Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1349ab54-2a2f-4d68-8006-9307fd5cc181.roa
File:                     1349ab54-2a2f-4d68-8006-9307fd5cc181.roa (raw, json)
Hash identifier:          iU37nTssY57dxOZZXab1XxhFmapBa7z0qUEAbF/QzEE=
Subject key identifier:   2F:39:2E:44:CD:88:3D:EF:DF:82:89:B4:16:EE:57:41:8F:26:58:86
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       4DF5E626E2E2CE5AE2C59E8EA5D8EA8BD90E4535
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1349ab54-2a2f-4d68-8006-9307fd5cc181.roa
Signing time:             Thu 30 Oct 2025 22:25:27 +0000
ROA not before:           Thu 30 Oct 2025 22:25:27 +0000
ROA not after:            Thu 04 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1cf6::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:f5:e6:26:e2:e2:ce:5a:e2:c5:9e:8e:a5:d8:ea:8b:d9:0e:45:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 30 22:25:27 2025 GMT
            Not After : Dec  4 23:59:59 2025 GMT
        Subject: serialNumber=b5af4f359c49919362de317774a78f60c6c30a850e11c679857b38ebb9d7f1a6, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c7:be:8c:28:46:89:84:16:a3:00:ad:be:41:
                    42:21:17:3b:58:49:da:a3:27:88:97:d5:10:59:35:
                    ac:da:a0:0b:cf:c1:b8:1f:07:df:96:24:5d:ba:91:
                    ca:fd:b7:4e:b8:46:7d:26:34:13:ef:f9:11:10:67:
                    8f:c9:a7:9a:2e:73:b1:1d:8e:fb:53:01:8f:e6:26:
                    63:29:58:ec:49:69:27:08:ba:4b:0d:2e:c9:49:3d:
                    4b:da:ef:ed:f0:16:65:28:ab:1e:1d:46:86:41:e9:
                    dd:9b:18:62:08:e1:e2:0d:51:ca:a2:1c:7b:5c:00:
                    f7:06:b5:10:65:87:28:46:a2:56:55:70:f0:68:37:
                    c4:e8:5d:0f:c0:3e:2a:54:db:97:b6:38:38:f2:17:
                    4e:85:b8:8d:88:a8:05:19:27:72:7d:69:8f:54:94:
                    b2:cf:2f:de:e1:e1:9b:8a:e0:51:b9:87:1e:8d:d3:
                    cb:74:65:4a:a5:49:7a:0e:c6:96:34:94:43:bf:5c:
                    f8:3e:3a:bf:0e:89:80:5e:fa:fd:fb:fd:6f:5c:d1:
                    44:93:93:21:60:e2:75:1e:44:b8:25:10:72:26:4f:
                    c9:e3:45:2f:5c:df:ec:4e:af:84:20:54:74:7b:8c:
                    ef:6d:7e:d5:e8:83:4a:a2:5b:eb:69:7d:65:df:77:
                    ff:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:39:2E:44:CD:88:3D:EF:DF:82:89:B4:16:EE:57:41:8F:26:58:86
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1349ab54-2a2f-4d68-8006-9307fd5cc181.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1cf6::/47

    Signature Algorithm: sha256WithRSAEncryption
         92:a9:e5:cc:fd:ff:09:4e:20:b6:c6:05:38:f8:59:c9:c1:30:
         a4:86:05:8d:13:d4:4c:5a:a7:b5:66:d0:4d:4a:60:89:87:18:
         ef:03:69:3f:b9:c9:db:c7:ee:3d:89:f4:4d:43:66:73:13:13:
         55:af:6a:c7:d9:c6:1a:89:e7:42:2c:c8:ec:3e:87:19:cb:47:
         2e:27:b2:e0:76:61:20:c7:9b:58:ad:11:0d:19:b0:53:8b:4b:
         04:9d:c9:12:09:ff:91:c7:c8:c4:00:b5:d7:cd:1c:4e:34:72:
         e8:b7:d3:75:c9:ed:25:a3:49:d7:e3:c7:92:eb:1f:e3:0e:c7:
         32:de:b7:e1:04:c3:48:aa:97:59:84:65:2b:2d:49:f7:f0:38:
         58:6e:2f:61:8b:a3:e7:39:d8:ee:85:17:a4:05:a4:15:19:ad:
         90:7c:0d:e3:72:92:92:0f:dc:ad:e1:ad:bb:b3:6d:3e:60:02:
         97:34:c7:c5:39:aa:88:e6:b2:8a:7d:29:4e:d8:14:37:cb:d5:
         8c:2f:4a:42:fe:db:19:80:cd:78:e4:92:90:c1:ec:8e:87:ea:
         02:79:f5:69:99:ab:73:9b:93:9d:e0:3f:bf:0d:95:4f:96:53:
         d0:11:eb:9e:58:7f:90:ef:9d:e1:be:d7:d3:bc:fe:89:7a:d8:
         4a:2a:3f:19
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:36:56 2025 by rpki-client