Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/fbab3c55-c3a8-49c8-95ca-1fe8e2d24290.roa
File:                     fbab3c55-c3a8-49c8-95ca-1fe8e2d24290.roa (raw, json)
Hash identifier:          GBcwIrvu0UcrTnMdY186lYLMzygQVPrsdWHlAe8s9RA=
Subject key identifier:   FF:70:C4:14:CA:3C:EC:AD:5C:81:ED:AE:DB:24:D0:F2:75:55:CB:CF
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       5B8704329EC9785B0719A0710D79F27A55D2A4B2
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/fbab3c55-c3a8-49c8-95ca-1fe8e2d24290.roa
Signing time:             Fri 31 Oct 2025 04:08:47 +0000
ROA not before:           Fri 31 Oct 2025 04:08:47 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:33f0::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:87:04:32:9e:c9:78:5b:07:19:a0:71:0d:79:f2:7a:55:d2:a4:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 04:08:47 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=f7dc1b499d5ef092b203edeeeb98f2035d73c3c1330a6e9a516a4c4cd965f85f, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:73:6f:08:08:b9:47:0d:d6:67:57:24:b9:73:
                    98:6c:31:94:f6:2b:6c:f5:ba:46:f0:5f:56:25:d2:
                    a8:39:fe:74:b2:c1:94:bf:8e:29:db:35:77:e4:17:
                    c2:d3:04:41:49:3f:82:fa:dc:c7:40:2a:59:f5:dd:
                    90:bf:b4:50:67:df:a1:ba:39:af:e0:ad:7b:d7:af:
                    1d:24:0c:8b:7f:23:58:91:29:d3:69:d1:4a:4c:63:
                    08:0a:87:d7:44:07:5c:30:12:df:58:7b:a2:7b:58:
                    ba:ff:7c:f2:b5:f7:2e:5c:f4:83:7e:64:de:04:fb:
                    95:af:53:60:6a:d6:09:ab:f7:0a:f1:1b:c4:1b:00:
                    99:3e:5b:2d:20:66:ea:2e:21:94:13:3a:59:f8:eb:
                    64:f5:b5:60:2c:68:b9:85:fd:45:54:2f:33:27:04:
                    af:c9:d5:96:9c:b6:43:61:52:89:0d:d5:53:47:84:
                    bd:37:39:6a:fc:61:9b:37:70:a4:84:49:b8:e5:13:
                    86:7b:62:0f:ac:57:ee:46:71:51:a2:bd:02:e9:4c:
                    cd:ea:d7:56:6b:1c:f5:e8:18:22:0d:b7:ab:70:89:
                    ef:54:09:93:76:b6:17:59:bd:38:ab:19:40:45:f5:
                    3d:95:a5:26:a2:44:22:53:fb:1c:10:40:9c:28:7d:
                    bc:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:70:C4:14:CA:3C:EC:AD:5C:81:ED:AE:DB:24:D0:F2:75:55:CB:CF
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/fbab3c55-c3a8-49c8-95ca-1fe8e2d24290.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:33f0::/46

    Signature Algorithm: sha256WithRSAEncryption
         8e:0a:65:08:74:97:e3:9c:da:dc:6c:15:1b:6f:ef:d6:e1:35:
         13:c8:b4:91:fa:96:d4:ae:bd:0e:90:f4:e2:72:a1:85:c9:1a:
         38:72:fd:93:15:00:c1:83:2c:11:99:2c:33:42:7a:31:fa:12:
         04:e0:ce:69:fb:53:33:65:33:7a:64:8b:f1:16:56:72:34:83:
         5f:84:04:97:1a:24:58:9b:cd:e7:a5:ad:e5:79:c5:9a:5c:47:
         5c:d2:c6:83:23:bc:91:85:e1:4a:ce:22:30:ec:76:23:91:65:
         ce:90:19:92:3e:fc:81:5f:f4:f8:44:08:35:60:7f:a7:e8:67:
         55:49:c1:12:e1:cb:83:67:30:60:12:17:e0:4f:66:2f:64:76:
         36:05:a3:48:63:f3:4d:10:49:cf:18:3f:8a:d1:33:93:83:45:
         ce:25:df:5d:82:b6:f2:1e:5e:35:5b:e1:9a:f5:91:86:b1:c7:
         b3:a4:7a:68:fb:7b:39:48:1a:6e:8c:d8:bb:2f:f1:60:ed:bf:
         16:3f:da:42:4a:3f:31:00:9f:5d:fb:ea:c2:ba:55:17:8b:ce:
         38:f0:d7:78:0d:e6:3d:b7:fe:6c:1a:f4:f3:a0:f6:a6:f1:d9:
         ec:ea:16:f9:77:f3:25:b0:f1:25:e7:5b:0a:dc:9b:a7:af:33:
         e3:0f:1b:61
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:36:35 2025 by rpki-client