Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8ff252f1-667f-4ddb-b25f-c9561aa22888.roa
File:                     8ff252f1-667f-4ddb-b25f-c9561aa22888.roa (raw, json)
Hash identifier:          YykvypcJUresQKtfKovEuIRs2WRbuVUKLlh8CcuyeRg=
Subject key identifier:   61:EC:C2:1E:2E:35:99:A2:6F:0A:F7:BA:5B:3B:DE:DB:EF:CA:49:3B
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       482AD7B6511BE6BB28233F337C9AA2C7C09C5457
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8ff252f1-667f-4ddb-b25f-c9561aa22888.roa
Signing time:             Thu 30 Oct 2025 22:12:07 +0000
ROA not before:           Thu 30 Oct 2025 22:12:07 +0000
ROA not after:            Thu 04 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1bb8::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 19 Nov 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:2a:d7:b6:51:1b:e6:bb:28:23:3f:33:7c:9a:a2:c7:c0:9c:54:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 30 22:12:07 2025 GMT
            Not After : Dec  4 23:59:59 2025 GMT
        Subject: serialNumber=afd8f1e1dd97fc89c1351aff2bed82bcffce0976d50551514d91f854544086cb, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:2f:b0:9b:5c:46:34:0e:e6:c3:5e:f3:80:b3:
                    14:dd:8d:40:40:b9:6c:88:93:ec:18:57:ef:73:3d:
                    51:7c:20:b8:75:c6:10:f1:ba:62:b0:7b:4f:1c:f6:
                    7f:5e:72:3c:c0:7e:eb:7b:c1:54:e1:12:83:1b:a5:
                    d4:5c:7c:e2:17:86:6a:b8:f6:62:b4:25:bc:da:75:
                    a4:04:a9:a9:52:4f:50:14:02:d2:c5:20:01:c4:8e:
                    14:f8:b0:c2:07:81:e6:2b:1c:3a:0d:d5:97:20:fd:
                    b8:a0:76:d4:e2:ad:20:d9:43:6c:14:9f:9d:64:1d:
                    66:a2:51:eb:b1:cc:bd:ed:a7:63:d8:d4:1e:f6:9e:
                    53:26:a5:51:3f:53:03:fa:3d:77:24:79:d0:e7:c2:
                    de:ed:03:46:4c:91:85:dd:63:0f:1b:a0:66:e0:69:
                    a7:04:fb:3e:0d:f6:71:df:cb:e2:7a:7e:06:b5:78:
                    dd:f2:58:57:28:f3:cf:8e:5b:d7:e3:98:16:90:4f:
                    67:7a:db:33:32:5a:6e:3b:8a:7b:ce:b0:12:a2:78:
                    7a:f8:86:b4:8d:74:ab:f7:91:9c:a3:1f:80:3b:96:
                    f6:26:b8:20:b1:6a:53:ae:ea:f4:37:11:35:c3:7d:
                    e1:79:c0:9a:14:ae:1e:ce:ca:d2:13:26:63:99:96:
                    24:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:EC:C2:1E:2E:35:99:A2:6F:0A:F7:BA:5B:3B:DE:DB:EF:CA:49:3B
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8ff252f1-667f-4ddb-b25f-c9561aa22888.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1bb8::/47

    Signature Algorithm: sha256WithRSAEncryption
         29:26:77:ef:61:dc:ab:2a:33:54:31:42:f1:8f:00:cc:75:22:
         84:da:72:e9:83:6c:77:3d:60:92:55:37:00:da:46:13:bd:9c:
         79:7b:6c:93:dd:f4:5f:5a:92:3d:e6:04:b5:55:e4:aa:dc:89:
         8c:38:9c:29:3e:f8:ac:ce:58:27:51:c4:5e:93:0f:18:bf:6a:
         8d:ff:15:fd:6f:84:71:af:df:72:7e:a1:4d:9c:95:7f:13:55:
         2b:90:06:47:87:e6:fd:e2:2f:d5:6a:1a:88:95:47:fc:e9:ae:
         6b:42:40:48:04:fc:63:86:20:5c:b0:9c:4a:39:d3:94:fb:bb:
         cd:a1:c8:b2:f4:31:8a:d4:a9:b9:4a:26:8a:53:d5:e7:36:6b:
         e3:71:6f:46:ab:71:e0:49:6b:37:6b:da:3b:82:4e:d8:ae:5e:
         de:a5:03:44:59:49:0a:10:4d:03:ad:ca:44:e1:df:51:0e:79:
         bc:c6:b2:fc:0e:27:72:a6:5c:6b:f4:ab:4b:94:85:3c:0d:29:
         7a:2f:12:6d:8b:e5:4d:34:36:d4:20:33:13:02:50:35:55:cf:
         9a:3f:01:cc:cb:38:3c:64:fe:f4:8f:0f:10:cc:7e:ef:05:61:
         57:c5:0a:28:d3:c2:db:7a:97:4f:ff:bb:92:80:86:f4:a2:e6:
         b5:84:e6:a0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Nov 18 08:24:56 2025 by rpki-client