Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e78fd21e-0177-4417-81cc-88404efbf4e7.roa
File:                     e78fd21e-0177-4417-81cc-88404efbf4e7.roa (raw, json)
Hash identifier:          6t8R5THHjEtWLMD75C6QpVUp8KAi5F+41dY4euIdfcc=
Subject key identifier:   A1:D2:9C:87:9E:FC:83:61:D9:37:04:58:B5:2E:DE:58:18:EB:69:C6
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       4D639849CA4F17D88E6AD957F3BE54DBCA92B9CC
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e78fd21e-0177-4417-81cc-88404efbf4e7.roa
Signing time:             Fri 31 Oct 2025 00:38:31 +0000
ROA not before:           Fri 31 Oct 2025 00:38:31 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3672::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:63:98:49:ca:4f:17:d8:8e:6a:d9:57:f3:be:54:db:ca:92:b9:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 00:38:31 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=9bf6a78e6742185e4c2588be73228cd182ca62e672bb6ef3ee08738a8c80aed9, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:24:1b:2c:19:14:3c:eb:88:50:47:a3:d7:81:
                    f6:e9:dd:df:40:dd:1b:b0:2e:7f:7a:88:92:10:b2:
                    f2:55:45:25:72:06:c2:a1:6f:d3:2f:09:76:3b:da:
                    90:f2:c0:1f:4e:68:bf:91:67:25:c9:56:32:2d:b9:
                    ca:e6:5c:10:06:f0:70:43:60:4d:cd:67:21:20:9d:
                    e6:42:92:fe:f0:e8:ad:e5:5d:e8:99:28:9c:65:0e:
                    df:f7:2a:7b:ba:ab:31:81:6f:e6:ed:f9:1b:79:31:
                    d7:d0:75:a6:f7:d8:4e:fa:db:63:b8:39:97:07:77:
                    6b:aa:35:26:8b:a0:c7:74:78:c7:03:8d:a0:2a:a4:
                    20:21:af:b7:3a:9e:a5:79:23:04:5e:d0:ad:a8:32:
                    8d:56:f2:91:53:68:27:a8:19:3d:0e:22:ae:25:81:
                    60:00:d6:5d:a7:53:b7:35:09:60:d8:0e:20:54:70:
                    0a:61:17:83:5b:d1:7f:bb:8f:64:57:11:52:b5:90:
                    54:f2:40:19:97:ca:17:ed:23:96:4e:3d:87:31:69:
                    9e:fd:61:ec:e8:ea:f9:20:8f:97:11:12:6b:6b:3b:
                    41:2b:12:20:20:fa:89:78:02:1c:0c:8c:45:f8:b1:
                    ab:d1:c1:b7:02:26:41:e4:62:d6:0c:c5:5e:f0:85:
                    e1:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:D2:9C:87:9E:FC:83:61:D9:37:04:58:B5:2E:DE:58:18:EB:69:C6
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e78fd21e-0177-4417-81cc-88404efbf4e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3672::/47

    Signature Algorithm: sha256WithRSAEncryption
         5c:c6:7f:3a:ff:7c:0b:93:56:21:58:bd:81:13:50:7a:3c:cc:
         85:7c:2c:dd:fc:be:8f:a5:57:7b:1f:df:bc:51:e5:bc:08:0c:
         63:0b:22:53:14:36:61:10:1a:22:9d:ed:13:52:92:14:b3:80:
         32:f3:01:2e:e1:66:23:76:a2:8e:19:3e:4b:9c:22:d3:51:ff:
         63:f4:4c:01:3d:54:7e:02:d6:4d:cf:41:51:c9:41:5c:56:f9:
         e1:0c:fd:5b:0e:bd:95:20:cc:52:c7:b1:ed:a7:38:1a:a6:84:
         c5:f1:04:19:14:ee:f3:77:16:e5:27:cb:48:ee:11:fd:ca:02:
         87:8e:a8:b2:f2:28:48:c5:91:b0:dc:75:09:89:59:af:a6:c4:
         e3:6e:79:d5:6a:3e:6f:f7:3a:75:7e:5e:b9:9a:22:58:e9:ef:
         4b:9b:98:27:59:80:9a:6f:9b:58:aa:6a:db:97:81:60:b9:e3:
         00:1d:eb:e5:4f:2c:21:8b:eb:ea:85:ea:7d:a4:23:bf:5c:c5:
         10:79:bd:98:19:75:4a:61:17:55:b2:2d:e1:01:ff:64:ae:fc:
         f9:3c:d9:a9:1b:23:81:0b:d7:75:c8:22:22:88:82:29:83:a1:
         34:32:6a:95:85:83:ce:a6:ab:d1:90:7a:6d:07:a2:d7:60:e3:
         7a:bc:84:47
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:37:47 2025 by rpki-client