Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/31b4ed37-5d5d-4b35-98c5-7b6441b917c4.roa
File:                     31b4ed37-5d5d-4b35-98c5-7b6441b917c4.roa (raw, json)
Hash identifier:          YbJwDsORgozrG1FK6ulQAU85yRpGdyu3tqXGULFJWsA=
Subject key identifier:   24:AB:C3:68:10:1D:D0:DA:44:21:27:15:42:9A:9A:C7:E8:72:A9:40
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       3D0780ACC9B01575284CE019EBE4CCDDA8485DB1
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/31b4ed37-5d5d-4b35-98c5-7b6441b917c4.roa
Signing time:             Fri 31 Oct 2025 07:11:31 +0000
ROA not before:           Fri 31 Oct 2025 07:11:31 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:16c0::/43 maxlen: 43
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:07:80:ac:c9:b0:15:75:28:4c:e0:19:eb:e4:cc:dd:a8:48:5d:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 07:11:31 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=f6602653e725da5c9d12179e664f824e4d3b0431e1091356fcd528851f47b834, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:b1:bc:8c:2e:dd:fd:3f:d9:33:f6:f4:af:2e:
                    21:e2:65:96:3c:cb:f2:20:af:b5:a2:8c:f5:72:ac:
                    b3:b6:7e:51:e3:57:8f:3d:3f:82:e7:ab:41:a1:ca:
                    a9:ff:90:85:09:9a:0f:0e:f6:93:78:10:0c:30:d4:
                    46:a8:f0:05:10:14:62:8b:f6:02:e5:1a:f4:a1:cf:
                    69:5f:44:da:31:c1:eb:57:11:a0:ee:b7:a3:82:a0:
                    cb:f8:d6:21:55:31:e7:29:d3:66:6d:26:30:eb:56:
                    c2:f5:47:16:24:d2:68:d5:8f:58:54:ad:51:89:0c:
                    67:10:33:5e:45:56:d6:63:a7:91:2e:ae:29:a9:41:
                    6a:df:33:3d:59:fd:53:02:72:32:ae:2b:25:a6:c8:
                    ec:99:e5:d9:23:dc:de:5d:b6:61:f3:13:31:26:00:
                    d1:0d:bc:d3:af:57:c2:de:cf:b5:0c:2a:9f:f1:5a:
                    a8:d7:c8:85:ff:d2:43:09:a4:8a:86:9a:3d:18:0f:
                    a8:ec:14:64:75:f8:b0:4a:06:d7:be:e6:6d:24:c8:
                    44:49:30:38:dc:90:b9:c9:d0:35:74:1b:8b:38:87:
                    17:73:8b:74:b8:e4:37:3e:f0:ba:4a:62:b8:30:0c:
                    c6:78:4c:c6:1b:a5:eb:56:6d:cb:87:60:a0:fc:11:
                    d2:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:AB:C3:68:10:1D:D0:DA:44:21:27:15:42:9A:9A:C7:E8:72:A9:40
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/31b4ed37-5d5d-4b35-98c5-7b6441b917c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:16c0::/43

    Signature Algorithm: sha256WithRSAEncryption
         1c:13:c3:db:42:d5:86:bc:b8:af:d4:fe:d9:16:10:7b:32:bd:
         91:81:8b:35:ea:05:88:c4:47:2e:21:ba:b7:31:31:e9:90:11:
         7b:45:94:8a:d1:8b:52:49:03:d6:4f:fa:e5:a0:9a:e9:ae:fc:
         81:b6:fb:36:6c:51:6b:8a:3f:44:b9:35:a3:0e:56:e3:ed:27:
         31:15:ca:bd:1c:d9:94:f1:c3:0e:63:b1:06:ff:c9:4b:13:f0:
         ef:c3:9c:a4:4c:1a:95:21:01:b0:81:fb:04:33:41:7e:ea:8f:
         41:6c:de:a5:92:1f:0c:d1:66:a3:aa:15:9f:59:a2:72:14:6b:
         2a:1c:45:a2:e0:fd:f6:11:29:f8:0a:89:c8:fc:73:ca:50:90:
         06:00:1e:c0:fd:a4:f1:1f:e9:e3:80:8f:86:48:f4:17:35:7e:
         49:d5:be:e5:5d:6b:c8:18:d4:ea:60:04:92:b7:b8:60:e8:0a:
         6a:b8:99:06:44:47:72:53:69:80:2e:2b:fd:69:f1:fb:fa:95:
         1b:34:c2:9c:f6:04:ef:da:8f:36:53:86:0d:19:fd:92:e0:82:
         e1:a1:91:92:02:49:7e:6a:fe:d6:12:fb:ca:1b:0b:42:5d:1c:
         b5:37:d9:27:c7:da:ed:6e:c5:72:2b:be:0b:13:cd:ea:d4:57:
         c4:d1:75:76
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:45:48 2025 by rpki-client