Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f96a5b0d-3d5e-469b-833b-917d4b5ffd28.roa
File:                     f96a5b0d-3d5e-469b-833b-917d4b5ffd28.roa (raw, json)
Hash identifier:          1wxj3W21evvlbE9lYt93RGkMf0hqQ67iQkW6B3Fzx1k=
Subject key identifier:   17:8E:A4:88:6F:88:36:9D:5D:FA:8C:01:9A:4D:DC:71:52:B4:48:4B
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       1F289643684CC4B6D914CD90EFF35D53F5606FE3
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f96a5b0d-3d5e-469b-833b-917d4b5ffd28.roa
Signing time:             Fri 31 Oct 2025 07:41:01 +0000
ROA not before:           Fri 31 Oct 2025 07:41:01 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3740::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:28:96:43:68:4c:c4:b6:d9:14:cd:90:ef:f3:5d:53:f5:60:6f:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 07:41:01 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=0e4791db86e90c53d23b9b6570924001fba36af08c1cf7ceda413f5bf4332d75, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ed:3c:67:07:d7:32:d2:06:cc:b3:fd:e3:f0:
                    1e:d7:93:82:cd:87:09:88:e9:90:31:1e:7c:51:67:
                    c1:22:f5:e4:70:b1:38:ea:6f:20:66:68:e7:e3:96:
                    d9:fe:98:5b:9a:a4:1c:63:c6:d5:4e:39:49:81:ab:
                    7f:fc:34:b1:90:f6:0f:b4:f1:ca:62:ce:19:69:c2:
                    8c:2c:58:af:95:8a:5a:61:be:de:f2:dd:5a:26:9c:
                    2c:65:ee:27:3b:86:d2:4d:44:1a:7e:79:27:5c:ee:
                    15:22:b2:a3:cd:21:51:8c:cf:00:3a:84:fb:5f:bf:
                    0e:25:4f:1a:13:90:0d:a5:04:f5:7d:dd:2a:56:be:
                    5f:e7:6b:12:d6:92:1a:bb:5d:6d:d7:3e:08:a0:d3:
                    b7:b4:cb:80:af:0b:aa:80:3c:3e:9d:2f:86:c1:60:
                    90:60:01:e6:11:86:41:55:ac:a1:4e:11:e1:17:09:
                    b8:80:90:3d:28:0a:f9:e6:12:59:68:6e:0c:18:8b:
                    06:7c:99:14:6a:f5:41:5b:71:51:19:c4:54:1d:2d:
                    34:f7:f0:c5:16:7c:e2:1d:b7:92:ff:ab:90:5f:fb:
                    66:50:72:1d:66:f7:34:c6:c2:1b:6b:cc:ad:96:37:
                    89:ed:e2:38:a9:40:4b:72:76:8e:c3:07:43:3f:9e:
                    26:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:8E:A4:88:6F:88:36:9D:5D:FA:8C:01:9A:4D:DC:71:52:B4:48:4B
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f96a5b0d-3d5e-469b-833b-917d4b5ffd28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3740::/42

    Signature Algorithm: sha256WithRSAEncryption
         66:e4:c6:92:e2:c5:f8:69:13:04:1f:f7:14:fb:e2:83:70:ef:
         20:03:04:ae:42:13:96:58:87:58:d3:8d:da:51:1a:21:9c:9c:
         68:1b:77:87:5f:d2:91:1d:91:0f:56:d1:e5:ea:f7:af:be:f2:
         b2:5e:1e:1f:1e:92:6e:98:37:6a:53:f9:3b:1c:12:ef:19:df:
         e4:48:0f:d5:c5:6d:ca:7e:9e:9c:42:98:35:a9:4e:f7:04:10:
         a8:c3:a5:d7:5a:c4:ba:08:c0:f4:73:2b:38:9d:e2:57:58:e4:
         a7:cc:54:15:2f:81:cc:1c:fb:05:82:ae:8e:76:b2:90:0f:54:
         9e:75:23:f2:0c:8c:de:78:fe:a9:0c:ec:65:d5:ad:30:d7:3a:
         5b:eb:80:a2:47:38:56:21:a1:de:c0:c1:6c:2d:f2:8c:f7:e7:
         a5:6a:2c:ee:5e:5b:c7:09:c3:66:d7:8a:1c:51:c1:50:da:2e:
         5b:56:3e:dc:bf:3b:6b:75:89:4a:1d:cf:e3:7e:87:bc:e0:47:
         fb:fa:a6:a3:84:60:5a:4f:97:9c:d9:9d:df:35:c2:39:dc:d2:
         14:f8:a1:c7:c9:cf:72:14:d1:6b:23:33:59:c3:19:15:00:dc:
         51:62:f4:3b:1f:ed:fd:9e:55:3d:7d:71:9c:99:28:cd:e2:30:
         fe:27:c4:ea
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 11:08:06 2025 by rpki-client