Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6b713b3a-c95b-4da5-a9ec-5def5744ead7.roa
File:                     6b713b3a-c95b-4da5-a9ec-5def5744ead7.roa (raw, json)
Hash identifier:          isRWxPfH4VpOmRSKrMHbflg/yt7gTbIOJ4kAWh7Xj8o=
Subject key identifier:   28:71:86:43:E1:A0:15:DF:95:3F:B9:E4:7B:E6:85:2D:53:1E:48:0B
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       214F15C018E7DE1CC3BE7B2AC3D790045CB41C3F
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6b713b3a-c95b-4da5-a9ec-5def5744ead7.roa
Signing time:             Thu 30 Oct 2025 23:39:01 +0000
ROA not before:           Thu 30 Oct 2025 23:39:01 +0000
ROA not after:            Thu 04 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2e7a::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 19 Nov 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:4f:15:c0:18:e7:de:1c:c3:be:7b:2a:c3:d7:90:04:5c:b4:1c:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 30 23:39:01 2025 GMT
            Not After : Dec  4 23:59:59 2025 GMT
        Subject: serialNumber=406232178800c786dc412c0ecc846358f0a83b1a7f652c5771745ad31d73505d, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:39:f0:d1:18:7f:aa:bb:a4:c1:07:ba:c8:4c:
                    a0:20:3f:1f:1f:b9:c1:35:39:22:07:80:61:7d:bc:
                    ec:19:d8:5a:5f:ed:91:2a:7a:24:36:94:51:f8:40:
                    1a:a2:9e:04:87:c1:4a:f1:9a:a5:ef:8e:50:b7:86:
                    98:0f:ba:e8:e0:02:03:e8:ef:e7:3c:40:7b:4b:05:
                    40:11:fe:a9:10:9e:58:de:51:a1:73:a6:31:97:4a:
                    83:fe:9c:50:45:db:49:57:09:d5:de:96:80:0d:32:
                    91:c6:b8:ff:e2:e1:0d:e1:10:a9:ca:9d:f2:32:3a:
                    42:c4:a9:52:53:4b:8f:cd:14:df:70:6f:1f:9d:b5:
                    bf:ef:bf:74:8e:f7:a2:da:36:90:7c:d7:50:84:70:
                    e1:10:0a:dc:bb:69:67:4a:b8:f4:3c:c5:76:d5:39:
                    c7:03:01:7a:e9:e1:2f:ed:68:7f:73:8e:a2:6b:a3:
                    b4:17:b9:b9:1f:b8:ed:5e:ce:98:99:44:02:d4:a1:
                    df:4e:7f:b7:42:21:15:59:2d:ea:ac:1b:83:9a:47:
                    e1:6c:7c:1c:b9:c4:79:1e:fe:e3:41:c9:81:67:75:
                    29:fb:f7:b1:35:ab:31:af:81:1c:f6:47:0f:eb:19:
                    03:c6:5c:d3:27:44:a7:44:0c:e7:39:25:84:b9:8e:
                    b8:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:71:86:43:E1:A0:15:DF:95:3F:B9:E4:7B:E6:85:2D:53:1E:48:0B
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6b713b3a-c95b-4da5-a9ec-5def5744ead7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2e7a::/47

    Signature Algorithm: sha256WithRSAEncryption
         bd:f6:d3:fa:25:7d:2c:bb:8c:6b:cf:3e:67:18:d6:a1:a4:82:
         e5:38:51:98:4e:02:20:25:a3:df:8c:08:99:f0:6d:d4:84:71:
         2f:2f:c1:18:40:dd:18:32:3e:7c:cb:a9:81:7c:cb:6b:22:60:
         bf:a4:a2:60:6f:69:46:4d:77:01:54:fd:56:0b:35:b5:f2:cb:
         e7:ca:05:3c:af:0c:ad:ed:26:98:14:53:29:8f:ce:7d:78:aa:
         cc:28:aa:e3:e1:27:47:33:5d:ee:c2:ae:49:cb:0b:e3:c1:ca:
         30:6a:2e:e7:49:b6:96:f1:ad:26:09:de:e2:8b:4a:f9:77:44:
         9f:7c:97:60:22:20:f8:26:81:e8:fc:97:14:fd:a9:e9:47:64:
         6c:89:d4:bb:9b:84:c6:9c:de:2e:f9:41:27:03:71:1d:be:4f:
         a8:47:c7:37:70:dd:ee:7f:89:6f:7a:d6:07:70:a7:4c:b7:e2:
         37:85:50:95:2e:7c:42:9d:46:71:ba:f4:12:6b:21:76:30:64:
         71:fc:2c:55:49:3a:43:4a:1f:1a:3d:5f:72:6a:52:a3:f2:d6:
         1d:d3:ab:49:01:6a:b5:df:f1:bf:6c:f9:ab:70:6b:8b:3e:31:
         14:60:f0:96:d9:21:96:80:17:00:cc:dd:34:9e:7c:1a:9a:9a:
         55:15:de:7a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Nov 18 08:25:01 2025 by rpki-client