Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/14c25731-8d28-42be-89d7-df265807ecf2.roa
File:                     14c25731-8d28-42be-89d7-df265807ecf2.roa (raw, json)
Hash identifier:          GdNmsPQU+3d/0MBkZaWvw6twP7kXiYaA6oWxcuC0aGg=
Subject key identifier:   E0:64:95:EE:7D:07:A5:C8:57:55:65:8C:DE:8C:1F:E4:86:F2:65:21
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       6A0506E0A7C298B923F8BE05361FF2368A2F5BB3
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/14c25731-8d28-42be-89d7-df265807ecf2.roa
Signing time:             Thu 30 Oct 2025 22:27:16 +0000
ROA not before:           Thu 30 Oct 2025 22:27:16 +0000
ROA not after:            Thu 04 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1d66::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 19 Nov 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:05:06:e0:a7:c2:98:b9:23:f8:be:05:36:1f:f2:36:8a:2f:5b:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 30 22:27:16 2025 GMT
            Not After : Dec  4 23:59:59 2025 GMT
        Subject: serialNumber=8570e3df803acaee5830b90b9cbe6daf612e8f896a2f0c44e174e2f761044fc0, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:02:6b:12:b3:4f:4a:cb:58:4b:8d:5a:7f:26:
                    2a:58:d2:72:98:0f:b1:7b:c4:bd:d2:e8:4e:7f:22:
                    cb:71:33:2d:2b:24:f1:54:e3:ee:ba:2f:73:64:da:
                    8a:fc:aa:67:0a:a1:63:c3:4a:53:f6:e9:81:0c:4b:
                    73:38:de:3b:84:aa:d6:1f:5d:4a:c6:1e:bd:9d:29:
                    79:70:72:c9:d7:26:67:93:b8:b7:f5:9a:be:a9:23:
                    5b:53:6f:52:76:51:dd:f9:ae:1e:9c:89:78:38:1b:
                    6e:96:55:77:f1:23:d8:a8:19:85:31:eb:a1:75:21:
                    f9:42:5d:88:f9:f9:44:86:69:99:13:67:b9:04:1f:
                    e5:a4:c0:3f:8b:9b:96:61:f0:c8:54:ad:fb:4a:98:
                    86:3f:ec:04:3c:30:16:9e:e5:55:7d:5f:de:ac:29:
                    4f:3f:52:33:23:0e:d3:90:a3:43:8d:7f:05:41:03:
                    c8:33:ef:4d:ea:d1:a8:65:6a:3d:54:bc:98:71:fc:
                    d9:e7:6f:66:c9:0d:07:24:13:e4:21:b1:b8:04:64:
                    a7:c0:d2:1b:6c:d2:73:fc:4b:1a:45:cc:52:60:85:
                    a1:02:a0:8c:ba:d9:fc:41:a5:95:4f:9f:4d:4d:76:
                    df:56:22:dc:db:69:b7:4d:30:98:fb:7c:e4:7b:85:
                    ff:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:64:95:EE:7D:07:A5:C8:57:55:65:8C:DE:8C:1F:E4:86:F2:65:21
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/14c25731-8d28-42be-89d7-df265807ecf2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1d66::/47

    Signature Algorithm: sha256WithRSAEncryption
         79:17:d6:3a:25:45:e5:69:c7:ec:cc:ef:ed:ca:f3:3c:c7:0a:
         db:aa:e5:24:c3:48:cb:01:2e:d0:70:25:cf:35:ba:a2:d2:cf:
         15:d1:d9:f0:95:4f:87:b2:97:d0:68:9c:aa:a3:5c:c2:01:11:
         5b:93:5e:c7:44:24:ac:00:7d:8e:f1:6a:8b:bf:c4:3f:43:6d:
         ee:26:16:8c:ab:46:1b:a1:55:c3:70:07:68:bb:bc:de:c5:da:
         9d:9f:9e:e8:01:90:72:d7:95:2a:5b:42:67:63:7f:fe:a1:31:
         e5:34:ba:00:c8:27:55:7e:09:c4:60:45:e5:77:60:fd:85:74:
         0b:a4:e1:bc:e9:bb:53:65:9b:d5:20:84:57:da:60:d3:4c:0b:
         9a:08:3a:19:61:5b:1c:de:5e:3f:82:58:89:ab:26:36:8d:7c:
         ca:28:85:58:bb:cd:5a:e1:d7:49:6b:29:70:00:f9:c4:cf:dc:
         e7:3a:5f:c5:1a:1e:b0:85:91:91:c0:78:07:9b:ec:54:24:37:
         e1:ec:11:ca:d6:7a:17:9a:7f:82:47:d8:a2:53:d1:f7:9b:56:
         9a:9b:d6:0e:f5:c4:85:95:03:0e:2c:1c:96:e1:31:28:bb:49:
         a5:7f:58:cc:d4:6c:e0:33:76:ca:22:12:20:ba:8a:8f:31:54:
         41:38:35:1f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Nov 18 08:24:48 2025 by rpki-client