Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/348c9941-bd5e-4f84-b0a5-c54cf4a8c1b2.roa
File:                     348c9941-bd5e-4f84-b0a5-c54cf4a8c1b2.roa (raw, json)
Hash identifier:          HJ7LFPkAtbgDwypEi0WJpXERBjeidoeVUiKv4BgiElE=
Subject key identifier:   57:7D:A4:5A:94:AD:9C:6A:D9:F8:E0:A1:FD:57:0F:97:1F:19:9E:BD
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       4887393AB7DC44CD39654BCA4A0DBCA8AE70CACA
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/348c9941-bd5e-4f84-b0a5-c54cf4a8c1b2.roa
Signing time:             Fri 31 Oct 2025 03:40:19 +0000
ROA not before:           Fri 31 Oct 2025 03:40:19 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2c88::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:87:39:3a:b7:dc:44:cd:39:65:4b:ca:4a:0d:bc:a8:ae:70:ca:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 03:40:19 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=82108920f7846a3b7bf25c37e54aea63727f0356c483e7026c11d3839d345f42, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e9:5a:27:b1:d4:a2:9f:d1:ba:65:3d:5e:22:
                    5d:d8:2d:72:b7:34:a9:67:95:a4:41:65:79:23:fd:
                    07:d0:ec:be:dd:4c:04:53:55:6a:db:50:c8:3a:3d:
                    db:b2:c3:46:37:29:c1:96:ad:a2:b4:71:b1:89:42:
                    35:61:68:92:91:b7:22:09:5b:56:39:50:ad:73:17:
                    d4:56:a4:7e:b6:1d:7f:6c:7a:60:e4:99:64:39:d2:
                    dc:05:8a:a5:13:ac:69:8f:b1:cb:47:4c:32:32:ab:
                    57:ce:de:63:94:88:9f:8a:db:d2:15:42:eb:e7:b3:
                    5f:75:d9:35:a3:82:76:e8:2a:87:11:1e:d2:48:97:
                    dd:7d:19:bb:f7:80:c6:7f:64:a7:12:71:47:25:17:
                    85:5a:ac:b9:7f:b2:39:44:93:c0:e1:d2:24:83:64:
                    99:55:e9:20:6f:ab:c8:23:de:9f:d8:dc:60:05:1c:
                    76:41:40:ab:e9:f5:87:f3:22:9d:c2:5c:26:ba:6f:
                    50:dd:c8:c1:ff:e4:8f:45:64:3a:5b:5b:44:4c:9e:
                    e2:70:9a:3c:36:2d:54:e6:0e:a6:58:36:6b:b9:33:
                    47:52:e5:d7:1c:a6:e0:cb:af:78:88:48:31:74:64:
                    15:f3:0c:34:48:1f:4e:6d:48:ca:f5:52:79:39:3a:
                    6d:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:7D:A4:5A:94:AD:9C:6A:D9:F8:E0:A1:FD:57:0F:97:1F:19:9E:BD
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/348c9941-bd5e-4f84-b0a5-c54cf4a8c1b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2c88::/46

    Signature Algorithm: sha256WithRSAEncryption
         00:5c:29:ce:fa:13:ca:41:66:56:5c:fd:f7:37:ab:51:b9:37:
         d1:2c:ab:8d:8e:cb:68:2f:fd:35:e2:18:ba:7f:6b:a2:52:89:
         65:54:2b:2a:9d:e6:bf:c6:66:a0:a5:bb:a6:6d:ea:4f:bc:cf:
         65:1c:e4:53:0f:31:10:2e:d3:86:5b:69:b5:59:3b:0b:8f:d5:
         05:9a:7b:94:e4:b8:cb:c1:c1:97:c5:fe:2a:47:ed:bd:3c:0c:
         5b:65:8a:f9:56:50:c0:82:1f:b1:1d:c5:9f:8f:b1:b9:05:84:
         ef:55:3c:fc:7a:7a:41:7d:15:8b:00:09:22:0f:35:2c:34:37:
         89:10:64:89:d3:ff:b1:e7:0a:39:1d:98:9f:0e:26:fc:84:0a:
         93:2d:52:1c:40:c1:74:a6:11:4c:30:eb:33:9b:09:e1:06:41:
         9e:d7:75:ee:e5:a7:18:33:f4:76:f8:92:b8:41:0b:ac:dc:d6:
         fa:95:bf:33:43:73:ce:58:84:8f:61:a3:2b:fd:0f:14:25:8c:
         21:87:48:ab:c5:68:82:b9:e7:0d:22:4d:52:fb:2c:2d:e4:f3:
         ab:c8:b9:45:eb:a0:85:a4:77:a8:23:4a:e6:a9:1b:4a:3c:9c:
         50:69:32:f6:02:71:05:38:f2:03:d0:09:71:03:71:c0:3e:f4:
         81:b6:26:d0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:34:13 2025 by rpki-client