Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/adf14655-f94a-4424-a53b-20b8546abaa9.roa
File:                     adf14655-f94a-4424-a53b-20b8546abaa9.roa (raw, json)
Hash identifier:          kkGOOe8C0FpKZ1Xvn9PvlR2IUwASly2d3shu3NdhR8A=
Subject key identifier:   5A:E6:B1:13:21:59:99:9A:49:86:DB:F0:CB:E7:DD:4E:C1:D9:3A:2D
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       70AB148F10B36142F3CC8CD84011A362B803D3F0
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/adf14655-f94a-4424-a53b-20b8546abaa9.roa
Signing time:             Fri 31 Oct 2025 05:12:22 +0000
ROA not before:           Fri 31 Oct 2025 05:12:22 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1658::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 19 Nov 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:ab:14:8f:10:b3:61:42:f3:cc:8c:d8:40:11:a3:62:b8:03:d3:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 05:12:22 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=711a81a749a79acd5b06bda27ace9201f25b5ea92724d1b88c9d773ea3aec961, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:0a:fd:a0:1f:b5:7f:db:53:03:4f:28:ad:b6:
                    aa:1a:99:ee:70:cf:56:7e:6d:d3:8f:06:26:18:a8:
                    bb:08:67:da:d2:24:92:8a:2b:c4:40:82:0e:48:74:
                    6b:7b:43:62:f1:3c:af:36:e3:9f:83:1b:3c:f0:78:
                    4c:c2:1d:f6:6b:3c:8b:e2:50:7a:85:b3:d8:b0:d7:
                    88:0c:41:d7:d8:75:43:fb:f7:47:b9:5e:47:98:9b:
                    f7:a0:b7:c5:89:a9:97:4f:65:bc:ed:75:52:c4:92:
                    6b:1f:0a:93:01:48:90:34:68:b2:9e:67:a4:d1:f6:
                    09:a3:0d:f5:21:82:8f:5a:a6:35:5d:91:38:7f:06:
                    c0:57:f4:fb:0a:22:b1:e2:5a:eb:fd:42:6a:dc:3b:
                    a6:7c:f6:a7:c5:0c:53:b7:3f:a2:1e:76:8f:41:13:
                    19:49:e7:cf:64:20:6e:d9:76:de:4e:34:ea:5d:5c:
                    19:49:a0:59:34:fb:f5:ef:b5:86:da:a6:08:3b:1a:
                    23:c9:74:d5:26:9f:21:50:42:07:6c:8a:98:45:d9:
                    ff:f3:7f:28:aa:1e:0e:37:09:68:c8:fe:17:8e:ab:
                    89:6c:ed:81:58:bb:b0:92:15:cd:2e:77:a2:1c:9b:
                    f9:13:64:9b:27:23:94:8a:b8:ec:5b:ff:c2:f2:e4:
                    0f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:E6:B1:13:21:59:99:9A:49:86:DB:F0:CB:E7:DD:4E:C1:D9:3A:2D
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/adf14655-f94a-4424-a53b-20b8546abaa9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1658::/45

    Signature Algorithm: sha256WithRSAEncryption
         21:db:2a:83:81:e5:bf:a4:c3:74:0b:09:98:39:8c:a3:36:03:
         05:35:d9:d5:4d:1a:1b:d8:f6:08:e2:ea:60:ca:da:7b:ae:e4:
         64:80:ec:27:ea:61:14:a5:0b:57:cd:90:e0:58:55:8a:68:ae:
         b4:0d:b0:9d:9b:d4:0c:f2:55:71:18:65:bc:44:5b:3b:cc:ee:
         3f:71:f2:bf:ac:47:8b:90:1a:44:b7:23:2c:ce:c6:75:07:08:
         68:28:b7:38:88:ac:68:d4:e9:99:98:61:55:e3:32:54:f8:d8:
         9f:f9:e7:c0:c7:96:f2:13:81:af:32:7a:5f:13:ef:5b:13:50:
         12:28:c0:21:29:fd:40:8c:ca:7d:4e:66:0c:8b:89:70:0f:75:
         f4:6b:98:04:12:3f:0a:8e:48:5d:b0:58:e7:1c:72:c5:a3:c1:
         5c:4e:0e:70:82:4b:04:6f:fc:c6:31:cd:ff:22:49:15:81:e6:
         f2:04:2d:92:07:34:16:e2:98:b8:9c:60:27:3e:30:a6:9e:b4:
         f7:cc:e2:e7:f6:f7:51:bd:e6:ca:9c:88:83:e5:75:90:7d:13:
         d5:fe:b0:cf:93:9c:32:ca:83:5b:f3:c6:d2:b6:81:21:79:9b:
         cd:d8:6f:c7:43:89:c9:fc:20:25:a0:3d:8a:41:09:15:9d:8a:
         20:88:0b:a8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Nov 18 05:41:41 2025 by rpki-client