Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/fe587782-fe27-4c65-9973-004c752725d8.roa
File:                     fe587782-fe27-4c65-9973-004c752725d8.roa (raw, json)
Hash identifier:          I5RY7MIfEZy3tu8eGp7FC1DgO1Cqu+RjbtvRhur1iGA=
Subject key identifier:   D9:07:53:37:BE:D1:EF:97:34:17:88:06:22:CE:A7:BA:96:80:B0:83
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       0B5FB09727BAE58E38A175A5FA50DA17F12BAB8E
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/fe587782-fe27-4c65-9973-004c752725d8.roa
Signing time:             Fri 31 Oct 2025 07:55:40 +0000
ROA not before:           Fri 31 Oct 2025 07:55:40 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:5f:b0:97:27:ba:e5:8e:38:a1:75:a5:fa:50:da:17:f1:2b:ab:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 07:55:40 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=6d4494ab634aa3ec0c82b3b8b2ac786699faa69c221504ea2273349378897d9c, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:db:dc:bc:4c:0e:25:49:25:21:09:ad:4c:96:
                    f0:6f:4d:f1:a0:50:d4:1a:79:24:12:42:5c:0a:23:
                    ba:b2:02:35:89:62:5f:cd:4a:47:41:c5:a0:0a:55:
                    03:92:4e:20:2a:27:dd:c3:86:ef:a9:5d:89:9e:81:
                    89:1a:c5:fb:a2:57:5e:79:25:1e:b4:c8:43:79:f1:
                    73:19:df:e8:99:70:76:0f:e8:87:11:36:a9:98:4e:
                    da:82:7d:43:90:83:05:9c:5d:70:aa:a8:ad:bb:d2:
                    24:ca:58:18:1c:45:71:12:14:e2:16:3c:65:04:17:
                    99:b9:cf:56:fc:91:65:3a:18:84:b5:91:3f:e5:39:
                    f9:0a:bc:9c:1c:5d:33:e2:a3:e3:bc:3a:13:81:84:
                    28:d6:76:e1:f8:12:9e:92:3a:9f:12:2c:3d:48:33:
                    15:f4:4a:c1:a5:96:d6:df:1a:a9:33:83:67:c5:4f:
                    41:bd:65:41:16:2a:db:da:53:c2:16:19:3e:01:8a:
                    77:a9:2b:d8:63:c7:2d:12:f9:c1:da:17:f7:dd:48:
                    b8:e6:1d:a3:cb:bd:f8:52:46:08:39:b0:a0:0c:e0:
                    8a:a8:9a:11:a3:45:55:e4:a3:ee:23:32:f1:f6:be:
                    ed:ad:5e:2b:1f:8c:d8:22:7a:4e:86:f2:ab:e5:a6:
                    74:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:07:53:37:BE:D1:EF:97:34:17:88:06:22:CE:A7:BA:96:80:B0:83
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/fe587782-fe27-4c65-9973-004c752725d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1400::/38

    Signature Algorithm: sha256WithRSAEncryption
         85:5b:56:fb:2a:ac:e3:91:f1:30:8a:51:b1:10:91:1b:14:2c:
         f8:04:c3:af:15:e5:f1:24:e7:3b:8d:4b:e1:5e:8b:81:1c:84:
         cc:0d:23:80:26:62:d3:87:29:b9:bc:37:58:52:13:8b:f1:6e:
         62:a3:a0:44:24:57:44:6b:8c:f4:c0:84:f8:93:9b:e8:66:98:
         33:4b:1d:90:80:86:33:f9:14:ff:c6:6d:73:a0:89:d1:05:14:
         8b:5e:18:49:17:5e:af:76:17:6a:ef:ab:a0:35:a8:62:2f:2d:
         26:a5:89:08:2e:46:a6:ee:7e:55:7f:d7:65:af:8e:ce:db:32:
         8a:02:2d:a3:34:1c:51:52:8c:fc:51:94:39:27:6b:a4:5e:64:
         ea:0f:b8:3e:45:32:a5:ad:d9:8d:2f:2d:93:df:96:58:7e:d1:
         26:4a:da:a3:dd:97:c7:df:ee:a5:30:d0:d8:85:88:d6:72:0f:
         fa:0b:9d:a9:b8:ad:62:84:3c:43:f2:76:24:36:a1:08:78:a7:
         d0:1e:0f:d6:55:bb:50:02:35:9a:75:a3:97:bf:2a:e7:51:f4:
         50:12:cc:61:28:c3:83:26:95:fe:cc:6d:20:58:f2:f3:f8:77:
         45:78:24:9a:21:59:0d:23:b1:d7:c5:2b:4f:f1:ff:86:ca:cd:
         2c:20:f1:0c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:29:55 2025 by rpki-client