Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/084e562e-b76e-4f6b-ac20-f4884a1def8a.roa
File:                     084e562e-b76e-4f6b-ac20-f4884a1def8a.roa (raw, json)
Hash identifier:          qaQMku56jza2/itv9IW2jhFzSqomjdwSn9ja09lpBWs=
Subject key identifier:   FB:83:75:C9:E9:D0:65:6E:34:4B:ED:E6:08:D7:1E:17:A9:44:42:96
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       5C6FDB5F77619EDCEDDEF67F5AF0094CB851A119
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/084e562e-b76e-4f6b-ac20-f4884a1def8a.roa
Signing time:             Fri 31 Oct 2025 02:53:44 +0000
ROA not before:           Fri 31 Oct 2025 02:53:44 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:18fc::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:6f:db:5f:77:61:9e:dc:ed:de:f6:7f:5a:f0:09:4c:b8:51:a1:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 02:53:44 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=3f3b3e3d62f16606c7e01c6a622a4cf3ad0346fc25e654e29522c0ac842cbb8b, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c0:58:79:be:e8:81:df:b1:08:ab:66:1e:fb:
                    65:3e:78:a4:81:f5:d0:11:87:60:1e:af:91:84:46:
                    16:35:6e:8e:96:a0:ad:58:5a:0b:15:99:1c:6d:41:
                    f1:24:d7:e0:96:cb:60:e3:63:da:db:77:a9:5d:9f:
                    1f:13:70:dd:a7:fb:ad:a5:b6:41:91:6b:f5:6f:20:
                    c5:42:a9:4b:9e:6d:73:50:12:51:a8:24:ac:81:76:
                    48:53:76:2a:d4:8b:59:d9:52:d1:8a:bf:d2:c5:1a:
                    f7:f4:db:88:01:12:71:c4:1b:d3:e2:98:13:90:dc:
                    ce:af:42:80:98:70:b5:90:91:1f:10:8f:65:c5:03:
                    01:87:c2:31:c8:a6:09:0f:4c:e1:16:c4:3d:78:85:
                    76:43:12:9c:c2:90:12:c2:e5:be:e9:04:0a:6e:da:
                    fb:f8:58:92:62:53:a8:ab:aa:ef:f9:c4:f8:03:85:
                    16:a7:a0:b8:90:78:57:f5:a4:4a:8d:44:e9:44:a5:
                    12:98:b2:d1:28:7a:7f:87:6e:1d:65:d3:68:70:f9:
                    d9:7c:92:e6:54:b0:2e:24:48:af:e7:66:37:fd:99:
                    c8:f5:47:6e:d1:9b:42:39:59:57:8a:6f:9c:fd:bf:
                    3d:ee:94:78:91:1e:16:76:72:41:7e:f7:58:4f:74:
                    8e:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:83:75:C9:E9:D0:65:6E:34:4B:ED:E6:08:D7:1E:17:A9:44:42:96
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/084e562e-b76e-4f6b-ac20-f4884a1def8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:18fc::/46

    Signature Algorithm: sha256WithRSAEncryption
         b2:b3:37:bf:49:7d:5e:2d:0f:99:69:b9:45:b5:92:cf:71:c1:
         73:cb:d1:fc:43:5f:27:12:ad:63:bb:85:64:ee:3f:d2:f4:72:
         5d:3d:dd:67:2d:77:9d:f2:22:eb:bd:6e:6c:47:f9:f0:96:81:
         9f:52:71:f5:4a:57:91:f5:6f:8e:d7:7a:40:27:ab:47:0b:7d:
         92:c6:95:c4:ea:34:6d:a9:fd:3c:e7:32:8e:71:22:33:d8:76:
         51:50:d5:aa:08:ac:16:15:c6:d7:d2:fd:b6:94:c7:4e:5c:b5:
         3c:70:0c:b1:c4:a9:b6:79:58:f2:73:2b:77:f5:52:80:1f:35:
         e4:f3:4a:3e:73:e5:49:ef:34:96:31:1b:08:54:97:de:2a:c8:
         d1:59:9f:11:c7:a7:5f:56:c3:fb:88:ae:ee:55:4e:b5:a9:94:
         e8:93:b9:e6:45:ce:01:01:58:b6:00:fb:3f:fc:1a:6e:10:fe:
         67:f6:1f:34:ce:94:80:b5:5f:ac:22:92:bd:0d:c1:13:21:09:
         5d:6b:5b:e9:b2:d1:0a:aa:59:ed:ea:07:31:e4:7f:fa:9c:52:
         c0:8c:52:e2:e4:5d:34:d3:6d:e0:b6:c7:20:8f:82:54:d6:be:
         fb:b1:43:dd:01:98:a9:73:5d:ba:01:5f:7c:c1:6d:5e:2c:9a:
         88:9b:f7:b7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:38:57 2025 by rpki-client