Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0c92ff91-6c6e-4224-be14-c4c21f9b8dc0.roa
File:                     0c92ff91-6c6e-4224-be14-c4c21f9b8dc0.roa (raw, json)
Hash identifier:          +V/zQagg2OuSbGZfzEUoT4zPsel2gI/TQUtmEBSzXoI=
Subject key identifier:   D0:3C:9E:D8:0B:98:AB:83:2D:00:F4:C6:01:0E:CA:84:E8:CE:62:17
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       4DD4D5F01C4084E55E1D7595C65FCCDF4A61125E
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0c92ff91-6c6e-4224-be14-c4c21f9b8dc0.roa
Signing time:             Thu 30 Oct 2025 20:41:42 +0000
ROA not before:           Thu 30 Oct 2025 20:41:42 +0000
ROA not after:            Thu 04 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:12c4::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:d4:d5:f0:1c:40:84:e5:5e:1d:75:95:c6:5f:cc:df:4a:61:12:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 30 20:41:42 2025 GMT
            Not After : Dec  4 23:59:59 2025 GMT
        Subject: serialNumber=87c711105482c1471f5e8ae7a1140ceadd26fa75bc3a730d3b4d4b9fcace8fbb, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:80:77:66:69:55:71:2c:8c:f8:36:fc:79:69:
                    5c:60:89:f1:98:42:ff:f9:e6:22:9c:8f:12:89:4f:
                    7d:00:e3:c5:c7:b0:09:f8:3a:32:04:f8:bc:67:8d:
                    2f:48:4b:a5:d8:8e:c0:ac:cf:48:ef:a9:b4:2f:04:
                    fe:86:0b:5f:17:5d:26:a0:be:4b:0e:a2:61:84:94:
                    37:79:52:8f:3a:c9:56:61:ea:7d:d2:14:fc:ee:96:
                    dd:53:da:7c:98:bc:c1:52:43:7f:f7:56:01:65:3f:
                    66:c4:94:7b:56:1f:bd:4e:cf:c9:bc:f8:c4:20:65:
                    5e:2d:4a:d3:bd:0b:40:0c:8e:53:f9:92:e1:7e:f5:
                    6d:39:78:e3:ba:5a:b8:96:32:d4:d3:02:81:9e:40:
                    a4:e2:45:02:29:5c:4a:0a:2c:5c:75:94:6c:46:d0:
                    10:31:da:ac:48:4c:41:45:d1:ce:ff:99:ba:92:56:
                    c6:dc:06:e1:8b:93:d0:4e:99:d5:49:f5:6c:3a:59:
                    96:3a:e2:6f:e3:98:b9:5f:44:9a:9f:42:a8:78:96:
                    91:3a:c2:53:c9:b9:0a:38:83:6d:9d:c8:94:d2:22:
                    aa:9e:9d:16:a1:ce:f2:11:b0:9c:45:b2:7d:ee:c6:
                    b5:4e:34:66:f5:63:75:23:e2:6f:69:00:da:28:40:
                    b3:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:3C:9E:D8:0B:98:AB:83:2D:00:F4:C6:01:0E:CA:84:E8:CE:62:17
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0c92ff91-6c6e-4224-be14-c4c21f9b8dc0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:12c4::/47

    Signature Algorithm: sha256WithRSAEncryption
         5b:eb:58:d4:6b:f6:e2:c4:87:a4:bc:7b:58:6c:77:8c:eb:a3:
         26:71:f7:69:7d:62:45:e3:86:66:b6:7f:2f:9b:38:b8:c8:19:
         30:63:d8:14:2c:7e:02:a5:d9:cc:75:41:20:0e:db:5a:46:c0:
         17:38:a1:d7:9e:46:9c:7f:c9:cc:09:b0:7a:25:5b:a1:d2:5d:
         b1:dd:45:99:c8:df:eb:f2:08:01:69:d4:f2:b9:7f:b7:4c:02:
         fc:77:dc:58:a1:70:aa:cb:7a:75:86:53:df:5f:3d:ac:79:cb:
         e8:64:e2:4b:dc:1e:a0:79:8f:01:26:31:44:f8:e0:02:b9:6c:
         f9:f7:cc:a7:0d:69:a8:e8:27:da:de:1b:3a:03:d8:af:4d:88:
         f2:f6:4b:9e:4e:cb:bb:17:c2:80:8b:82:51:81:8b:63:e6:8a:
         55:2c:b6:bb:50:01:73:be:37:17:e7:5d:64:09:c0:de:55:a0:
         4c:bd:13:16:c5:0e:a6:00:94:12:f4:34:f8:f1:16:ad:be:a4:
         a6:69:ed:10:a8:da:a8:0d:8e:53:d0:66:b1:07:fd:04:12:d4:
         2e:10:7e:33:d2:75:06:15:5a:f9:c5:77:24:13:0b:12:62:88:
         e3:cc:74:a7:62:6d:a6:2d:74:a4:c3:35:35:52:44:3d:0a:3f:
         5f:e2:6f:c5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 12:49:12 2025 by rpki-client