Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f93dec70-1666-4be3-844a-0f8047bbe4f3.roa
File:                     f93dec70-1666-4be3-844a-0f8047bbe4f3.roa (raw, json)
Hash identifier:          fDXhCO4gAEkEu+7SMt/CSK+VFErm6yPTc2Y1Ime89x8=
Subject key identifier:   A7:76:CA:E3:FD:93:A0:85:F4:0D:D0:2B:72:D6:A3:29:7C:CC:50:B0
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       65EE03D524077BDCCF4A49D64E007BB1C9ACFDDC
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f93dec70-1666-4be3-844a-0f8047bbe4f3.roa
Signing time:             Fri 31 Oct 2025 06:10:11 +0000
ROA not before:           Fri 31 Oct 2025 06:10:11 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:38e0::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:ee:03:d5:24:07:7b:dc:cf:4a:49:d6:4e:00:7b:b1:c9:ac:fd:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 06:10:11 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=906130cec5b98967098a5752596deab1884ce38c38f444a4f8a4936ffe8a518e, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:10:bb:9e:92:46:e1:da:bc:64:84:7a:bd:ee:
                    b2:84:e5:e1:09:37:4d:3d:9a:f8:2f:4e:ad:95:3a:
                    5f:77:b4:99:cd:85:e5:a4:42:b6:6d:05:6e:a2:49:
                    0d:e9:ca:af:41:7d:a6:59:a3:ca:60:31:18:33:2c:
                    fd:42:51:39:7b:0f:14:b2:3c:89:34:67:b2:88:dc:
                    d5:30:38:23:79:34:80:0b:8d:b2:33:27:64:1a:d0:
                    64:6c:a9:5c:14:8e:42:77:f8:37:65:0b:e2:9f:ac:
                    a5:1d:0b:8e:e9:3f:cd:5e:37:b5:24:68:45:35:a3:
                    97:37:d8:ec:35:43:c2:56:16:43:de:ce:2f:e4:70:
                    47:7b:c8:d5:be:1b:37:cf:2d:7c:5b:4f:26:76:3f:
                    53:3c:77:32:d7:f4:7f:5a:1f:c9:ef:b6:de:1a:17:
                    4f:e1:8b:d1:cd:84:e0:18:88:04:61:0b:a0:9f:76:
                    90:f2:6a:de:48:92:2e:1e:c3:cd:27:29:e4:d0:c2:
                    65:2c:7d:51:49:f5:6a:4b:4b:4d:b3:42:ec:f9:d9:
                    3d:e6:bc:f3:05:a5:be:27:a0:a2:28:b1:95:5b:be:
                    05:38:46:b8:a5:cc:73:7a:eb:c5:e7:02:f1:a8:62:
                    65:b3:e5:75:36:44:5c:33:3d:69:69:5e:58:28:3e:
                    ff:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:76:CA:E3:FD:93:A0:85:F4:0D:D0:2B:72:D6:A3:29:7C:CC:50:B0
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f93dec70-1666-4be3-844a-0f8047bbe4f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:38e0::/45

    Signature Algorithm: sha256WithRSAEncryption
         52:b0:63:b6:97:9e:c2:1c:d4:34:65:68:e2:cd:7f:97:7a:c4:
         68:8d:b7:78:03:54:59:99:00:7f:89:3b:43:4e:eb:8e:23:24:
         7d:e6:a8:c8:3d:2a:4c:ec:89:05:99:3b:1b:42:6d:56:66:44:
         74:af:30:ff:6d:5b:2c:2f:e6:8d:ec:b2:2c:0f:50:e4:99:a4:
         10:b1:5a:3d:90:0b:15:65:dc:df:9b:ab:5a:71:d6:48:4e:63:
         d8:b4:91:ec:41:bb:22:8b:8e:d3:42:e7:1d:0f:a7:10:cf:13:
         42:81:fd:a4:ea:66:e6:d9:ec:ae:e7:f3:a9:d6:21:bd:36:37:
         81:15:b5:d5:7d:51:c0:a5:11:5e:4b:f3:15:f6:6c:9a:a6:ff:
         1f:f9:59:67:b2:a5:6b:4f:ce:ef:31:b9:f0:b4:ca:94:14:ec:
         48:1f:92:43:46:c9:8c:3e:f1:ab:7f:f9:41:7b:23:9a:66:28:
         10:08:4c:90:c1:bb:bc:a5:d0:c8:45:91:c2:0d:68:48:e4:db:
         7e:91:7b:75:8e:a7:06:21:63:da:03:65:73:d0:f7:8e:a1:08:
         48:89:3d:37:54:a7:37:3a:20:1b:f3:d7:04:e0:83:3d:45:6f:
         d6:c0:9e:b9:09:64:3a:12:bc:4f:95:1b:03:ce:78:89:37:db:
         c0:55:f5:e9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:46:48 2025 by rpki-client