Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1676f3e2-7793-4ce9-a141-5d0b1fd9117f.roa
File:                     1676f3e2-7793-4ce9-a141-5d0b1fd9117f.roa (raw, json)
Hash identifier:          ugz4pqEdUXKdB18aLd+lMMpq7dpMTsjsqmBvvdTfN6M=
Subject key identifier:   C2:C9:D2:0A:E1:DC:C3:79:50:3F:BB:C6:BC:41:B9:E1:75:9C:40:B2
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       391E6E892FF7CE5FEC3030EAF870A14DD3BF0AD2
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1676f3e2-7793-4ce9-a141-5d0b1fd9117f.roa
Signing time:             Thu 30 Oct 2025 22:12:03 +0000
ROA not before:           Thu 30 Oct 2025 22:12:03 +0000
ROA not after:            Thu 04 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1baa::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:1e:6e:89:2f:f7:ce:5f:ec:30:30:ea:f8:70:a1:4d:d3:bf:0a:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 30 22:12:03 2025 GMT
            Not After : Dec  4 23:59:59 2025 GMT
        Subject: serialNumber=827cc77af69f532fa76dac46ac709615a85ebcd5fdb5e5d095d2d6062747aaf0, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:3c:a9:74:b5:90:7c:1d:d6:fb:48:30:99:d4:
                    2f:92:ad:4e:34:8c:97:55:c5:29:ae:72:da:17:90:
                    8b:09:8f:ec:19:73:01:8f:32:7a:72:e7:2f:f7:bf:
                    7f:1d:5e:05:71:f6:3b:f5:68:82:8a:07:7b:a7:2d:
                    a3:82:28:e7:1b:21:e0:07:dd:b5:f3:94:22:8a:0f:
                    30:f3:56:5d:56:0f:37:bf:62:5a:80:c2:aa:4f:d9:
                    7c:0f:6a:1c:7e:04:34:d6:9f:fe:17:94:5f:c1:8d:
                    0c:ae:b1:41:a9:48:38:71:a3:ab:f6:f3:8a:bf:52:
                    2d:af:a9:be:e9:eb:18:2e:ac:7a:00:5f:ca:a6:13:
                    6a:b7:91:5b:c4:72:86:1f:9d:fb:3e:a7:99:bd:e0:
                    e3:48:38:92:ea:0e:f8:1d:43:a3:5f:d3:0f:c2:f6:
                    00:37:fa:b9:82:18:8a:8f:67:f3:e2:0d:9e:7b:b5:
                    b4:a4:c9:d4:be:b0:08:82:9f:4a:53:f9:fa:69:37:
                    f6:5d:10:45:45:42:9a:9e:61:99:8e:ac:cd:48:1e:
                    87:7d:62:5f:30:83:86:5b:31:45:57:ba:9f:54:7a:
                    c9:c8:ea:72:88:2f:7e:53:69:4a:31:4e:71:97:99:
                    34:60:6d:08:ce:b7:59:12:43:19:ed:63:0a:af:9d:
                    0c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:C9:D2:0A:E1:DC:C3:79:50:3F:BB:C6:BC:41:B9:E1:75:9C:40:B2
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1676f3e2-7793-4ce9-a141-5d0b1fd9117f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1baa::/47

    Signature Algorithm: sha256WithRSAEncryption
         41:f0:18:3f:7f:21:d7:b3:a7:8f:03:36:2e:85:ea:3f:37:ed:
         92:03:eb:8f:1f:f0:f8:c5:d8:b1:09:e6:ea:a5:ea:8f:78:57:
         b2:90:28:2a:56:fa:a2:4f:af:cd:67:89:13:e1:29:e6:6f:f7:
         48:34:8d:9e:7a:ff:8e:6d:7d:20:ec:91:54:ae:10:dd:73:54:
         e9:19:31:f9:e3:23:08:1f:b4:ee:da:4a:53:3d:97:6d:40:e5:
         e8:46:53:00:ff:6d:a2:f8:3e:b3:0a:43:01:17:4e:bc:41:80:
         ed:a3:44:c8:d0:29:4f:5f:42:84:71:66:3e:30:6c:8c:de:ed:
         ba:93:cb:0c:70:d6:90:a7:d2:f4:a9:b9:9f:c9:87:2a:3f:76:
         3d:5d:58:42:e3:4b:a8:ed:01:bc:80:d6:2d:c1:ef:f9:2c:85:
         e7:90:b2:2a:e0:84:2a:89:07:2e:69:a3:ff:0b:bb:0e:df:88:
         62:86:4a:1e:08:d4:28:1a:60:2b:96:a6:dc:20:80:fc:2c:13:
         d6:96:d1:df:ec:49:60:0c:f9:15:45:b5:78:21:3c:31:34:1b:
         78:50:48:96:c5:14:df:c2:e8:02:e1:12:b2:7d:e5:e7:37:c3:
         bd:9e:7c:98:42:d6:eb:c2:8a:94:47:da:e2:c3:8c:ba:79:5a:
         f0:48:49:c3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:05:30 2025 by rpki-client