Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/eaedc005-13cc-4230-8ee1-28a56136b56f.roa
File:                     eaedc005-13cc-4230-8ee1-28a56136b56f.roa (raw, json)
Hash identifier:          N0yEspZPmJOdnP7AXkJZ8Y24zxkGAVBSL9026HCXp9I=
Subject key identifier:   4F:8E:25:2E:6C:2D:17:CB:F0:76:22:C0:9E:D1:18:6D:CB:38:55:03
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       609F4BAA9B96335BBF221368526770FBB3A44A9B
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/eaedc005-13cc-4230-8ee1-28a56136b56f.roa
Signing time:             Fri 31 Oct 2025 07:51:58 +0000
ROA not before:           Fri 31 Oct 2025 07:51:58 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3300::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:9f:4b:aa:9b:96:33:5b:bf:22:13:68:52:67:70:fb:b3:a4:4a:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 07:51:58 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=1dc0599e233da5def26085821bfdf50a0c4080cb7cc2d5237c6911298592c80f, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:19:08:c3:0b:04:db:8b:92:de:31:fd:27:1b:
                    c2:d9:47:d5:2b:b8:c7:ab:4b:4e:fc:0d:a5:5d:24:
                    f5:fc:ce:d3:67:6b:78:d4:63:87:ea:f7:3f:dc:2e:
                    fc:bb:59:be:85:73:b9:f4:44:1c:9f:0e:f0:d4:3a:
                    0f:31:26:cc:27:40:6b:c3:86:1e:7e:57:93:e0:c0:
                    dd:33:bb:c2:7c:e1:01:4e:f0:09:50:30:5a:7b:f4:
                    5b:90:5f:d5:50:29:56:b3:f4:cc:49:ce:fc:55:4c:
                    f8:00:a5:2e:da:29:be:61:11:fe:06:da:9a:26:ff:
                    fe:ba:32:64:d6:6f:41:60:1a:b7:f0:39:9c:ba:74:
                    87:ff:d6:82:8d:0c:3e:57:b3:a4:80:c9:b6:3c:a8:
                    1b:a2:f0:e5:eb:42:6e:61:fc:89:2e:46:22:52:ad:
                    dd:5e:27:db:f4:e7:e5:d1:89:07:a0:5e:b5:9c:7c:
                    ca:a7:7d:ce:5b:91:2d:76:79:93:80:3c:a2:33:c7:
                    58:52:c7:ae:14:cf:59:60:e0:f9:6b:7d:4d:60:0d:
                    8d:3e:63:68:c2:19:d1:a3:10:3b:5e:92:3b:de:8f:
                    a3:fe:59:17:f6:c3:fd:be:ab:65:59:25:f6:4e:ed:
                    d7:1f:85:de:10:29:28:4b:85:e1:b2:6e:08:d9:3e:
                    62:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:8E:25:2E:6C:2D:17:CB:F0:76:22:C0:9E:D1:18:6D:CB:38:55:03
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/eaedc005-13cc-4230-8ee1-28a56136b56f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3300::/41

    Signature Algorithm: sha256WithRSAEncryption
         6e:1d:4c:7e:2d:ea:32:89:17:34:d2:6d:f8:37:b0:58:4d:01:
         80:18:67:4e:4e:70:84:e4:5f:bb:8d:00:d8:76:64:c7:b5:58:
         87:bd:57:e8:e8:91:19:2b:4d:a7:5c:e5:b8:16:24:11:fc:87:
         79:3e:a3:63:d2:28:9e:3f:99:aa:14:bf:1d:7a:29:a5:e7:a3:
         af:d5:10:d9:5f:3c:f8:0c:2e:eb:ef:35:32:76:4b:8a:fb:8e:
         65:28:44:91:4c:1b:5f:e9:e1:39:5a:8e:9b:6e:1c:cb:3f:eb:
         9c:d3:6e:97:82:b0:34:e0:97:a0:9e:19:d3:83:37:59:9c:25:
         b3:62:9e:0d:2c:e6:5d:d0:f4:8b:74:e8:24:03:49:2e:f8:fe:
         52:b1:91:63:a3:02:74:8f:a4:45:2d:e4:97:b6:5d:1e:cf:d3:
         dd:06:6c:15:1c:8f:7c:73:b0:c2:ac:94:e5:13:47:e5:2e:de:
         d3:45:c0:9e:43:ae:ae:43:6e:b2:f5:65:a3:a5:9e:17:88:52:
         98:1d:cc:a5:05:44:1c:c3:aa:46:b5:00:14:25:fb:aa:5f:d4:
         e0:9e:2e:3f:a5:2f:a9:3d:f3:86:8a:90:f8:f3:90:06:3a:42:
         3d:48:7e:0e:50:af:ad:f1:16:4c:64:c1:a1:ce:d2:bd:29:2c:
         a1:a1:4e:cc
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:27:19 2025 by rpki-client