Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6b2edd56-e848-4e54-babb-f4e4d1380bc9.roa
File:                     6b2edd56-e848-4e54-babb-f4e4d1380bc9.roa (raw, json)
Hash identifier:          TzdRi05yqPfSLlKSpg1fKW5wDoGYUVUAQSQcqQTEJHw=
Subject key identifier:   7F:44:24:BD:FE:CC:7D:20:D2:F5:A0:7D:68:87:01:E4:70:DA:99:77
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       228D65DE4E6E7EEDA458D6505B4F7C035D116CDE
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6b2edd56-e848-4e54-babb-f4e4d1380bc9.roa
Signing time:             Thu 30 Oct 2025 21:41:56 +0000
ROA not before:           Thu 30 Oct 2025 21:41:56 +0000
ROA not after:            Thu 04 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:18c0::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 19 Nov 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:8d:65:de:4e:6e:7e:ed:a4:58:d6:50:5b:4f:7c:03:5d:11:6c:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 30 21:41:56 2025 GMT
            Not After : Dec  4 23:59:59 2025 GMT
        Subject: serialNumber=ab659e49f9ea9f2fa8a51f2a3651234a813a1a40fe5e6245484ecc81c19af1fe, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:5c:f2:cb:c7:54:2a:b9:f8:7a:d6:8d:0b:87:
                    f3:88:7f:a2:e1:fd:eb:bb:64:2a:e2:f9:dc:25:ac:
                    84:41:c8:a1:d6:b9:b3:93:4f:49:3d:56:a9:84:9d:
                    dd:08:23:fe:bb:f9:99:fb:d4:6d:dd:19:e1:db:29:
                    f6:b7:2a:3b:eb:36:3f:c5:9e:88:8c:e2:9b:15:5d:
                    9a:d8:65:1f:db:22:dc:5e:89:5e:6e:91:67:59:fc:
                    9e:76:ce:fe:a4:fa:b2:7a:fc:67:ff:5b:b3:85:a1:
                    cd:08:4c:55:fb:5f:bd:68:70:45:bf:7b:ab:4e:a8:
                    6e:20:2f:cf:df:6b:2e:ca:f5:62:81:9d:c0:88:34:
                    76:e5:bf:51:55:6b:f2:af:9d:ac:ff:65:86:ef:17:
                    b3:73:04:71:7e:c6:ae:12:f5:49:a5:f4:18:03:5a:
                    96:1c:88:b1:cb:35:95:b9:f1:3c:28:c9:ad:c0:9b:
                    09:7d:92:02:5f:8b:33:52:1f:4a:e0:f3:b5:82:c8:
                    be:e5:86:13:ae:0b:e3:20:14:a5:bb:bd:2e:c5:b8:
                    0a:a0:53:52:01:88:1f:e4:50:32:5c:44:df:7e:c5:
                    c0:b0:47:18:b1:1e:68:cd:e4:cf:6d:25:44:e0:a2:
                    59:8e:29:1a:db:71:9f:4f:a0:ea:d6:df:d7:5f:fb:
                    53:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:44:24:BD:FE:CC:7D:20:D2:F5:A0:7D:68:87:01:E4:70:DA:99:77
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6b2edd56-e848-4e54-babb-f4e4d1380bc9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:18c0::/47

    Signature Algorithm: sha256WithRSAEncryption
         a9:5a:f8:7a:67:20:df:1c:b1:f2:59:0a:62:3c:fa:c8:82:17:
         de:63:f9:37:19:3d:21:74:b4:2b:53:5d:98:a0:6f:81:b1:b2:
         e4:73:20:b2:a7:8e:67:aa:5a:3f:bb:61:97:f1:ef:a2:92:1f:
         e2:38:29:13:b8:64:69:12:4f:98:bf:5c:57:f5:02:2d:19:5d:
         e2:3c:be:a2:9f:21:55:9c:83:a5:ba:7b:b5:09:ca:db:d6:53:
         e2:62:63:0e:79:f8:3e:68:8c:6b:13:d4:b7:2e:95:d0:74:c0:
         77:28:0a:6e:e1:3f:78:3c:18:d2:81:17:e2:5d:bb:8e:a6:6e:
         d9:df:5f:2b:ea:ad:c6:5b:ea:be:08:24:74:86:17:e2:90:8c:
         97:f2:ae:26:78:9e:b2:f5:0b:b2:11:4d:05:b0:7e:5a:0f:d4:
         5f:6f:10:10:eb:70:3d:df:33:13:c4:be:50:2e:09:73:b5:dc:
         31:8f:e7:c6:84:ff:9f:da:58:3e:1f:27:94:0e:d2:17:e6:1f:
         ec:2c:62:1b:30:e0:8c:d5:92:8a:a8:35:48:a8:a2:c6:41:87:
         db:45:f6:7b:59:f1:1b:d5:58:10:38:23:0a:fa:a6:05:ff:1c:
         44:47:20:ae:54:df:6a:12:eb:0e:f3:f7:2f:f0:6f:c1:51:8b:
         02:e3:21:8d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Nov 18 08:24:40 2025 by rpki-client