Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/37f9d937-74bb-43c4-8acb-35dd597fe3b3.roa
File:                     37f9d937-74bb-43c4-8acb-35dd597fe3b3.roa (raw, json)
Hash identifier:          hdfmvSv3VpyqiHOm77zQRwpAIz7tdD6RVhWRXsBtzjA=
Subject key identifier:   F0:CF:5B:81:4B:B1:83:C7:6C:E5:8C:7A:55:10:BE:63:83:03:D4:04
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       57CDC2343CD92D6AF82859AD6DAD4E314F7D152B
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/37f9d937-74bb-43c4-8acb-35dd597fe3b3.roa
Signing time:             Fri 31 Oct 2025 05:23:53 +0000
ROA not before:           Fri 31 Oct 2025 05:23:53 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1a90::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:cd:c2:34:3c:d9:2d:6a:f8:28:59:ad:6d:ad:4e:31:4f:7d:15:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 05:23:53 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=5df7ad31fffca25213b048fac059567df83317671b3a8bba2812f8a8a8515625, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:d9:f3:e9:04:b0:72:c2:f6:bd:47:b3:fb:1c:
                    5e:aa:0f:5a:5f:08:fe:5a:72:19:1e:2d:2b:d1:45:
                    51:1b:e1:80:5b:a9:43:fa:b3:7b:7d:80:a8:9c:e5:
                    76:7e:7f:d1:d1:6e:1f:73:8f:f8:1d:83:8f:85:da:
                    92:71:8b:9f:56:55:79:07:18:ab:95:54:61:36:8a:
                    52:01:a2:03:77:8f:ab:d8:bf:44:2b:5a:91:1b:ff:
                    2a:b1:6d:a2:61:a9:dc:34:d7:fa:90:51:1d:0f:19:
                    3e:eb:11:af:5c:89:ea:4e:a9:db:da:83:1b:27:21:
                    70:3b:ba:0f:00:12:aa:30:95:33:8b:80:e3:f9:97:
                    4e:2d:ee:25:9f:b7:2f:8b:f1:f9:25:51:0b:c4:94:
                    7e:22:2a:18:0f:43:37:1b:5e:47:6a:07:d0:b1:8a:
                    eb:a6:47:60:9d:cf:9f:bc:ef:91:22:09:66:51:1d:
                    85:46:cd:74:c5:ee:47:8b:09:1a:24:17:56:88:06:
                    b3:e6:f0:3c:1b:5f:0c:88:09:71:8b:64:a2:65:8b:
                    f0:20:8e:b2:7f:4d:ce:0a:26:ed:1f:e6:dd:1c:00:
                    b4:83:5d:d5:c6:3f:1c:99:32:8a:82:2b:5b:e5:af:
                    1b:b1:4d:0b:2b:3e:5c:58:d4:77:d9:af:87:39:3d:
                    da:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:CF:5B:81:4B:B1:83:C7:6C:E5:8C:7A:55:10:BE:63:83:03:D4:04
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/37f9d937-74bb-43c4-8acb-35dd597fe3b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1a90::/45

    Signature Algorithm: sha256WithRSAEncryption
         7f:b9:22:26:dc:b1:dc:13:2d:72:79:59:14:ab:ca:e3:94:66:
         7f:eb:13:1a:38:87:37:38:86:12:44:a8:73:13:dd:3a:a1:82:
         23:c0:55:9e:48:fa:fe:07:b4:32:49:30:a0:e2:d6:6a:9f:8e:
         db:79:76:f2:fe:51:72:ea:b2:c3:96:d0:56:98:23:92:53:30:
         5b:1b:87:3c:a2:02:9c:39:e5:35:ef:32:6d:dc:df:a8:9d:ec:
         fa:2e:8e:34:1e:f4:47:92:08:9b:1c:3f:ac:d6:64:9a:c8:4f:
         4c:1e:57:d3:05:f1:ef:dc:b1:36:a1:e5:9b:a4:b9:bb:4c:15:
         76:d9:f9:f7:6b:f1:d5:90:d5:94:72:78:aa:34:9f:1e:38:c8:
         37:48:cc:5e:ad:e1:14:eb:53:44:2f:26:a2:4e:f1:c1:12:97:
         fc:41:fd:d1:3e:1b:0f:36:e2:78:65:7b:10:eb:51:37:88:88:
         84:74:d3:ae:80:3d:0d:83:34:7d:ab:07:bf:f3:98:d6:6b:63:
         85:13:66:53:b8:83:7a:6e:58:a6:5d:51:4b:61:64:a6:31:6b:
         c6:43:4d:d2:ce:f5:a9:4f:1f:91:43:3c:61:db:fc:82:3a:62:
         df:a5:ae:61:93:08:aa:03:40:f2:46:dd:2d:b3:8a:10:df:6f:
         8a:1f:85:eb
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:53:57 2025 by rpki-client