Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/141a8fe9-581a-425e-ac69-8d9e7fdfe48e.roa
File:                     141a8fe9-581a-425e-ac69-8d9e7fdfe48e.roa (raw, json)
Hash identifier:          Cptx6Z5m6IvTxz2ltkK/+f5iEnBN4fV7wOfCLK+6ZIk=
Subject key identifier:   E3:7B:3A:34:11:DF:21:F2:35:3A:41:C2:B0:01:B2:B4:75:7F:61:40
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       4265F24FAD4EFE9CE7F52CAE47DCF7273813CA0F
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/141a8fe9-581a-425e-ac69-8d9e7fdfe48e.roa
Signing time:             Thu 30 Oct 2025 21:57:14 +0000
ROA not before:           Thu 30 Oct 2025 21:57:14 +0000
ROA not after:            Thu 04 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1a36::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:65:f2:4f:ad:4e:fe:9c:e7:f5:2c:ae:47:dc:f7:27:38:13:ca:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 30 21:57:14 2025 GMT
            Not After : Dec  4 23:59:59 2025 GMT
        Subject: serialNumber=0eec656756799d71a62feed6f3ac75f9839f26ee40bad5a440d468070efa92c0, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:c6:a4:28:3d:a9:b3:ee:18:15:c7:98:84:85:
                    e0:4b:88:0c:39:c1:a9:c7:02:5e:52:92:18:95:2d:
                    c6:17:21:2d:23:ba:60:60:ef:81:99:9d:af:a7:3d:
                    54:36:43:36:7d:7e:a6:42:0b:0c:b0:ec:14:0e:f9:
                    0e:cb:ef:ac:40:0a:dc:4e:03:d0:96:f7:9e:ca:54:
                    f6:41:bd:d5:26:77:33:ba:14:d5:29:c3:b0:c5:ed:
                    98:1a:ae:3f:8b:81:93:64:91:6f:7b:05:1d:ea:48:
                    b6:7c:b8:cb:91:b5:ea:e6:0f:83:ec:5a:8e:d6:3c:
                    65:63:db:ff:b9:7d:7a:dd:33:28:53:36:6d:66:41:
                    3b:c7:ed:d6:01:8d:2f:57:fe:89:c4:e9:50:9b:80:
                    85:1b:c3:67:07:a0:4e:4e:0c:fe:9d:67:5e:25:86:
                    bb:28:9f:c6:08:3c:4e:a6:55:28:1d:e1:2e:31:80:
                    37:47:39:b7:67:0d:2d:6b:48:b0:c8:ae:4a:2d:f1:
                    e6:e5:95:9e:5a:b7:57:8d:74:b1:3e:58:60:6a:95:
                    81:cc:ca:1f:11:0a:bf:98:20:be:8b:76:ac:64:fc:
                    ff:77:bb:3d:3d:f7:13:62:50:1e:98:4a:69:12:c5:
                    62:f6:3c:41:79:a5:a5:74:09:6d:26:91:67:ec:99:
                    42:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:7B:3A:34:11:DF:21:F2:35:3A:41:C2:B0:01:B2:B4:75:7F:61:40
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/141a8fe9-581a-425e-ac69-8d9e7fdfe48e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1a36::/47

    Signature Algorithm: sha256WithRSAEncryption
         71:a5:97:03:72:b1:30:a6:46:02:5c:82:4e:e3:26:74:30:64:
         59:86:d1:49:f0:b0:34:26:84:cc:c2:a4:68:ce:2d:f7:4a:59:
         5b:e3:9c:88:7b:3f:37:72:0f:5f:da:7d:25:70:cc:9e:8c:a7:
         06:ba:2b:e2:2e:61:b3:68:41:2f:ee:6f:8b:54:43:17:50:cb:
         71:1b:4b:b0:5e:cd:4f:b5:6c:2a:f5:88:43:77:f6:ef:98:c5:
         66:41:59:91:e6:60:53:76:1a:b9:ce:b3:33:91:5f:e3:bf:fe:
         17:e3:08:b3:e9:cb:cc:b1:af:8d:bf:43:e1:a2:17:a8:e9:0d:
         51:e6:2d:24:25:0d:a0:33:4c:b2:00:20:fb:7c:d8:81:4e:9f:
         d5:0b:ad:56:a0:b7:f2:ac:3e:47:4f:98:82:04:96:10:eb:0a:
         cb:00:12:e6:b7:f0:1e:54:72:6b:8f:33:40:f2:05:68:5c:6b:
         1a:6a:49:66:61:a2:2b:a5:98:66:7f:36:54:01:74:03:14:15:
         1f:5b:28:e1:34:cd:45:2c:28:e7:33:1a:5e:b5:e6:77:d5:f9:
         4c:17:6b:7d:5d:8f:7a:5b:1a:08:d1:6b:4b:76:61:66:8b:9f:
         15:cb:a6:6c:45:1c:36:f3:65:f1:ea:f9:fc:4f:8e:21:40:68:
         c6:13:76:1e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:46:11 2025 by rpki-client