Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/27175cec-610d-4b59-b71e-e65b6508bf9a.roa
File:                     27175cec-610d-4b59-b71e-e65b6508bf9a.roa (raw, json)
Hash identifier:          +/OmMgirr6aq4R2vTT4BCsAnMwAI0R27gL7QHi0sSAM=
Subject key identifier:   BB:1A:A5:B4:E8:B9:5B:6F:56:9F:FA:8E:41:6C:D0:2E:64:C8:ED:AF
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       462D5D3F607DA3D96F22BEFB567375CAE23451E0
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/27175cec-610d-4b59-b71e-e65b6508bf9a.roa
Signing time:             Fri 31 Oct 2025 01:06:58 +0000
ROA not before:           Fri 31 Oct 2025 01:06:58 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3942::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:2d:5d:3f:60:7d:a3:d9:6f:22:be:fb:56:73:75:ca:e2:34:51:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 01:06:58 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=da73db14a354b3f1714f77cb32239dcf2639191a7f34f10a9e11d2671904c76c, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:d2:2f:14:d5:07:6e:f0:20:83:f1:de:ab:19:
                    aa:25:c4:ba:65:90:5c:8f:00:95:35:bd:b4:f4:6a:
                    4e:45:02:25:9e:7c:6c:6b:af:77:80:c2:e6:e2:40:
                    f3:7c:6a:b7:54:92:3a:fe:a6:de:15:d8:9c:48:67:
                    1b:1a:f6:3d:e0:46:29:04:13:30:db:cd:3b:9b:da:
                    d4:c7:d0:29:e6:83:f4:65:23:a0:41:28:ca:84:8d:
                    16:41:1c:02:e2:19:e4:f3:a3:6f:86:a4:95:7d:3d:
                    1b:47:a3:97:68:4c:35:1f:1e:3b:e5:7c:94:41:e5:
                    8a:21:a2:30:d0:fe:2c:ca:91:4f:c8:6c:bc:4c:31:
                    41:74:78:0e:ad:55:d3:ba:e7:ad:18:51:a0:8d:0a:
                    38:16:da:1c:7c:92:d4:0b:de:42:05:a2:67:6b:fe:
                    87:de:51:a4:5d:82:2e:2e:a0:fd:14:3d:65:fe:c7:
                    31:ad:d3:e6:6c:5b:14:b1:8c:54:f1:2e:53:10:c9:
                    4a:e1:7c:8c:af:0a:98:1e:c6:32:9d:a5:20:7a:d5:
                    42:f3:2a:fa:6d:45:6e:38:37:2c:84:fe:f7:54:9f:
                    25:56:59:e1:9e:71:70:7d:83:f3:6c:f2:7f:32:d7:
                    75:98:3a:3b:a6:81:48:05:19:09:7a:e2:1f:f5:f0:
                    c1:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:1A:A5:B4:E8:B9:5B:6F:56:9F:FA:8E:41:6C:D0:2E:64:C8:ED:AF
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/27175cec-610d-4b59-b71e-e65b6508bf9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3942::/47

    Signature Algorithm: sha256WithRSAEncryption
         99:75:f2:09:2e:97:d6:04:12:b5:12:51:4d:8e:5b:06:2e:be:
         7e:43:7b:c2:ac:59:9c:9c:ad:9b:1f:5b:ea:70:47:6a:10:54:
         35:67:60:a4:8d:d0:c3:42:9a:b6:8a:d2:e8:57:9f:af:9b:92:
         b1:dd:e7:a4:e7:06:97:e9:da:2f:50:c3:5e:cd:f4:9a:5d:96:
         56:60:12:88:49:cc:35:33:7c:fb:a2:08:e1:db:6f:b1:14:da:
         7e:a7:90:a3:80:1f:2c:1a:17:6b:b8:56:79:6a:ee:4e:34:84:
         5f:b4:b7:c7:86:1f:30:6c:74:0f:e5:a1:2b:5e:ed:db:16:41:
         77:4c:cf:bd:37:f6:f8:b3:78:de:6f:93:0a:1c:ef:fd:f8:7c:
         2e:55:93:6d:54:cb:76:83:b6:22:3e:d5:18:5a:bf:e1:95:49:
         d3:ea:e6:ff:6c:11:6b:94:15:90:71:ae:c9:0c:e2:c8:7c:f9:
         b2:7c:16:fb:ef:f6:64:71:e4:90:02:40:4d:1a:0a:c7:be:e8:
         f9:32:0d:49:3e:b9:66:5e:50:a8:81:a6:4c:df:ab:4f:c4:3d:
         93:8c:aa:67:0f:eb:6d:30:37:82:47:18:5d:b5:1a:6e:3b:7e:
         1b:f6:06:38:6a:57:4a:3e:86:40:bb:fa:76:52:8a:05:d8:0f:
         c4:3a:b5:6e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:46:46 2025 by rpki-client