Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/108b2d24-6350-4751-bb0f-65ae4dedecaf.roa
File:                     108b2d24-6350-4751-bb0f-65ae4dedecaf.roa (raw, json)
Hash identifier:          vllSOPebWJtPc3b/5rbNSTFTbJCOwIg9B6UvUOTg4eI=
Subject key identifier:   06:3B:BE:F4:6A:08:CE:D8:A4:4F:46:EF:DD:4B:CA:07:C8:C3:F3:7B
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       0271E30A3A86F8144A4E95B4F23E82E87F1F2426
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/108b2d24-6350-4751-bb0f-65ae4dedecaf.roa
Signing time:             Fri 31 Oct 2025 07:23:56 +0000
ROA not before:           Fri 31 Oct 2025 07:23:56 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2c00::/43 maxlen: 43
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 19 Nov 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:71:e3:0a:3a:86:f8:14:4a:4e:95:b4:f2:3e:82:e8:7f:1f:24:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 07:23:56 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=a598f96122a0933e491b88604742b68f9f1618d07295de05d182b33dc8ef1272, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:d5:0e:27:fd:ad:af:3a:59:b0:ef:11:1c:6b:
                    52:bb:dd:a0:7a:44:b1:df:b0:29:e0:7a:fd:ad:7a:
                    6f:91:d1:0f:a8:52:ca:b2:df:36:d5:00:f0:0b:c9:
                    c1:58:ea:c3:fb:e3:3c:88:e9:23:8d:b8:2b:c1:46:
                    b5:54:b7:d0:f0:3f:7d:bc:7a:df:17:8e:d3:31:d1:
                    23:46:ad:3f:38:ca:30:87:3f:ad:c6:bc:35:1e:4a:
                    f4:bb:5f:85:2e:df:51:aa:5e:fb:89:47:91:4f:d5:
                    ca:0d:ec:cf:d4:c5:3e:c4:6a:ec:b6:52:8d:e2:f9:
                    c9:bf:fc:b1:a0:0b:ab:9e:11:59:23:01:1f:3d:64:
                    f5:2f:ae:c6:83:3d:3a:88:2e:d1:38:71:49:44:62:
                    3a:15:ab:e1:9b:ab:5a:11:e0:72:39:9e:20:41:15:
                    8c:84:7a:ed:3d:d9:a8:ea:3d:27:08:f0:e4:10:41:
                    02:60:0b:a7:39:7d:72:aa:f2:09:1f:55:10:a0:92:
                    9a:fa:5f:e2:9f:70:63:63:d2:b4:51:3c:ea:b5:d7:
                    64:bc:2d:b9:45:91:c1:93:02:5b:54:94:b4:fd:d1:
                    f2:97:0c:34:1c:37:fb:4a:4d:e1:ca:f4:9d:20:32:
                    1c:93:52:e6:29:02:93:7a:ef:74:9b:bd:45:db:1a:
                    9f:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:3B:BE:F4:6A:08:CE:D8:A4:4F:46:EF:DD:4B:CA:07:C8:C3:F3:7B
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/108b2d24-6350-4751-bb0f-65ae4dedecaf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2c00::/43

    Signature Algorithm: sha256WithRSAEncryption
         5a:6e:00:60:8b:c1:a5:bc:f5:14:f9:d7:f7:e9:c8:e5:56:7a:
         68:e9:c0:66:b6:04:b4:95:1c:5e:13:08:8a:1b:bd:16:2d:60:
         59:0f:7f:26:59:d3:8a:22:f9:d1:37:da:95:c3:5f:fd:98:e9:
         d6:3c:32:51:6b:2c:2f:79:c7:87:78:35:2a:48:a2:c9:7c:08:
         9d:f1:5d:f8:57:68:67:22:2c:07:dc:b8:04:19:b1:38:1e:97:
         f0:e4:bb:87:b7:30:0e:10:3e:55:68:af:ca:83:e6:7d:5e:12:
         63:7a:77:ad:25:dd:45:bb:69:e0:9a:d0:ea:9e:3d:da:ec:fb:
         76:67:09:fd:f1:d6:be:fe:93:a2:e1:89:f6:60:11:1f:4c:b2:
         55:ea:ae:b5:c2:42:e4:41:0f:68:73:b4:89:f0:9e:bb:e4:94:
         7c:9d:3e:a5:4d:c8:f3:c9:b8:bc:ae:a2:59:36:ab:46:22:3d:
         05:3d:42:54:76:3f:e7:c7:6f:5e:76:fe:d0:4c:74:51:e6:c6:
         1d:55:9e:83:db:73:bc:13:42:f6:83:f4:9c:b6:ba:d6:17:f2:
         c7:9b:ff:2c:4a:98:8e:3e:4f:b4:2b:8b:77:29:05:0d:be:96:
         08:af:dc:11:44:85:65:27:ef:88:71:f9:b5:95:fe:2d:9d:00:
         05:8c:82:eb
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Nov 18 08:24:27 2025 by rpki-client