Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6b26b1cb-8805-4d81-89c8-b1526666152f.roa
File:                     6b26b1cb-8805-4d81-89c8-b1526666152f.roa (raw, json)
Hash identifier:          BJYudZ/bBTKxEVx6fEmsGWsyTUBqrL6mE9uXv8XSxws=
Subject key identifier:   F9:0E:67:67:83:F6:81:56:24:5A:78:BD:D3:77:6B:3E:7C:D5:22:E1
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       17A901D001D87C8403DCE2A068A3CF1B4DB5E7F5
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6b26b1cb-8805-4d81-89c8-b1526666152f.roa
Signing time:             Thu 30 Oct 2025 23:42:13 +0000
ROA not before:           Thu 30 Oct 2025 23:42:13 +0000
ROA not after:            Thu 04 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2eee::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 19 Nov 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:a9:01:d0:01:d8:7c:84:03:dc:e2:a0:68:a3:cf:1b:4d:b5:e7:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 30 23:42:13 2025 GMT
            Not After : Dec  4 23:59:59 2025 GMT
        Subject: serialNumber=ee1e9d0a65e8d7c7f23219d358c5a7ff00cfa0784bb1d5d6f71fc5b3cf9e5cfb, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:4d:58:24:e1:87:07:a6:80:64:59:d2:6c:c1:
                    bd:7d:db:61:b1:81:a9:fc:6f:1e:0a:56:56:9d:a1:
                    e9:fb:6a:7f:40:b6:59:c5:ac:ba:4a:1a:8b:46:30:
                    26:66:17:df:28:40:56:59:f8:72:56:af:b4:ce:3b:
                    1a:d3:2f:22:36:aa:e5:a6:ae:af:2a:4d:f5:45:9c:
                    80:6c:ea:99:60:e6:ed:4e:96:75:d7:90:89:74:a2:
                    cd:2a:6c:bf:75:1d:85:a5:37:bb:f3:f4:b2:4f:42:
                    80:32:96:6d:5f:18:43:79:a1:c4:4b:81:f2:2f:13:
                    e2:82:de:1c:01:62:d7:16:01:a7:d8:e4:60:70:e5:
                    47:3f:db:f4:e5:e4:21:e6:24:10:44:01:36:ac:f1:
                    60:df:f0:a8:dd:c7:66:77:d7:84:83:73:f0:2d:74:
                    d3:1e:db:ea:82:d8:98:70:4f:86:1a:dd:4f:21:ed:
                    87:f7:5c:f9:37:9a:cd:28:0e:3d:5f:b1:23:d1:e0:
                    6c:91:31:64:62:bb:5f:6d:72:5e:85:53:37:3f:0b:
                    a2:b4:b1:d2:8e:ec:5f:f8:0d:b3:c6:44:6c:dc:01:
                    0e:e4:cf:b1:41:63:25:10:f5:6f:a2:4c:85:8d:38:
                    a6:5b:44:1e:56:ed:73:58:b7:98:59:8c:28:b1:0d:
                    58:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:0E:67:67:83:F6:81:56:24:5A:78:BD:D3:77:6B:3E:7C:D5:22:E1
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6b26b1cb-8805-4d81-89c8-b1526666152f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2eee::/47

    Signature Algorithm: sha256WithRSAEncryption
         6c:df:d0:08:56:25:ea:61:ed:d3:b9:03:fb:d0:95:f0:49:5c:
         f6:59:cd:38:2d:60:1f:c8:23:58:1d:94:e7:75:a1:6b:99:ea:
         8c:3e:40:02:44:69:8c:0a:b9:60:1e:ad:8b:4f:bb:3c:67:80:
         ae:a3:68:5e:bf:0f:66:98:65:03:82:c3:69:04:02:df:d0:05:
         35:6e:3e:00:e8:b2:e9:8f:48:b7:e0:40:e3:21:5c:29:fe:e2:
         d1:5b:29:2a:f1:2b:96:55:ec:ac:c7:46:0e:51:35:bc:63:ee:
         7e:5f:85:8a:f7:b1:44:12:ce:a4:38:74:3f:59:4c:d7:2f:5b:
         34:46:73:82:05:ab:08:44:dd:5f:86:a3:48:be:62:d7:e2:c3:
         e6:7c:81:0a:4c:e0:6b:02:87:1a:8d:a7:52:90:d0:58:84:80:
         77:79:30:42:66:24:0d:fe:4e:dc:88:72:37:39:31:10:9b:5f:
         1c:0a:99:ab:ac:e7:68:3f:61:c9:76:5d:e8:5f:e3:ad:8b:ab:
         1b:24:33:a4:44:b6:04:d4:e8:09:0f:52:47:a8:90:71:04:68:
         02:d1:5e:40:50:a1:7b:ae:a8:f5:92:c6:27:46:9a:40:09:83:
         fc:1b:29:73:78:91:15:3e:77:c2:d7:f0:ae:40:cd:fb:b8:a5:
         7e:43:f4:ab
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Nov 18 08:24:38 2025 by rpki-client