Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3ede8005-bb4e-4b1f-846f-797fec5a1f89.roa
File:                     3ede8005-bb4e-4b1f-846f-797fec5a1f89.roa (raw, json)
Hash identifier:          0euwUPV7K8Ur4T0K7+1WG3igvZ0W579qW2Wocnb6s4g=
Subject key identifier:   78:6F:80:16:DC:75:4B:32:E8:73:2B:4D:D8:26:3B:20:EB:20:2F:85
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       627A958C4587DDAB3426D972F8C7AA25C4BFD4A1
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3ede8005-bb4e-4b1f-846f-797fec5a1f89.roa
Signing time:             Fri 31 Oct 2025 02:41:55 +0000
ROA not before:           Fri 31 Oct 2025 02:41:55 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:171c::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:7a:95:8c:45:87:dd:ab:34:26:d9:72:f8:c7:aa:25:c4:bf:d4:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 02:41:55 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=acba24b796535484b18aa6c47f254c4aa12a5d88d9c30546f492455bed285f05, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e0:c4:bd:6f:56:b8:df:bc:2d:00:03:ca:29:
                    8b:26:27:c0:ee:eb:17:ed:dc:ad:e1:25:d4:21:80:
                    2f:f1:c0:ba:9f:97:a0:b1:99:56:4f:5b:00:d6:86:
                    0b:db:f0:03:ec:23:c6:90:ef:38:95:c2:aa:0d:ec:
                    9e:7e:ff:cb:1e:65:22:d8:35:19:42:72:db:b6:57:
                    4b:d1:48:17:81:4b:a1:e8:31:a1:fe:ee:1d:93:f2:
                    51:ad:55:3a:34:34:59:bd:b3:32:55:db:49:0f:dc:
                    22:98:70:be:90:8c:e0:0d:d3:2c:da:fb:92:2d:4c:
                    a4:0a:e7:bc:7b:c9:53:80:68:0e:12:e4:f7:cb:e8:
                    a9:31:74:a5:ea:a7:1a:9e:4a:39:3c:d8:c0:b9:04:
                    53:f5:5f:a3:7c:82:46:07:ce:aa:69:f4:a9:bc:25:
                    0d:b3:18:a7:f0:68:ff:36:e5:2c:a4:69:14:fe:02:
                    b2:d8:5b:82:b2:8e:a2:d9:c7:67:24:9a:f2:ad:58:
                    da:6e:ae:21:34:e2:bc:ab:8b:2a:70:2e:42:5c:b6:
                    0a:94:20:8d:49:11:26:84:52:89:db:fc:12:8e:2f:
                    86:02:e6:27:ef:79:2e:55:ce:c0:59:f3:39:7d:4e:
                    78:37:66:fd:4c:8c:0c:be:69:58:2e:04:00:9e:dc:
                    ef:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:6F:80:16:DC:75:4B:32:E8:73:2B:4D:D8:26:3B:20:EB:20:2F:85
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3ede8005-bb4e-4b1f-846f-797fec5a1f89.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:171c::/46

    Signature Algorithm: sha256WithRSAEncryption
         4f:69:91:28:b8:71:e4:34:33:ed:9b:5d:24:ed:40:a6:66:ba:
         e3:32:14:a1:14:a5:01:48:34:7f:d6:ee:ff:84:12:ea:78:dd:
         09:ba:36:39:a7:29:4f:53:7f:a3:40:b3:b7:23:8b:05:ad:63:
         91:da:ec:cc:2b:68:95:51:da:ec:8a:ba:d6:00:72:10:d0:00:
         44:1b:15:ed:f9:37:71:54:e0:1d:10:cb:2b:d5:25:56:c4:09:
         15:22:58:f8:94:11:26:94:1b:3b:50:20:44:be:99:04:86:74:
         a3:98:57:92:89:ea:54:14:1e:96:99:ac:c3:49:aa:27:7e:a1:
         08:69:cd:4e:d7:9e:77:09:10:9b:fe:fc:af:04:bd:e4:92:50:
         3b:e1:17:a2:4a:ae:73:f1:b1:da:26:74:58:06:6f:9d:5e:6a:
         b2:e1:44:26:e8:f0:37:68:e8:aa:02:76:be:b6:50:6e:c6:ee:
         fd:58:f6:1b:f8:0a:13:17:5f:76:8a:4a:12:24:cd:ca:c9:dc:
         a7:98:52:8c:9a:df:1d:42:6a:b4:ad:b1:75:e6:2c:88:62:18:
         6e:f0:cc:eb:94:d6:d4:f1:3d:91:7d:81:24:3f:96:6c:51:41:
         66:5b:99:5c:38:14:23:60:31:b7:84:f0:e7:35:62:44:5c:88:
         97:2c:bc:3c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:40:28 2025 by rpki-client