Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/247d77a7-8017-4798-bc7f-f70f27bbf612.roa
File:                     247d77a7-8017-4798-bc7f-f70f27bbf612.roa (raw, json)
Hash identifier:          lxmzhrHxIbdSeWA2RBq6G1azYr0q5/ob3GSCptDGvDg=
Subject key identifier:   4F:D0:16:C7:89:11:5A:A8:9F:95:61:E8:C0:C7:56:87:B8:65:3D:7B
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       34A78EDF6BCD35B138B30BE8BA1D63B17CE5BA25
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/247d77a7-8017-4798-bc7f-f70f27bbf612.roa
Signing time:             Fri 31 Oct 2025 02:40:26 +0000
ROA not before:           Fri 31 Oct 2025 02:40:26 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:16dc::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:a7:8e:df:6b:cd:35:b1:38:b3:0b:e8:ba:1d:63:b1:7c:e5:ba:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 02:40:26 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=39ac40528c9cc720b2411c33733afbf0130c3dd23d99c484f64ca3d90afb1eec, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:3f:d0:aa:b3:94:4d:4d:15:46:7f:05:85:e8:
                    88:10:ed:40:de:37:67:d6:19:9d:ba:d5:8d:71:15:
                    0d:3f:b4:43:ad:22:50:ad:3e:1b:a2:72:35:9b:4d:
                    08:43:b8:95:33:c4:78:e0:4c:db:41:a8:1a:94:b0:
                    20:22:70:a1:04:45:bf:c8:f4:ee:a2:ab:d4:c1:69:
                    4c:ca:36:81:a5:ef:3f:ae:9a:f6:53:9b:ea:48:c4:
                    e1:ec:ef:7c:ee:34:62:73:a4:d8:16:b3:19:6a:3b:
                    6c:96:57:97:15:1f:31:03:65:00:93:69:4f:ff:34:
                    6f:3b:0b:67:bd:39:07:06:33:f2:cd:4c:4c:a3:2a:
                    a8:43:04:0d:6e:07:45:6b:fc:d5:7b:10:cb:3d:51:
                    0e:49:7d:9f:3e:bc:12:b7:97:80:cf:98:3a:db:2d:
                    08:d0:66:ec:e5:70:89:3b:48:74:a2:b4:46:e5:43:
                    04:49:dc:0c:d5:9d:cc:d1:5e:c7:7a:dd:44:9a:4f:
                    51:b9:65:26:81:a3:1c:ef:18:ae:63:cf:e2:09:87:
                    e3:a8:ee:5f:9b:a7:4c:d4:4a:f1:b5:fd:8e:60:0a:
                    4b:82:bc:95:46:24:fb:09:fb:56:0a:50:3d:4f:25:
                    86:db:d2:a1:dd:c3:82:cd:9d:97:fe:6d:6d:b0:32:
                    db:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:D0:16:C7:89:11:5A:A8:9F:95:61:E8:C0:C7:56:87:B8:65:3D:7B
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/247d77a7-8017-4798-bc7f-f70f27bbf612.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:16dc::/46

    Signature Algorithm: sha256WithRSAEncryption
         95:10:3b:f4:e9:1a:a4:a6:a4:cf:3d:da:bf:38:ed:34:ef:d3:
         b3:7c:04:8c:3f:91:01:35:f9:2f:d4:a9:50:46:7d:c0:54:5c:
         cd:e8:3f:1e:90:4f:05:ff:81:e3:59:18:40:16:9a:cc:92:bb:
         de:1a:74:21:18:fa:c5:5c:d5:9b:69:4d:f3:ab:33:f9:95:74:
         dd:52:50:c1:65:b8:67:fd:dd:6f:8d:39:03:20:0d:b1:ef:03:
         f4:d8:eb:20:30:cd:13:97:4b:97:02:25:49:b8:d3:4e:11:59:
         b0:2c:1e:20:e6:f9:37:a1:80:96:0c:bb:a7:b2:0e:fe:c5:ec:
         56:cf:0a:1c:6f:bb:53:68:5f:ae:a8:41:04:43:59:7d:89:07:
         b4:2e:01:ad:90:65:f8:50:57:21:6d:1c:77:e5:d5:59:66:6a:
         33:71:fa:af:cc:a5:16:fa:08:48:15:68:3e:79:d7:f4:16:08:
         0a:6a:94:fb:d2:a8:32:e1:eb:3d:d7:04:fb:66:93:ed:6c:62:
         82:eb:12:71:2a:e8:21:22:2e:f2:f7:90:49:93:ff:f2:ee:8a:
         48:21:2a:c8:a9:f5:5c:6d:2a:6a:83:5d:52:70:9a:63:48:94:
         93:71:46:56:1e:34:06:e7:de:68:4d:5b:e9:37:ca:60:56:f2:
         3c:37:ab:20
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:55:53 2025 by rpki-client