Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/fea8543f-60d8-46c6-bb36-f1b5cee271c8.roa
File:                     fea8543f-60d8-46c6-bb36-f1b5cee271c8.roa (raw, json)
Hash identifier:          J0H3XcOCugojspbC8OXJsW2A3KhEfT/bDBJw3++qAak=
Subject key identifier:   CA:D2:C4:7A:84:00:37:B5:F1:FE:E4:F0:1F:B8:D0:17:62:C8:7A:AA
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       3320BF4284071070C36AA3176434602BE8FB9617
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/fea8543f-60d8-46c6-bb36-f1b5cee271c8.roa
Signing time:             Fri 31 Oct 2025 06:56:47 +0000
ROA not before:           Fri 31 Oct 2025 06:56:47 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:37a0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:20:bf:42:84:07:10:70:c3:6a:a3:17:64:34:60:2b:e8:fb:96:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 06:56:47 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=ed68b15b07b511a25d5d83be612fcfe2104986d397b15b0002302fbbc2d670c5, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:54:03:ab:dd:92:21:40:73:10:cb:40:2f:de:
                    d7:8b:d5:10:b7:12:ba:24:12:7d:94:16:e9:db:4c:
                    20:5c:78:be:da:fe:92:40:4a:f5:25:a0:3a:2a:c3:
                    02:51:4d:9f:82:76:66:01:34:18:43:d5:dc:44:be:
                    6f:5b:7e:98:fb:9e:b5:fc:33:bd:be:d6:f2:4f:fa:
                    74:23:91:bc:4a:23:3b:57:53:f2:b5:02:06:73:ba:
                    ed:80:35:3a:4e:3a:a8:d2:4c:a7:76:5d:62:d2:95:
                    b8:45:23:bd:d1:17:62:a0:39:c3:c2:fb:92:f9:c2:
                    9e:ef:fc:cf:1d:9c:1a:87:9c:36:91:7a:1c:50:8c:
                    77:aa:04:77:3c:27:ac:21:47:56:10:cd:92:e8:c2:
                    45:a4:b0:da:2b:e8:f5:67:bf:9d:b0:90:04:c2:3f:
                    37:5b:dd:9e:af:df:57:25:61:61:ce:af:ec:db:cc:
                    91:6d:55:a6:48:e0:13:49:8d:9e:df:40:b7:bc:3a:
                    16:34:19:5c:18:ef:84:d8:cc:74:a7:c1:98:25:71:
                    17:b3:fb:f6:c2:34:4f:78:14:7c:bf:de:ca:08:fd:
                    3a:ba:6f:e7:b1:7c:b4:1e:4d:61:e1:9b:48:36:29:
                    f3:02:a9:05:f7:0f:48:ee:a5:7d:06:1c:21:96:b9:
                    b5:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:D2:C4:7A:84:00:37:B5:F1:FE:E4:F0:1F:B8:D0:17:62:C8:7A:AA
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/fea8543f-60d8-46c6-bb36-f1b5cee271c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:37a0::/44

    Signature Algorithm: sha256WithRSAEncryption
         1e:5d:f7:11:43:34:11:d0:5b:7c:c8:50:d1:41:9e:10:23:a1:
         9a:3b:d8:cb:90:5a:7c:f4:f1:3c:88:30:ba:9c:68:e5:f7:47:
         a6:f8:73:b5:8c:a2:9f:bd:7a:68:62:5a:f6:cf:8b:75:c7:ed:
         dc:3a:09:b5:0e:75:b4:10:7f:fc:c4:7c:02:ba:5e:1b:a4:f4:
         f0:c5:31:87:88:3a:a7:8a:0d:a4:a5:93:25:0a:cc:70:ae:9b:
         20:5d:2f:49:e3:f3:39:80:40:a4:6e:82:2b:d6:c9:a5:0c:a9:
         8a:89:78:8b:26:93:13:2d:5f:6b:10:74:2a:24:34:5b:0d:50:
         d8:0c:0a:d7:3b:99:a9:d2:a1:94:cc:5e:1f:bc:c9:41:76:96:
         dd:77:a2:f8:86:5b:99:6e:d5:42:43:68:83:82:29:33:e8:86:
         a6:94:63:f0:31:f5:96:be:b1:c7:9c:ef:7d:bf:4b:88:29:81:
         9c:11:f6:38:ff:c4:bb:30:e4:bd:62:09:a8:52:c3:ef:fd:ed:
         9d:e4:6f:36:0f:e7:39:bd:26:6f:0a:b8:fc:f8:15:8c:78:9f:
         3a:83:0a:24:0f:7d:6f:5f:32:45:77:08:e8:64:f7:09:6e:27:
         bd:8b:a9:d1:26:11:d9:d5:fc:5a:c5:25:64:5e:fd:2d:15:07:
         7d:3d:1e:c7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:28:21 2025 by rpki-client