Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1889796f-b9a3-4b83-8ac0-93af61b3e6a6.roa
File:                     1889796f-b9a3-4b83-8ac0-93af61b3e6a6.roa (raw, json)
Hash identifier:          9vKAGtVE738Dn3Fc2gmpkh3SHAW2pbAmxu4U6TYyrR0=
Subject key identifier:   35:EB:99:12:D7:45:B9:1E:52:5B:F3:65:E3:9F:49:CA:7E:A7:D0:60
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       19D72B88F5EB9CB8DCECFA4317DAC8D27333B404
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1889796f-b9a3-4b83-8ac0-93af61b3e6a6.roa
Signing time:             Fri 31 Oct 2025 02:22:06 +0000
ROA not before:           Fri 31 Oct 2025 02:22:06 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:12a4::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:d7:2b:88:f5:eb:9c:b8:dc:ec:fa:43:17:da:c8:d2:73:33:b4:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 02:22:06 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=ac719d4d9bda8ccbe65891682dbcf53e5d8592eaf6c328c4ff8d692901a3579a, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:8b:c8:aa:20:ba:72:d1:24:5a:3e:55:60:78:
                    a1:68:73:19:e1:b4:a7:a7:5e:7c:ce:55:b5:24:c5:
                    8c:ad:11:5a:f2:69:92:c3:eb:35:c4:57:af:e6:68:
                    fd:83:cc:c2:b1:3e:be:19:52:cc:23:ff:29:ee:9d:
                    05:a1:23:70:b5:f5:9f:03:6f:61:67:a2:ef:1f:ee:
                    5f:a1:c6:8e:ce:97:f2:0d:4a:80:07:26:d1:0a:a8:
                    1a:bc:dd:0a:22:69:7f:6a:14:69:cb:95:11:58:7e:
                    c4:44:9b:ce:7f:94:eb:52:bf:1f:3b:2f:09:69:8c:
                    b2:2b:d5:71:f7:74:18:b5:73:da:82:2e:82:ad:5e:
                    9a:6e:c4:81:52:c8:07:64:92:49:3c:da:50:be:83:
                    42:0f:b9:2c:35:39:dd:36:65:ce:7a:4a:62:8f:19:
                    a6:5c:b4:32:af:84:b1:15:a6:a3:89:02:de:19:73:
                    11:4e:1c:b2:50:56:be:1d:f0:42:e4:f4:36:43:6f:
                    77:7c:9e:71:4d:33:b7:55:9f:9c:19:ac:f7:07:b3:
                    8b:4c:09:c5:dc:77:5e:f8:c1:55:52:2c:16:9f:de:
                    09:4e:ba:29:2e:a8:e2:09:5b:36:e8:f5:6a:f0:54:
                    57:ef:a1:66:49:25:86:4d:b5:82:81:52:bb:ec:c1:
                    47:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:EB:99:12:D7:45:B9:1E:52:5B:F3:65:E3:9F:49:CA:7E:A7:D0:60
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1889796f-b9a3-4b83-8ac0-93af61b3e6a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:12a4::/46

    Signature Algorithm: sha256WithRSAEncryption
         5d:1d:3e:4c:4b:d7:09:68:a0:96:c5:70:21:ab:fd:3d:c0:06:
         7b:4f:e6:cd:f2:ae:fb:3d:9b:71:7a:24:d8:4a:3d:b1:6e:66:
         ba:2b:46:ae:18:e2:db:eb:a2:31:56:78:bc:69:24:e0:02:14:
         8d:cf:7e:62:f8:95:e7:c6:76:a6:b7:89:80:bc:e6:1b:40:d6:
         57:b0:96:72:17:bb:ce:c8:52:40:9d:ca:14:65:04:01:6b:f2:
         5c:32:61:fb:8e:82:8f:18:ef:86:0f:52:0b:60:d6:15:44:78:
         d3:e5:e3:82:b9:06:6a:af:be:33:67:5b:19:a3:14:2e:07:82:
         01:78:83:57:3f:3d:a5:13:86:2e:69:55:40:b1:8a:fa:53:ef:
         72:3b:80:ad:aa:6c:09:e0:ea:b7:3e:e1:5a:90:0e:14:71:2a:
         7b:04:97:81:52:c2:7a:1a:46:ae:93:79:1f:26:e2:1f:ab:ff:
         ee:76:23:9f:8c:c1:28:3e:ae:5a:c4:4a:d9:d3:a8:e7:c3:ad:
         de:7e:49:a6:d2:44:48:b6:f5:ed:5a:e6:fa:c5:37:37:b0:4e:
         f9:f8:64:61:8d:44:1b:5c:be:76:67:bb:9e:cf:9a:31:29:17:
         a2:03:a2:1a:97:c8:0f:25:83:3e:e7:9f:0f:1a:00:9e:08:84:
         60:5d:26:a3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:27:24 2025 by rpki-client