Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ee800567-5456-4594-9c4c-5c29dacddece.roa
File:                     ee800567-5456-4594-9c4c-5c29dacddece.roa (raw, json)
Hash identifier:          NlO1tC5okRT2hpiY7u9PGJ6QxFsd9cze/UK6w9NkwxU=
Subject key identifier:   7E:56:83:AF:68:89:32:38:8A:E3:8A:CE:34:E4:1C:BA:58:80:C4:D0
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       41F90F227751D0D46F84C0F365AFCA9F85A8E67E
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ee800567-5456-4594-9c4c-5c29dacddece.roa
Signing time:             Fri 31 Oct 2025 05:57:16 +0000
ROA not before:           Fri 31 Oct 2025 05:57:16 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3450::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:f9:0f:22:77:51:d0:d4:6f:84:c0:f3:65:af:ca:9f:85:a8:e6:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 05:57:16 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=b3f7d27a7e784fe81a9168dca53f26cc6d77b955f6c2f65ec4d7165318ad775e, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:12:49:3b:d0:7b:b5:3b:c7:f8:e4:4f:85:07:
                    a3:ca:61:7b:17:03:ab:43:1c:db:3a:c1:88:a1:f1:
                    fd:41:80:4e:b4:10:b4:23:34:bb:e0:50:82:48:44:
                    3f:64:cc:8e:37:05:e9:24:c6:28:82:38:dd:07:26:
                    08:55:32:6b:70:37:64:dc:c2:72:a2:7b:ac:26:c8:
                    e1:da:08:7c:75:c4:33:9c:7e:26:92:14:e6:1e:2b:
                    ae:1c:e0:97:c0:40:f2:1a:e9:39:30:9b:23:b1:a0:
                    24:94:cb:b8:c7:d9:c1:46:cc:63:60:6b:a2:52:68:
                    20:87:09:7c:0f:61:d9:62:95:aa:b6:5d:ce:ea:e5:
                    8a:33:ea:f5:73:aa:a4:46:f5:88:75:f9:88:5e:b5:
                    83:20:84:69:1b:5f:b8:3e:1d:f6:f8:45:b1:a5:c1:
                    11:1d:f9:52:7e:d0:51:ec:3c:1e:56:fb:e0:d2:99:
                    05:be:e0:c8:e7:e4:ad:3c:f5:cb:3c:bd:9f:90:75:
                    1f:5d:f9:a4:b2:76:2c:51:f6:5f:1d:bd:ab:92:48:
                    72:1e:6a:ab:8c:70:9a:f6:b4:57:05:61:e6:fa:e1:
                    0a:22:65:db:13:c5:b5:87:07:b7:bf:c9:55:aa:f5:
                    8a:23:eb:4d:ea:bf:d5:6c:ab:65:f5:ce:4e:63:ec:
                    ec:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:56:83:AF:68:89:32:38:8A:E3:8A:CE:34:E4:1C:BA:58:80:C4:D0
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ee800567-5456-4594-9c4c-5c29dacddece.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3450::/45

    Signature Algorithm: sha256WithRSAEncryption
         48:7e:91:42:b8:da:29:cd:3d:af:05:1d:2f:ea:41:34:da:b5:
         ab:c4:72:6e:38:03:6d:f8:0e:b7:2c:22:2f:10:2d:ff:b9:0f:
         d5:e7:11:d3:f3:f0:cd:82:e7:fc:fd:cd:a9:6a:d0:33:57:9b:
         e9:cb:5c:e3:ae:f2:11:f0:bb:26:d2:66:d8:7a:9b:7f:9b:ff:
         3c:dc:8a:09:7c:f6:a1:5e:13:09:50:92:03:4e:19:63:e6:53:
         d3:0d:81:84:aa:f8:49:0d:45:ab:ae:c8:5a:42:48:49:55:da:
         13:0d:58:c9:92:cb:fe:2d:e3:c3:63:be:42:19:f1:5a:f0:46:
         85:47:ec:4d:e7:da:5e:c1:4e:d0:4a:e8:6d:ba:13:cd:ba:86:
         ce:e8:94:0f:67:7b:7d:43:b1:3f:41:0c:b2:38:e5:4a:ba:e3:
         19:f6:7f:01:0e:83:7f:e6:51:92:bd:a4:c6:db:b3:44:73:b0:
         14:fb:de:88:03:2e:27:35:db:c7:24:0d:30:64:c4:00:d4:86:
         fb:29:aa:97:ea:87:48:3b:2b:80:12:bf:82:e3:5b:2e:74:22:
         37:54:8d:33:3f:87:23:f7:3c:9e:c9:dc:cf:00:d9:f9:42:e5:
         e9:ec:bc:ee:33:dc:55:c5:a8:bf:98:7f:bc:da:4d:95:5b:a2:
         e5:e7:f2:a9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:05:28 2025 by rpki-client