Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/569e3d4e-2303-42a6-944d-8af4008e7cb9.roa
File:                     569e3d4e-2303-42a6-944d-8af4008e7cb9.roa (raw, json)
Hash identifier:          biL9YNZntwOG3x176Df6PCOzRFVJ3l0tOpR9kObChDA=
Subject key identifier:   19:68:C6:3A:6D:F9:48:A2:6F:0E:03:78:4F:A8:18:70:89:B6:0C:1F
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       06BC91FFAC55FF8CED985EFBF2FEEF978AF6A03D
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/569e3d4e-2303-42a6-944d-8af4008e7cb9.roa
Signing time:             Fri 31 Oct 2025 01:21:50 +0000
ROA not before:           Fri 31 Oct 2025 01:21:50 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3acc::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 19 Nov 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:bc:91:ff:ac:55:ff:8c:ed:98:5e:fb:f2:fe:ef:97:8a:f6:a0:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 01:21:50 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=b4c64f520419b35bdfa12f3af557d85caeb067d9a63d7743cb6a94d9cbc28dfa, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:3f:c5:cb:a9:13:ec:69:3a:ee:b2:e8:95:33:
                    7a:53:97:17:f6:c8:bc:78:ca:7b:9f:8d:21:8d:07:
                    a9:64:cb:27:2a:53:61:ae:cc:4b:96:7a:11:48:1a:
                    96:c3:f0:c2:c1:39:e2:4d:10:49:78:e0:fc:f5:4b:
                    c5:f2:3e:56:de:38:27:88:18:2c:9f:fb:27:ee:fa:
                    a8:df:22:3a:f8:ca:48:db:92:ec:ad:6f:f4:30:2f:
                    1d:2a:c3:e9:09:7b:75:1e:8d:32:62:9b:77:49:62:
                    b9:18:35:8a:c5:a4:a5:07:8d:57:3d:a7:aa:d6:8c:
                    91:8a:b4:ae:ef:6a:fb:9f:0b:2f:16:b5:5d:fd:10:
                    af:52:81:68:31:0a:b3:46:fc:62:4f:f8:04:5a:5c:
                    47:f0:ee:31:93:a6:fa:2c:df:cb:03:0b:3b:18:d4:
                    e7:5a:c8:c3:bf:76:f6:c8:50:a2:c9:85:3b:4a:11:
                    e4:28:cc:40:14:1b:8a:bc:2b:f2:3a:0e:d9:f5:06:
                    e5:c8:87:70:87:b0:0e:b1:59:9b:31:cd:9f:01:65:
                    d2:18:4b:66:48:c7:7c:8a:a6:22:9b:6d:d5:67:52:
                    66:0e:91:18:c3:83:d1:39:98:4c:21:ae:eb:b6:03:
                    83:17:43:69:15:fb:8e:d4:d4:6f:86:2d:95:f8:97:
                    2f:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:68:C6:3A:6D:F9:48:A2:6F:0E:03:78:4F:A8:18:70:89:B6:0C:1F
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/569e3d4e-2303-42a6-944d-8af4008e7cb9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3acc::/47

    Signature Algorithm: sha256WithRSAEncryption
         44:95:ed:19:4f:3c:a3:c5:80:9a:4c:8e:21:69:48:35:51:8a:
         d6:96:41:e8:24:34:ce:72:02:fa:44:bb:02:f3:76:37:dd:7e:
         88:fe:8e:86:f6:0d:f0:1c:a4:5c:de:2e:dd:48:50:e0:82:bd:
         b9:9c:40:40:84:fd:8e:cd:7d:96:ed:fb:3f:85:7e:5f:cc:74:
         a9:a1:d0:d3:03:0f:82:4f:02:dc:13:51:0e:62:59:5b:b8:68:
         a5:ac:3d:7e:de:f5:64:12:75:e7:d9:8f:29:37:ed:2e:af:fd:
         f5:07:4b:85:07:7d:bf:02:04:53:c5:ed:50:11:44:84:68:ea:
         5d:d3:cc:61:62:5c:e9:b5:50:ea:90:88:af:ac:3e:bb:46:03:
         e7:32:d6:cd:8d:33:68:8c:87:82:e1:cd:79:5a:c8:be:3a:5d:
         3e:74:d6:60:30:73:b7:43:f1:90:3e:3d:d9:e2:fb:be:45:86:
         d2:02:43:d5:07:55:ca:ef:f7:ec:ee:bc:2d:ad:4c:65:de:e8:
         4f:12:9f:12:97:70:0c:0f:3d:ed:4e:a2:7b:07:94:de:cd:73:
         f6:41:1d:3e:de:df:6a:2a:b1:a2:6a:e5:ae:8e:90:f3:47:b2:
         af:e5:2f:88:b1:c3:48:d6:ab:6f:af:21:eb:10:be:81:da:64:
         1d:d4:c1:44
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Nov 18 08:24:22 2025 by rpki-client