Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4263fc22-5057-4141-aa2a-5c145dcb0948.roa
File:                     4263fc22-5057-4141-aa2a-5c145dcb0948.roa (raw, json)
Hash identifier:          MFZ9F6APKu5mWvjqDQCXodh8W8MvinJGe5w1dXGDn0w=
Subject key identifier:   2D:57:A7:03:EB:8A:BC:74:CD:5C:2E:7E:6C:83:E2:69:F8:76:9F:0F
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       4604CA676D4027189D2D0183F8A52C583E533EFF
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4263fc22-5057-4141-aa2a-5c145dcb0948.roa
Signing time:             Fri 31 Oct 2025 01:28:05 +0000
ROA not before:           Fri 31 Oct 2025 01:28:05 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3c2a::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:04:ca:67:6d:40:27:18:9d:2d:01:83:f8:a5:2c:58:3e:53:3e:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 01:28:05 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=7e209b018a1cb2d59bacd673f44123eb3fb38ece4933ddbcbb83e7e1a08876dc, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:2d:e1:47:be:7d:89:70:f4:50:f1:4e:e2:69:
                    4b:b2:35:2e:67:2b:bd:6d:33:7c:7f:e0:7a:77:66:
                    4a:d4:97:cb:da:b5:0b:ba:c3:a5:04:99:4d:4b:b5:
                    60:30:ab:1a:52:2a:bd:dd:1c:a0:f9:71:6f:78:01:
                    e8:bf:6d:bd:c5:51:fa:39:c0:9a:ad:73:1e:c2:7b:
                    b2:e5:79:22:3b:b3:e2:fb:4d:6a:35:ef:dc:5c:0d:
                    5e:c3:4a:cb:fc:4d:7f:e0:38:75:a7:5f:f3:f5:ec:
                    43:4b:b4:79:f8:c7:7d:1b:2e:37:3d:2f:0f:5f:7e:
                    de:e7:6f:42:f1:75:ae:e2:a0:3f:8d:20:20:d5:54:
                    5f:50:45:28:a0:48:d5:42:9e:f8:98:37:0c:b7:56:
                    5a:b3:22:a8:d5:21:5f:a0:36:5c:cf:df:43:20:73:
                    e7:d1:88:67:b3:1e:1e:fd:b6:6f:60:c9:b2:d1:9b:
                    b6:bd:96:b8:18:cd:17:4e:bc:46:21:52:7c:27:84:
                    f1:2c:66:28:7b:e1:0f:7a:e0:80:4e:28:39:e0:fc:
                    fa:9e:44:98:30:d3:70:98:98:25:7e:6a:b3:2a:3a:
                    37:a4:69:56:01:a8:01:e4:3d:40:05:3c:f2:a3:ab:
                    c7:dc:9d:7d:f4:38:1c:6a:0a:cd:7c:00:fc:94:2d:
                    c4:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:57:A7:03:EB:8A:BC:74:CD:5C:2E:7E:6C:83:E2:69:F8:76:9F:0F
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4263fc22-5057-4141-aa2a-5c145dcb0948.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3c2a::/47

    Signature Algorithm: sha256WithRSAEncryption
         bd:60:bd:fc:0c:52:0a:cb:8b:b3:6f:8e:e5:70:a0:ab:98:d4:
         3e:b0:96:6a:8b:9b:d6:40:66:9a:e2:10:63:9b:30:cf:b0:16:
         f9:19:75:b1:3a:d9:a4:9b:d9:75:31:57:33:5a:48:af:55:24:
         57:4d:11:b8:f7:45:b1:16:fd:a8:d9:c9:df:96:ec:7e:05:c4:
         d8:c0:75:91:78:c0:ab:b4:39:fa:86:5e:91:f0:f1:0f:76:8f:
         1a:da:69:3d:39:22:38:3d:fe:49:47:90:a7:8d:c7:34:8c:c1:
         a2:37:d1:3c:93:ff:f1:a0:6d:6f:61:1f:47:98:49:36:e7:18:
         3f:2b:f3:25:2f:15:74:96:cb:da:d4:51:5d:00:38:2a:77:41:
         c0:4d:ec:56:29:d8:54:2a:75:eb:f8:fc:8e:3c:72:f0:7f:73:
         20:28:10:14:60:da:9c:d9:29:7d:a6:9b:9a:15:55:d2:c6:dd:
         0b:bc:ab:7d:f1:8a:99:97:07:d8:34:df:8e:62:0e:c0:f5:f3:
         e0:d2:b8:c0:ad:ed:b9:f8:0f:ed:ec:af:df:23:4a:6a:a9:12:
         e2:fc:f6:38:3f:8c:30:4c:fd:ca:82:5e:18:04:fa:6c:21:ef:
         d9:40:4a:b5:e9:5f:fa:25:4f:9f:20:fb:9a:62:4a:ad:b9:8a:
         29:c5:43:3a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 13:59:27 2025 by rpki-client