Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/368b2214-7bd0-422d-8799-72be405f98e4.roa
File:                     368b2214-7bd0-422d-8799-72be405f98e4.roa (raw, json)
Hash identifier:          ju9P0MlROd2+BLCtu3puQ/9yYhppBJs3OFCuhL8IEGg=
Subject key identifier:   6F:DC:57:CF:AF:B1:9A:DC:20:AD:6B:4C:09:B4:7A:B1:25:A0:58:3F
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       577138EFC834289B084554C2B47CD853CFDC5F97
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/368b2214-7bd0-422d-8799-72be405f98e4.roa
Signing time:             Thu 30 Oct 2025 20:43:12 +0000
ROA not before:           Thu 30 Oct 2025 20:43:12 +0000
ROA not after:            Thu 04 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:133a::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 19 Nov 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:71:38:ef:c8:34:28:9b:08:45:54:c2:b4:7c:d8:53:cf:dc:5f:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 30 20:43:12 2025 GMT
            Not After : Dec  4 23:59:59 2025 GMT
        Subject: serialNumber=b15777bc4adb721bbae6be2329c47900891dab4f11c9918c77a5bcdceb5d5561, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:22:29:a7:eb:8c:70:e9:92:99:9b:a4:9a:97:
                    7b:26:46:19:b6:f8:49:21:82:45:a3:78:26:bb:2f:
                    b6:5f:64:85:26:ba:07:1e:23:61:e1:33:35:41:de:
                    6e:b1:af:56:15:22:a5:31:83:13:27:bb:25:2b:d7:
                    8b:c5:e6:9b:ea:83:71:9e:55:1e:e2:a8:71:27:4f:
                    a9:06:59:6e:c9:fd:ab:ad:71:50:28:6b:22:4c:bc:
                    2d:e5:8f:dd:9e:48:71:0d:1d:79:49:e6:02:c2:f5:
                    55:33:86:41:d5:eb:9e:d5:e9:f3:ec:e2:94:52:8d:
                    7c:f1:54:bd:ce:2c:e3:de:a6:c8:9e:5c:d0:1c:4e:
                    49:38:c8:13:88:63:f6:fc:f9:3d:bd:22:f4:01:e1:
                    01:24:a5:76:68:0b:06:10:ac:47:89:2e:0c:c1:4a:
                    6f:ff:cc:d9:23:f1:fe:15:e5:83:6e:9a:0a:d5:44:
                    89:91:c1:f4:f4:f0:00:54:ab:fd:b8:84:87:eb:22:
                    34:da:cf:c5:a3:7b:93:2d:90:9d:d3:1b:3a:24:bf:
                    04:eb:77:61:33:e7:08:06:4e:93:74:49:3a:3b:db:
                    e1:b5:48:da:33:6a:49:a3:c5:7b:77:ef:cf:89:12:
                    a1:20:cf:31:8c:f1:64:8f:d9:57:22:9a:cc:12:98:
                    3b:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:DC:57:CF:AF:B1:9A:DC:20:AD:6B:4C:09:B4:7A:B1:25:A0:58:3F
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/368b2214-7bd0-422d-8799-72be405f98e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:133a::/47

    Signature Algorithm: sha256WithRSAEncryption
         47:58:df:3b:53:9c:33:5b:14:97:75:9b:ec:e4:b1:46:f9:a9:
         8a:f8:02:d8:01:2d:5d:59:93:d1:a1:82:74:f2:e7:14:f4:a6:
         0b:52:34:0b:ee:7a:c5:c7:ae:86:18:83:86:9e:0e:90:07:c8:
         1c:f9:94:7c:ff:4e:01:36:67:ca:a4:70:30:e0:49:ca:0d:69:
         d6:f6:78:87:7a:57:c9:5e:8d:16:83:d3:29:cb:73:db:e8:4a:
         c9:78:08:f2:0f:db:a1:01:55:13:e0:5a:c8:bf:c8:94:b7:43:
         06:3c:7a:ef:65:2d:cd:9a:95:ad:79:23:eb:81:42:f9:3d:f4:
         1a:ec:fe:49:9e:ed:af:e9:7a:f7:c8:68:e1:89:88:68:e4:7c:
         0c:73:8a:05:58:48:d1:cf:7e:7e:21:a5:4f:f6:82:46:e7:75:
         2d:87:b3:b3:f9:27:88:33:aa:e4:fe:b2:5c:c8:c6:83:5b:cb:
         d7:e9:05:6b:04:7c:eb:b3:bd:5b:0b:fd:50:71:85:98:0b:2e:
         dc:0f:cf:fc:92:9c:66:e8:3e:57:7c:b6:f2:1e:d0:69:eb:84:
         af:37:d9:46:62:e2:ae:1d:4b:07:4d:b8:2c:8e:c9:57:cb:16:
         80:dc:1e:01:4b:bf:60:dd:0f:7b:9e:d8:69:aa:bc:ac:9c:29:
         5a:9b:06:3b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Nov 18 08:25:06 2025 by rpki-client