Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ee6b6baf-6e82-4fe5-8359-9c9b86be266a.roa
File:                     ee6b6baf-6e82-4fe5-8359-9c9b86be266a.roa (raw, json)
Hash identifier:          neO3pkgOVJ+LKnaNHhlkmzXnkRw6XbgUk8QSfV8k5jk=
Subject key identifier:   FF:D7:BA:5E:F6:5E:0F:52:2A:CB:8E:75:C1:FE:84:3D:88:F0:CC:C4
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       0FB2A55C4601A44730ADBE983F0D2AAD1FE70010
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ee6b6baf-6e82-4fe5-8359-9c9b86be266a.roa
Signing time:             Fri 31 Oct 2025 06:52:05 +0000
ROA not before:           Fri 31 Oct 2025 06:52:05 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2dc0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:b2:a5:5c:46:01:a4:47:30:ad:be:98:3f:0d:2a:ad:1f:e7:00:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 06:52:05 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=ce5b088b33bdba791b0f092e7ef1d09793fe129c0e62bbabfe48f44ee7866d61, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:95:19:47:48:13:a1:95:0f:ee:7a:9a:f1:92:
                    5d:f9:80:62:b3:ac:3a:4e:95:5f:68:ec:57:95:5e:
                    06:5a:77:80:e2:94:85:1a:1a:83:ad:61:52:43:75:
                    30:93:db:fa:16:a8:84:81:2f:09:de:71:1e:1a:ce:
                    9e:a6:fd:26:c7:d4:e5:d0:47:4b:ef:bb:3e:20:d2:
                    f5:a0:d7:bd:e1:54:e6:5e:33:97:38:ee:02:02:be:
                    0b:ba:2a:22:48:94:e5:ca:93:d7:ef:41:3c:8c:78:
                    e8:8e:ff:bd:72:b3:26:18:77:74:12:9d:41:44:8f:
                    c7:fb:49:7d:a2:41:08:14:de:3c:23:0a:31:71:b4:
                    f0:97:3c:ca:2d:26:77:8b:03:42:3b:58:00:e9:a4:
                    c6:d2:f4:ee:d6:c4:90:c8:e5:21:73:b8:82:f4:19:
                    6e:df:d5:37:7f:d1:f9:2c:7d:4a:7b:ed:31:f1:bf:
                    04:df:13:8c:44:da:58:dc:c8:c0:70:6d:40:d4:da:
                    85:f1:e4:81:eb:99:37:89:63:3a:70:53:19:36:b0:
                    4e:58:26:ac:13:54:2d:80:42:8b:6d:06:93:50:8a:
                    c3:2e:b6:07:77:ff:25:c1:b2:97:58:ef:8f:96:a3:
                    3c:54:f9:6e:83:4a:c9:c8:c9:40:df:8a:98:b7:b2:
                    cc:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:D7:BA:5E:F6:5E:0F:52:2A:CB:8E:75:C1:FE:84:3D:88:F0:CC:C4
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ee6b6baf-6e82-4fe5-8359-9c9b86be266a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2dc0::/44

    Signature Algorithm: sha256WithRSAEncryption
         54:f7:8c:b8:45:80:66:18:9f:f3:42:a5:bd:d5:b3:a2:26:d2:
         1e:5a:00:ba:c2:9b:ef:c9:23:9c:bc:49:2e:5b:47:87:69:80:
         dc:b1:60:99:db:b4:4a:be:a5:70:48:64:c2:33:8b:0c:00:54:
         13:1d:af:49:fc:86:5d:0b:0f:2a:a9:9b:76:af:b3:f3:72:c0:
         d0:09:0e:a3:b5:46:6e:2d:e5:8a:53:4d:93:af:94:ed:b3:7a:
         94:f0:3a:30:47:dc:5f:4b:7a:38:77:ba:9a:14:d3:33:31:58:
         d2:bd:98:f0:a9:d8:e6:3b:b3:a5:f5:5d:b9:4b:7f:71:00:10:
         e8:23:60:03:18:3e:4a:7b:b6:37:37:15:6a:30:1a:6b:b8:57:
         48:88:c9:d4:bb:e9:fd:86:32:10:a9:ca:e0:b2:c3:f3:42:c6:
         01:a7:3f:79:25:58:c4:8d:02:8e:5f:42:e5:9d:f5:8b:11:94:
         e0:ef:d2:42:21:91:e9:b3:ca:84:0a:45:f9:5d:66:38:79:4e:
         92:4a:18:80:95:38:68:94:0a:ac:29:0c:2b:ec:85:89:b6:9d:
         e1:15:38:5e:35:d1:9c:e2:e3:c2:8c:43:09:ed:9e:22:c5:11:
         0e:07:45:bc:21:f9:6e:b8:45:b8:42:a6:f0:5a:e4:ab:f7:06:
         b2:91:ac:26
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:46:06 2025 by rpki-client