Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7bed41a4-fe4e-4c30-be81-98bc05d2b982.roa
File:                     7bed41a4-fe4e-4c30-be81-98bc05d2b982.roa (raw, json)
Hash identifier:          Wxv/VMaPFtHouFDH6LGWtuz1x2LU/+0EetD9fcISfVw=
Subject key identifier:   CB:44:DB:45:5B:5C:9D:6D:2F:2D:9F:BE:82:5D:EB:C8:3D:D4:CD:22
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       73722398D9426F6CEDF9A1EC75CA3A6AA3B3757C
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7bed41a4-fe4e-4c30-be81-98bc05d2b982.roa
Signing time:             Fri 31 Oct 2025 02:55:36 +0000
ROA not before:           Fri 31 Oct 2025 02:55:36 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1a20::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 19 Nov 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:72:23:98:d9:42:6f:6c:ed:f9:a1:ec:75:ca:3a:6a:a3:b3:75:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 02:55:36 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=6c214aa07f4a6374aa9b06fa36e0a7b0cd2c9eb1c2c1f87e9d5a88ab32127789, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:7c:e4:6c:1b:d3:d3:07:7c:68:f5:3a:a6:02:
                    18:69:fc:cb:85:5c:16:16:64:ab:24:bb:9e:1c:21:
                    b0:2a:85:c1:06:bf:24:f1:a4:9d:8b:d5:b4:c5:00:
                    45:52:7b:27:dc:39:e8:74:9c:06:70:90:91:69:2b:
                    de:f4:f2:0c:e0:87:0d:90:57:09:7e:2b:e7:5e:8f:
                    33:08:c9:2e:1d:61:5d:d8:aa:13:0f:1c:42:24:d2:
                    79:22:45:77:56:2c:08:f9:1c:69:f8:d2:11:4d:0d:
                    49:ca:03:5e:ea:59:99:54:31:ee:65:fa:46:33:9e:
                    e3:de:43:a4:37:18:b4:e7:ae:84:31:fc:93:cb:c8:
                    34:b1:5a:f4:48:e7:a9:bd:b2:dc:9a:9c:17:32:5e:
                    d4:93:ca:58:1d:c1:f0:93:ff:d5:97:6b:e2:b1:0e:
                    f6:16:db:43:17:63:f6:ea:54:16:6f:0b:6d:43:a6:
                    58:fe:cc:5f:ec:18:dd:9e:06:15:eb:89:e7:11:d0:
                    b2:92:20:56:d3:f8:b5:11:85:c5:cb:b9:12:e5:6a:
                    6f:67:60:65:0e:6f:7c:27:60:fd:88:d4:14:f9:dc:
                    4c:cb:3e:5f:ef:41:bb:3d:e0:f8:35:3b:58:06:3c:
                    b4:d9:ff:09:ea:a6:4a:5c:78:aa:80:92:5e:bc:84:
                    af:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:44:DB:45:5B:5C:9D:6D:2F:2D:9F:BE:82:5D:EB:C8:3D:D4:CD:22
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7bed41a4-fe4e-4c30-be81-98bc05d2b982.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1a20::/46

    Signature Algorithm: sha256WithRSAEncryption
         51:6f:29:e8:dc:12:4d:28:ac:57:8b:60:9d:8f:a3:20:8c:b1:
         3f:0b:53:95:2a:80:d4:af:50:58:f4:d0:ee:d6:48:15:c5:82:
         00:1d:93:0d:67:6a:dd:cc:b0:36:12:60:65:55:6b:be:4f:b5:
         70:67:f7:94:84:c8:66:61:d4:0a:98:0c:d6:c9:32:b2:c4:5e:
         68:21:e6:f0:48:ac:82:ab:4a:0f:0f:c4:07:6a:d9:8a:be:ed:
         d9:37:36:99:24:92:3f:2b:22:ef:ba:fc:ce:af:a8:df:5e:cc:
         26:21:d0:13:e9:f4:35:8e:0e:b8:be:40:fe:6f:1f:b1:b9:93:
         b5:41:ae:b5:39:cd:9f:78:6a:ea:0a:3a:6b:fe:5a:98:5d:f3:
         17:e4:1e:31:d2:21:57:e9:2d:3b:2d:b4:72:5a:d2:fd:6d:34:
         88:50:05:99:c0:4a:96:17:e8:94:98:f0:a5:64:8a:3c:4f:29:
         65:b8:d1:aa:a9:b6:d8:6f:47:7c:71:81:a6:66:d5:11:a8:9b:
         71:f4:63:fb:53:c8:1a:3b:79:88:5a:1b:a6:cb:b9:42:b5:f1:
         95:1b:c8:6b:c6:9a:c2:e5:b2:6f:57:c4:b0:73:40:3f:55:be:
         d6:98:e2:9e:e2:d1:7a:dd:ce:46:0d:00:e9:e9:90:80:88:a5:
         57:67:bb:dc
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Nov 18 08:24:28 2025 by rpki-client