Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/06d5c532-9ead-44f3-8ca8-e9ac223e8bd5.roa
File:                     06d5c532-9ead-44f3-8ca8-e9ac223e8bd5.roa (raw, json)
Hash identifier:          cnLmQkHHhLNsRD0tNS75axBkOa/RsiPtpHDcbpY4KG8=
Subject key identifier:   C6:72:E4:CF:06:57:8F:A5:D9:20:BC:B7:25:35:84:35:8B:14:6C:19
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       742AEC578B7F0D9E10A842F173FBADB33C2DDC94
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/06d5c532-9ead-44f3-8ca8-e9ac223e8bd5.roa
Signing time:             Fri 31 Oct 2025 06:55:00 +0000
ROA not before:           Fri 31 Oct 2025 06:55:00 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3240::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:2a:ec:57:8b:7f:0d:9e:10:a8:42:f1:73:fb:ad:b3:3c:2d:dc:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 06:55:00 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=0f2180ae6f2473073a3bda5a31d39e0f473b5be2599225f1db78fdb6d234a4e1, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d8:ec:15:4c:25:9d:7b:96:aa:fd:80:80:56:
                    10:c1:36:db:f0:83:f7:ac:66:d9:58:17:35:82:57:
                    9f:f3:9b:08:2a:6f:23:10:da:26:2f:97:d1:92:64:
                    e2:a8:ed:12:c5:76:23:ae:01:17:1f:b5:28:9a:dc:
                    ca:2d:2d:fe:d9:5a:69:75:a7:1c:8b:56:7e:93:9d:
                    2f:67:62:1d:e3:a4:75:e0:38:e7:04:c6:c4:48:9b:
                    15:f9:be:4a:b6:05:90:88:10:76:fe:0f:16:8d:3b:
                    51:14:35:2c:01:dc:87:4b:d8:58:a0:a9:a2:43:85:
                    44:67:e7:ad:9f:a7:f1:3a:99:94:00:7d:ed:92:90:
                    ce:fb:4f:fa:83:14:d4:09:38:ab:d2:7e:d2:ec:0c:
                    b3:d1:17:22:56:54:03:d9:32:81:d0:fb:e1:6f:66:
                    b7:c6:e6:98:20:d4:9b:a1:44:72:48:b4:39:b3:fb:
                    49:87:bd:9f:db:d3:ed:10:fc:8f:31:67:3d:0c:c0:
                    31:70:6a:8b:f6:ce:fe:5f:df:8d:70:26:f2:6f:4e:
                    5f:ea:62:76:74:6e:8d:e6:66:65:52:31:6b:01:b0:
                    3c:9f:bc:1c:02:a5:71:67:88:a7:e8:43:6b:d8:9a:
                    9d:9a:0f:06:49:8c:28:98:bc:30:9f:13:8c:61:da:
                    12:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:72:E4:CF:06:57:8F:A5:D9:20:BC:B7:25:35:84:35:8B:14:6C:19
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/06d5c532-9ead-44f3-8ca8-e9ac223e8bd5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3240::/44

    Signature Algorithm: sha256WithRSAEncryption
         73:b4:fc:f8:37:6d:14:d8:42:9f:eb:9e:fd:78:39:29:59:d2:
         20:64:ec:3d:4b:1e:38:12:af:7a:3e:85:f7:c3:52:da:37:1d:
         28:17:4c:74:83:94:7b:c4:df:26:8a:48:62:d1:1e:b3:3c:45:
         ed:30:4e:20:e0:e3:ae:19:9a:72:cc:8b:5a:77:73:bb:4d:36:
         a0:ae:82:a9:57:5e:6d:22:c2:48:00:8d:5c:e5:03:3a:eb:62:
         fa:e0:74:55:cc:6c:47:73:2d:79:4d:1e:7f:db:bf:c8:c1:dd:
         17:65:05:6b:2b:a9:b8:10:41:ee:ea:99:ac:3f:73:5c:5e:3d:
         35:af:a1:54:af:09:02:b5:33:9f:a5:cc:b2:78:58:65:ad:7c:
         58:f2:53:48:77:a1:5e:92:ab:b3:14:e4:84:12:91:44:7b:80:
         b9:c3:27:28:bd:5a:9f:92:33:9b:71:1f:76:7e:4c:94:28:56:
         e6:48:3f:2c:b0:b8:9f:aa:59:b1:ac:24:4b:80:ff:e3:96:2f:
         fb:76:4c:40:d7:be:2f:09:b5:bd:2f:c5:39:aa:99:72:b6:95:
         54:20:92:64:e9:15:61:5a:7e:5c:dc:b0:78:1f:d1:dd:60:df:
         8f:98:0d:bc:2d:8c:e1:1a:d3:15:c9:54:e6:13:47:e4:27:c7:
         9e:b3:df:5a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:38:34 2025 by rpki-client