Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9fc270cc-6825-4544-8f57-1a8b26d95309.roa
File:                     9fc270cc-6825-4544-8f57-1a8b26d95309.roa (raw, json)
Hash identifier:          2l3uGP6qqrjtztGaQQ/qU8LA6nmAz107GbGtbqLc99s=
Subject key identifier:   1B:A6:E9:BB:0A:23:DE:88:31:FC:66:71:2E:BA:50:58:9B:8D:11:F3
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       16760511D45C613B3EEDCF095A4E13665DF8C77F
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9fc270cc-6825-4544-8f57-1a8b26d95309.roa
Signing time:             Fri 31 Oct 2025 03:58:08 +0000
ROA not before:           Fri 31 Oct 2025 03:58:08 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:32b8::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 19 Nov 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:76:05:11:d4:5c:61:3b:3e:ed:cf:09:5a:4e:13:66:5d:f8:c7:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 03:58:08 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=f706d842585c2dd9a76bd0e004560ac014a09f71d43f6de6ca77f8ba10acbfc7, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:78:95:34:91:39:5d:d8:da:ea:8f:b7:b5:3e:
                    85:20:e6:41:85:df:fe:41:db:09:81:24:62:b7:f6:
                    3b:49:18:a7:19:8e:f5:d4:d8:47:1f:0e:23:de:f9:
                    e2:4c:21:13:86:e3:fe:be:8d:9a:d9:b4:52:f7:f5:
                    10:8a:f2:74:53:1d:b3:f2:ef:69:56:c8:b5:fe:bc:
                    0f:6a:cc:10:07:a0:a6:f9:c6:c9:d6:7e:21:cc:54:
                    55:23:3c:4e:5a:5f:49:36:94:e8:17:6d:b5:05:06:
                    cb:4e:3f:c9:98:57:45:53:b1:68:a6:49:19:be:98:
                    05:72:90:5e:5d:8c:b9:be:2c:4a:39:5f:8f:a1:fa:
                    01:66:3f:96:3b:a1:55:94:98:48:92:c8:07:96:e3:
                    44:b6:f5:1d:6f:bb:c2:4b:b3:8e:3f:93:1d:46:47:
                    24:88:a6:fe:2b:53:63:6e:59:73:dc:34:a7:d7:c7:
                    85:6f:d5:95:81:c0:1c:a4:79:b8:e2:4b:fa:a2:8c:
                    ed:c4:e5:ff:16:4f:89:55:6a:56:f6:84:50:ba:3d:
                    8a:70:c2:c8:c2:bd:f5:2b:22:c2:b0:a2:1b:e5:1c:
                    0c:77:66:4b:24:4a:84:4a:a7:e9:6c:65:cf:db:20:
                    05:38:55:67:8d:a4:25:97:a6:47:13:3c:36:ac:4c:
                    84:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:A6:E9:BB:0A:23:DE:88:31:FC:66:71:2E:BA:50:58:9B:8D:11:F3
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9fc270cc-6825-4544-8f57-1a8b26d95309.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:32b8::/46

    Signature Algorithm: sha256WithRSAEncryption
         91:85:0c:d2:4c:77:b8:d1:70:b2:32:fa:a9:31:a9:d5:cf:d9:
         70:bc:9b:8d:2d:66:51:99:80:40:10:ad:c4:bf:9c:61:f8:69:
         6a:49:b7:e7:34:32:fe:fb:6c:50:b6:60:5e:e9:de:ad:59:6b:
         3f:9a:c8:0f:4b:0a:15:a9:00:ed:5b:d5:54:99:f1:64:7b:74:
         50:fb:e6:2c:68:e4:45:6e:ea:e5:5c:6f:96:df:04:78:d7:57:
         c2:84:de:10:05:ae:b6:54:e8:14:88:29:d8:a2:c6:3e:58:87:
         ea:b6:d4:57:47:a9:96:4e:ea:98:19:01:a8:17:be:df:d7:f2:
         bd:95:a9:be:96:ba:67:4a:6b:1b:79:fe:db:f1:9b:56:dd:9f:
         a7:71:e5:80:2e:43:e4:c2:ea:38:67:38:18:07:28:00:4b:2b:
         e3:92:26:ef:46:ff:05:2d:8e:ca:fd:32:58:b5:2a:a1:23:ae:
         60:08:41:7f:2a:44:73:8c:3f:46:d3:2d:05:55:a8:44:9d:6b:
         c0:40:c5:65:30:b8:38:48:53:e0:b4:6f:41:3f:7e:d0:71:ac:
         93:8e:4b:34:97:dc:41:d2:36:a1:b8:f5:bd:e7:83:7d:3f:d6:
         e4:ac:02:fa:50:b1:cb:53:e7:2a:75:ba:e6:26:f0:8d:93:c0:
         3c:e4:a5:55
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Nov 18 08:22:27 2025 by rpki-client