24:0f:cd:68:e0:0b:88:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 02:25:25 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=32a1df292dc47360a9cebc2b2dccae33cb029f900fa606c97f8f1b356682c844, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:c7:ab:8b:09:29:0b:75:74:ed:58:96:23:2d:
                    98:64:a8:91:42:85:4f:1c:fb:32:41:23:6e:e8:1e:
                    b5:51:50:6f:97:12:5e:c2:b1:e1:61:5d:c0:42:80:
                    46:01:e2:d2:59:29:d7:d2:d7:53:d1:6a:bd:43:b0:
                    5b:29:3f:a6:43:a4:09:a5:42:5d:d7:86:a5:e0:82:
                    7e:e7:39:2a:03:76:6f:5b:d9:43:e8:05:6b:9e:2c:
                    fe:4f:19:7c:cf:22:26:26:0c:8f:42:7e:a4:dd:53:
                    d4:5d:e5:2d:b8:da:60:3c:79:d5:de:cb:73:b7:dc:
                    e3:c7:75:9e:12:d6:00:bc:b2:91:7a:e5:89:3d:e0:
                    d5:80:09:a7:2b:25:4f:0b:3d:55:82:7f:8d:e1:74:
                    a1:33:2f:63:2a:e1:f5:cb:9e:ea:9d:c1:d0:2f:e5:
                    c9:a6:3f:41:cd:2e:0d:c3:27:21:58:e7:5b:21:d0:
                    e0:33:da:9a:5f:4a:c9:57:2f:21:03:90:fa:a3:87:
                    77:ef:02:87:39:d9:21:22:a3:dd:24:fc:2e:f3:a4:
                    16:53:78:08:02:b3:1b:02:41:d2:2b:23:11:9b:0e:
                    de:e2:e8:a7:a2:87:80:8e:2d:96:12:a8:3a:fc:53:
                    61:3a:21:f0:b9:5b:5b:35:8d:cc:83:88:29:81:aa:
                    b8:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:FA:A7:70:05:CA:91:8C:1B:14:A6:CC:68:31:3A:89:F3:5E:5B:A4
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e6941922-f6f4-402c-b244-1fa09e26de68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:13b8::/46

    Signature Algorithm: sha256WithRSAEncryption
         09:4a:24:9c:91:1c:98:94:6b:1e:3d:85:bf:9f:a8:18:d4:67:
         32:50:bb:e7:be:99:5e:17:63:d9:2a:74:dd:2f:0f:d7:65:ea:
         f3:29:5b:d5:c3:46:c8:7c:bf:c7:e4:24:3c:7a:60:fe:74:d7:
         72:fc:cb:8a:51:57:a5:0a:99:6f:70:b4:f9:ec:7d:27:13:de:
         1e:a2:83:cd:9e:76:d6:4b:19:21:77:1b:2b:2b:6d:f7:8d:14:
         40:e2:15:d8:42:63:c3:94:6d:ec:3f:9a:ca:15:67:ea:e8:d5:
         52:be:a1:23:d2:76:39:5f:f0:4a:ec:3d:82:92:fa:09:52:ab:
         03:dc:c6:26:b8:d2:e8:2f:d2:5e:d2:50:1b:73:a0:d5:f1:24:
         98:0c:60:5b:a4:17:9b:92:8a:2a:9c:64:52:1f:24:e4:71:ce:
         04:5f:00:07:60:53:12:a6:a5:88:3a:0a:88:19:24:25:f1:9c:
         95:34:d0:2e:3b:b8:22:0b:44:c1:f6:76:14:25:28:91:75:ae:
         3d:ea:e9:8e:0d:18:07:5a:96:20:a5:fd:55:cd:d6:4f:ed:6c:
         7f:75:be:87:9c:b2:5c:0c:a0:1a:4c:99:58:15:d5:6d:a6:3b:
         ee:3f:8f:5f:d6:25:10:bd:59:0a:a4:77:6f:9f:5e:9a:a5:2b:
         d1:12:5e:7f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:53:43 2025 by rpki-client