Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1d9d83df-b619-41af-9983-524ea53f6413.roa
File:                     1d9d83df-b619-41af-9983-524ea53f6413.roa (raw, json)
Hash identifier:          baFbrwfuIjH0cXGUqRqSRHkHo0ttwOI2JzN5/MBona4=
Subject key identifier:   05:81:28:3E:92:3D:41:8B:EE:21:FE:09:3E:81:1C:E2:C7:80:5C:94
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       2D7451EE1BFD32E5B6BD5F682A90CFDCA94F27F5
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1d9d83df-b619-41af-9983-524ea53f6413.roa
Signing time:             Thu 30 Oct 2025 23:10:35 +0000
ROA not before:           Thu 30 Oct 2025 23:10:35 +0000
ROA not after:            Thu 04 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2ba4::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 19 Nov 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:74:51:ee:1b:fd:32:e5:b6:bd:5f:68:2a:90:cf:dc:a9:4f:27:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 30 23:10:35 2025 GMT
            Not After : Dec  4 23:59:59 2025 GMT
        Subject: serialNumber=f475962808e3cac2b6db351f224ba19529a79ea197a0c3690c760c67395be07e, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:9b:02:7c:81:7e:ea:79:e6:e1:56:5e:b6:30:
                    c0:de:8e:26:f1:21:23:bc:8d:8c:98:f5:b0:d1:93:
                    eb:85:6b:82:25:ec:7f:83:25:9b:4a:1e:cc:a4:9a:
                    09:da:ba:7e:5d:29:90:bf:ff:08:f1:9e:dd:65:fc:
                    3c:49:1e:3d:1b:a3:e5:da:f4:c8:7b:8f:0d:3e:86:
                    94:cb:3b:61:4a:57:dc:99:c1:7a:be:29:1e:5b:42:
                    a9:cb:44:c6:95:7a:2f:bc:ef:d2:45:43:39:07:73:
                    aa:41:f1:76:57:ff:7b:75:e8:fa:3f:70:6b:f7:18:
                    da:2c:64:d8:80:b4:40:51:39:09:f5:8e:ed:ae:f6:
                    db:97:c0:34:3e:88:40:75:54:0c:1c:a9:68:81:bc:
                    74:b4:2f:3c:52:f4:87:8e:4c:3a:78:a0:50:8d:c5:
                    f3:fa:9a:40:c1:81:ee:19:91:d7:e8:e3:a6:62:93:
                    c7:e3:a2:f3:3a:e9:8d:2c:da:15:d9:3d:23:49:76:
                    6c:f0:6b:57:fc:01:fd:21:dd:34:bb:92:99:8a:c6:
                    83:7d:d7:ee:c4:e1:b5:a8:9c:3b:e9:61:36:e3:75:
                    a5:4a:86:ca:94:e7:9a:be:11:56:b8:1f:94:04:d2:
                    50:ae:98:80:1c:d6:bb:a1:b3:fc:5c:85:d0:da:3b:
                    be:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:81:28:3E:92:3D:41:8B:EE:21:FE:09:3E:81:1C:E2:C7:80:5C:94
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1d9d83df-b619-41af-9983-524ea53f6413.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2ba4::/47

    Signature Algorithm: sha256WithRSAEncryption
         4f:8a:83:6b:8f:04:63:f4:d3:dc:1b:81:53:75:a2:f0:9f:77:
         d4:f1:a6:5b:ae:f4:ae:90:91:2b:6a:8c:6a:0c:ef:59:86:ca:
         c4:4b:66:62:39:f2:3e:2b:95:6f:42:c0:6c:c4:7e:03:93:99:
         ef:3b:5e:b5:79:9d:7e:e5:b2:9f:0d:c8:20:ef:7b:e5:83:40:
         36:fb:25:86:c6:5d:ee:da:05:e7:e5:ad:bc:3d:09:2d:d8:c3:
         c4:01:0b:c4:31:a0:c7:1e:42:ae:6a:c4:a9:1e:11:d6:3c:0f:
         4c:8f:98:5c:dc:06:22:6d:b8:5b:d8:b8:81:0f:b3:95:b4:00:
         c0:a7:59:1a:7f:42:db:32:54:46:88:6f:0a:5d:3a:fc:f1:e2:
         ac:f7:8e:2f:9b:09:fb:ce:da:6b:d0:d9:2b:87:85:43:bd:75:
         18:fd:d8:19:c1:53:3e:3e:9d:08:d1:29:12:2b:3f:3e:19:1d:
         ad:80:3d:60:36:1f:66:d8:b5:b4:5e:34:3e:67:db:a1:1e:04:
         f0:72:92:40:4e:a1:04:a7:16:37:1f:06:ab:f9:59:13:17:0a:
         b9:0b:f2:75:ae:ce:91:c2:83:a7:40:ba:47:c8:bc:cf:80:20:
         c6:67:65:1f:f5:5e:3c:ba:a7:2b:6c:79:83:c6:0e:e8:df:57:
         98:2d:4c:fe
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Nov 18 08:24:40 2025 by rpki-client