Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/51eac0d2-835f-42e5-9647-b52aafbc7357.roa
File:                     51eac0d2-835f-42e5-9647-b52aafbc7357.roa (raw, json)
Hash identifier:          j4wG4Q1YHhYnWvD2YE2gl1s7KeCOM2zz8UtlB/5MynI=
Subject key identifier:   22:8B:B9:7E:1A:D6:17:84:EE:D9:90:39:A2:C9:21:F4:0E:D2:45:45
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       3F410BD68D4BDAE6C28AA5003BF5F1D1A5297D8C
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/51eac0d2-835f-42e5-9647-b52aafbc7357.roa
Signing time:             Fri 31 Oct 2025 02:43:10 +0000
ROA not before:           Fri 31 Oct 2025 02:43:10 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:17b8::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 19 Nov 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:41:0b:d6:8d:4b:da:e6:c2:8a:a5:00:3b:f5:f1:d1:a5:29:7d:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 02:43:10 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=296e892e7d80fe7caa8332bc47c854d2056ce3c41db25ef5f39b54312cb3b316, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a3:6f:5b:c6:25:8a:5b:7e:be:06:d3:0a:0e:
                    ed:bc:f4:bb:fb:1f:7a:3f:c5:5e:bc:52:4e:74:68:
                    bb:74:63:59:cf:09:50:be:93:7c:96:47:cd:7d:39:
                    a2:ea:33:ee:63:bf:9e:1b:23:1f:7a:b3:52:02:c5:
                    1c:09:93:52:34:03:be:f3:4d:d0:bf:71:8f:05:03:
                    b0:49:e3:1f:cb:35:d7:3a:80:f2:b0:35:43:bd:7b:
                    8d:e7:df:70:74:1a:2b:48:3f:56:60:de:f7:05:82:
                    d3:d9:c6:06:0d:9f:87:d0:e8:a2:04:07:ad:42:4d:
                    fd:5c:73:40:2c:38:05:b5:68:a9:16:54:b7:0f:eb:
                    14:d6:e5:27:da:24:29:14:d6:a7:c5:22:1d:61:a5:
                    cb:23:d0:0b:1c:b7:63:db:1b:6e:34:b9:93:3c:d4:
                    7b:00:a3:3e:64:c0:6c:f9:e3:fa:cc:25:f0:1a:21:
                    56:bc:18:d5:27:b3:9a:d0:13:25:09:f6:f9:2f:7f:
                    db:5e:fd:2c:0f:a7:7d:88:0c:4f:67:64:c4:8f:8e:
                    ae:d8:eb:e6:95:92:89:6d:28:ed:cd:16:50:d8:36:
                    c1:b8:62:39:e0:4a:e7:10:5c:47:e2:4e:88:70:5b:
                    05:5f:11:d8:60:46:df:37:ed:3c:6c:08:d3:e7:50:
                    83:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:8B:B9:7E:1A:D6:17:84:EE:D9:90:39:A2:C9:21:F4:0E:D2:45:45
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/51eac0d2-835f-42e5-9647-b52aafbc7357.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:17b8::/46

    Signature Algorithm: sha256WithRSAEncryption
         24:2f:2d:63:71:02:28:6f:b0:1d:f0:09:9b:8b:e1:4f:f6:ad:
         14:1a:7b:a7:31:13:b5:75:ab:d1:af:af:d5:61:89:92:61:59:
         55:13:df:f0:0a:0a:86:2d:d1:f6:72:bc:89:df:b1:bf:64:43:
         f6:5b:3b:e9:95:e4:54:f6:75:64:b2:b7:1f:ba:2c:e4:3f:7c:
         e8:15:28:68:68:25:94:fd:0f:db:94:4e:73:76:00:36:3f:1f:
         6f:34:43:b3:f8:d0:6f:da:76:37:59:95:41:e3:d9:71:f6:3d:
         6f:e4:86:c6:c1:d8:04:03:0e:65:ca:f0:b8:d5:db:29:42:9a:
         fb:14:58:9b:a6:30:83:f6:9a:c2:10:3d:51:b9:41:63:7e:16:
         5b:6f:2d:e3:58:f4:b9:4d:78:97:55:8e:a5:02:6f:de:73:47:
         33:33:cf:39:4f:b8:d9:0a:b9:18:8a:1c:27:62:4f:8c:42:61:
         9c:e6:ee:cd:6d:b3:4a:98:71:d0:a6:90:5d:aa:b6:69:27:48:
         2a:4a:fa:dd:79:95:c2:c1:9b:ff:9c:c6:c4:13:8b:65:09:31:
         38:fc:1f:95:b9:43:4e:c6:fd:02:a5:dd:46:59:7e:88:6f:7f:
         79:b9:3f:b1:61:ac:7d:91:79:76:18:d6:85:86:9a:b0:43:ad:
         f7:06:6d:de
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Nov 18 08:24:39 2025 by rpki-client