Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e946b75d-1367-4e55-a487-0c38827138f5.roa
File:                     e946b75d-1367-4e55-a487-0c38827138f5.roa (raw, json)
Hash identifier:          iiWVSenNMNizvhlbWkwrZEj1MIJtCBy5xFiH/yimpw0=
Subject key identifier:   7D:8B:90:9C:43:A2:DE:5E:7C:5B:66:E2:FF:02:20:CA:B9:90:04:07
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       3340AD1B5759616DAD812089EA055B12605E6D3A
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e946b75d-1367-4e55-a487-0c38827138f5.roa
Signing time:             Fri 31 Oct 2025 04:11:52 +0000
ROA not before:           Fri 31 Oct 2025 04:11:52 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:356c::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:40:ad:1b:57:59:61:6d:ad:81:20:89:ea:05:5b:12:60:5e:6d:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 04:11:52 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=73fad4562c87711a6ad76e17d580ba04c744ab3cee790c951319cc506ee76e67, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:49:14:bb:e3:42:24:76:82:75:c5:f1:8b:50:
                    ed:4d:b5:d0:13:e9:47:fa:00:49:7b:f1:99:96:79:
                    8d:f6:59:a5:01:34:3d:86:28:75:31:87:cd:d6:c7:
                    30:25:87:ba:b9:6c:d9:be:7f:1f:1e:10:7f:5d:df:
                    d2:d0:48:9c:be:f5:dd:f6:55:45:45:7a:32:26:1f:
                    e8:78:b7:a9:84:75:fe:31:59:b2:8c:f0:ef:67:25:
                    71:9d:74:94:7e:f3:d9:2e:e9:33:fd:02:80:36:29:
                    a0:5f:af:57:58:e3:50:af:6a:bf:5c:ee:77:b2:9c:
                    23:d2:d5:4b:a4:91:a0:98:c8:77:b4:5c:5c:d3:1c:
                    5c:69:fc:fa:d1:20:81:9c:1e:54:4a:42:bd:5a:e3:
                    d1:34:52:e2:0a:a0:29:d4:78:4e:3c:c4:7a:96:e0:
                    4c:8d:ed:bd:20:3d:54:f0:bd:51:1f:52:49:2d:f5:
                    ec:1f:e3:49:80:2a:fd:72:92:8d:95:1d:c3:b3:01:
                    46:f1:da:e2:20:e6:ee:cf:8c:f1:c9:47:cc:4e:97:
                    01:e8:80:f7:9b:3f:94:3a:54:0f:7b:49:d6:e0:46:
                    a2:57:27:f6:4a:fb:cf:e9:6c:bd:fb:2b:26:d4:fb:
                    b2:0c:72:4c:4e:5b:7c:ca:cd:80:ca:0b:75:3f:85:
                    f5:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:8B:90:9C:43:A2:DE:5E:7C:5B:66:E2:FF:02:20:CA:B9:90:04:07
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e946b75d-1367-4e55-a487-0c38827138f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:356c::/46

    Signature Algorithm: sha256WithRSAEncryption
         bb:9f:43:be:f9:9e:f1:c8:0e:e2:7a:bd:28:aa:2e:46:bf:20:
         a4:ab:12:4b:7f:61:f3:82:e0:85:e4:2e:65:88:80:b5:0e:0c:
         51:d1:ae:f2:ea:a3:70:42:78:29:f5:37:ca:57:4c:2f:7b:ac:
         3d:7a:22:bd:fe:e8:7d:6e:7b:78:8e:58:26:49:93:34:7a:90:
         1f:c1:4b:2c:50:67:6e:63:a9:69:ef:8d:d1:5a:92:8d:c6:fb:
         a7:2b:8e:19:72:14:30:36:6d:07:2f:3e:b9:90:2a:c6:e1:71:
         e5:12:a5:67:e1:af:10:da:b9:71:7a:fe:55:9a:43:fc:57:b2:
         9a:65:bb:2a:80:bc:03:e3:bc:35:f8:43:0b:e9:4e:2c:a7:ee:
         c5:52:12:63:1c:4c:72:ac:1d:73:86:68:b9:5e:d4:e2:a8:6d:
         d8:30:d0:90:30:32:9f:dd:11:d8:18:5d:41:df:6a:b0:a6:f1:
         01:73:d0:3d:92:5c:bf:7f:eb:60:d5:25:1d:8a:df:83:80:9a:
         81:d2:ca:42:39:73:76:68:3a:71:d7:3d:1a:64:cc:78:85:f1:
         50:d0:26:b3:c8:88:7a:81:1d:2b:55:0b:7e:3d:48:18:d0:3f:
         92:ae:ce:ba:6f:95:46:09:9c:15:33:74:11:c7:9e:c1:df:ec:
         be:17:cd:6f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:28:12 2025 by rpki-client