Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/eb0e579a-19ea-41f2-b535-a364bcd5bd37.roa
File:                     eb0e579a-19ea-41f2-b535-a364bcd5bd37.roa (raw, json)
Hash identifier:          3fkW58GmnkSXEoA3X7atiPt2j3khITGsjknJEWhbv8c=
Subject key identifier:   08:D0:84:8A:FC:A4:EC:F1:BE:CF:3A:00:14:40:5F:D0:8A:D7:3E:11
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       242CB6B022B967FDDBE939FE6E0682BE50A368B0
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/eb0e579a-19ea-41f2-b535-a364bcd5bd37.roa
Signing time:             Fri 31 Oct 2025 00:36:55 +0000
ROA not before:           Fri 31 Oct 2025 00:36:55 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3628::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Nov 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:2c:b6:b0:22:b9:67:fd:db:e9:39:fe:6e:06:82:be:50:a3:68:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 00:36:55 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=7d7ea96c4be91acc1127f4e52dfca0e212fce21d33a3807bbddd1b1524ae024f, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:02:77:a9:be:e7:1d:28:69:98:08:89:b7:50:
                    68:a1:43:bf:96:6e:a9:e8:56:ff:b1:2b:22:f5:7f:
                    8e:1a:2f:bd:cd:23:01:a7:17:65:ec:a4:39:52:a4:
                    4b:94:c0:dd:01:c5:30:32:89:be:0f:5f:59:e1:a0:
                    af:e6:33:7b:e3:5f:c5:c2:3e:04:0b:0b:6f:85:41:
                    ce:25:af:01:70:c7:ca:5c:f9:1a:ab:a6:58:c0:cf:
                    73:46:11:8a:48:81:e0:5e:02:d0:46:9a:f7:f2:8f:
                    a8:44:6a:83:3d:77:f2:90:cf:48:d7:a1:94:70:c5:
                    6b:e0:63:72:e9:ac:cd:df:da:73:44:17:29:65:10:
                    61:24:e1:6a:01:cf:6b:8f:5f:c3:c7:c4:c9:a5:bd:
                    10:98:59:36:3b:3b:3c:fe:53:5e:42:f2:4b:01:fe:
                    81:1c:06:0d:8d:9e:20:f5:a8:a9:af:2c:b1:c7:b1:
                    76:98:84:87:59:83:e9:54:75:21:81:90:60:a8:aa:
                    6c:45:a4:20:2b:2e:8b:f3:25:f7:a9:5f:b0:7b:95:
                    24:f5:39:39:49:48:d2:67:59:2c:6b:36:2e:cb:e1:
                    b1:93:55:1a:91:80:94:e8:0f:4a:fa:34:4c:9a:55:
                    da:15:da:01:16:44:85:7a:fe:ec:0f:e5:03:12:af:
                    a1:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:D0:84:8A:FC:A4:EC:F1:BE:CF:3A:00:14:40:5F:D0:8A:D7:3E:11
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/eb0e579a-19ea-41f2-b535-a364bcd5bd37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3628::/47

    Signature Algorithm: sha256WithRSAEncryption
         62:65:01:17:18:ca:df:c8:cb:63:8b:26:e1:53:5d:22:c7:69:
         05:1f:4d:f4:74:8f:c7:86:b2:4e:22:d0:d5:76:e6:2a:ad:d8:
         36:79:ee:f7:09:ea:3f:5a:dd:77:7f:7c:2d:b4:5b:d1:01:d5:
         16:73:bd:42:49:cc:29:1b:84:5f:11:01:d8:63:05:fa:a2:56:
         2e:4d:5b:66:08:57:72:18:d1:59:11:2e:e0:3f:af:81:0c:97:
         67:a1:99:25:5e:df:47:03:ff:ab:7d:bb:64:5f:8e:a2:11:1f:
         20:56:b6:ef:53:07:ab:d9:8e:7b:da:e8:57:a9:47:d3:1c:e7:
         2d:7d:4b:9c:d2:8d:51:ec:3f:f9:26:83:f7:ee:90:5b:bc:67:
         df:9d:7e:2d:d4:8b:66:e3:f2:a2:79:c4:98:65:07:a8:01:7d:
         c9:d0:f5:cf:15:37:a2:b7:02:83:46:32:9a:fd:ef:bf:fa:89:
         97:9f:80:43:db:d3:81:fd:e7:2b:dc:f2:f0:3e:97:28:bc:18:
         72:1d:bd:2a:af:dc:a6:2f:7a:a7:a8:6b:d8:ec:cc:4a:8c:be:
         ad:6a:ca:ec:30:7e:0d:3d:d2:04:81:78:21:a0:71:99:c6:0d:
         e9:1a:39:72:95:e1:0e:6b:f4:32:08:41:63:b7:12:3b:62:17:
         a3:5e:4c:75
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 16:54:22 2025 by rpki-client