Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f2a44d23-d35f-407c-b139-ddfb042f8d9e.roa
File:                     f2a44d23-d35f-407c-b139-ddfb042f8d9e.roa (raw, json)
Hash identifier:          85GGY34xoyN+S6PuXE5ky4g9TCGYy3/Y+oYDXBl/OE0=
Subject key identifier:   B9:9D:02:32:DF:E2:F4:A9:CD:AB:84:F9:CC:D1:19:ED:0D:42:A0:DD
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       53BC101708A46CC7EA46BF6455B9C906126BC82F
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f2a44d23-d35f-407c-b139-ddfb042f8d9e.roa
Signing time:             Fri 31 Oct 2025 00:25:06 +0000
ROA not before:           Fri 31 Oct 2025 00:25:06 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3534::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:bc:10:17:08:a4:6c:c7:ea:46:bf:64:55:b9:c9:06:12:6b:c8:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 00:25:06 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=ff75ff73d20be93efafb488303ea77a85e4f9c52dd5267ae90e7b391ffe72f1f, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:74:af:a3:67:b0:cf:38:45:01:f1:fe:66:a2:
                    0d:ed:a1:be:19:c9:57:e8:cf:36:8a:35:55:c3:56:
                    69:0b:2e:c5:55:ce:66:f4:5e:35:29:e4:5c:e6:46:
                    c4:b8:8d:32:83:57:97:1b:6e:4a:9f:66:0f:03:7b:
                    95:d6:9d:df:2e:d3:83:41:c5:40:24:31:00:6f:c8:
                    1c:03:bc:60:01:de:d7:be:84:71:52:62:b7:00:16:
                    8e:99:30:3c:c9:6f:e0:9f:22:ba:c4:00:7b:a4:33:
                    7a:7a:f9:d8:78:34:99:82:2e:18:52:d2:0d:d7:04:
                    07:03:bd:04:fd:d3:19:ff:7e:2d:e5:dd:cf:44:06:
                    8d:ef:f4:a3:ff:f6:a3:4d:50:33:6d:65:88:45:29:
                    57:45:e6:ec:f7:94:94:36:27:28:18:e6:70:51:a7:
                    0d:69:d4:2b:44:8b:22:52:bf:7c:35:8c:16:dc:52:
                    fd:4d:65:a1:55:dd:92:a5:7a:ef:06:75:43:ce:c6:
                    23:8e:c8:e5:80:21:a6:d2:a8:b0:08:8c:38:8c:10:
                    ed:a6:3f:73:5d:11:e4:26:84:33:26:0c:5a:5f:1d:
                    7d:34:36:47:a6:2e:ae:03:85:cf:86:26:29:62:b7:
                    ad:ce:3a:71:34:70:d5:b8:f4:3d:16:59:8f:8f:a4:
                    93:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:9D:02:32:DF:E2:F4:A9:CD:AB:84:F9:CC:D1:19:ED:0D:42:A0:DD
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f2a44d23-d35f-407c-b139-ddfb042f8d9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3534::/47

    Signature Algorithm: sha256WithRSAEncryption
         88:aa:c8:ea:c7:48:0c:90:b5:cc:50:16:30:dc:bc:7e:ce:fc:
         10:86:4f:b8:38:d8:b7:72:f6:f5:30:51:20:eb:04:43:53:a1:
         bb:03:a1:bb:29:55:f4:48:d0:28:7b:78:33:9a:b5:bd:73:e8:
         ee:69:58:19:9d:1c:14:a9:fd:97:54:dc:39:b9:88:9b:c0:fe:
         70:74:1a:68:d5:1d:cc:7b:72:d3:2c:14:ac:cc:1c:c7:31:b2:
         48:6b:fa:36:95:3f:10:64:9e:dd:78:0a:2b:1f:fb:e1:f0:c1:
         4e:62:5d:12:51:e4:42:54:79:28:2d:b2:7f:7c:7c:dd:10:31:
         a3:9b:23:68:89:fc:6f:58:ba:43:7b:29:9e:3b:c3:25:3c:52:
         4b:99:0a:98:cc:77:85:8b:f6:5d:10:42:69:28:5f:b1:0c:41:
         3e:a0:24:d3:07:f7:5e:9b:b9:c0:98:e2:c9:0c:6f:be:a9:02:
         af:37:66:d5:fb:53:4c:ea:fe:9d:b0:e6:87:d1:aa:43:30:10:
         d2:b1:4b:59:5e:08:22:ad:a1:bf:ca:45:42:a5:3a:26:c7:1a:
         da:82:85:96:09:d3:02:90:1a:7b:e2:67:63:fd:34:dc:a3:c3:
         3b:64:86:bf:e5:8d:55:e2:8e:09:d7:c5:ac:ae:4a:4d:c7:ea:
         59:79:39:99
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:43:13 2025 by rpki-client