Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/43520838-c56e-4d59-973f-d6f803a1f11c.roa
File:                     43520838-c56e-4d59-973f-d6f803a1f11c.roa (raw, json)
Hash identifier:          ZFltVs6Kv2/45EmN1qwrpBmR6HdX3yFe1kroruc+OIk=
Subject key identifier:   86:6E:A8:56:0F:42:E0:3A:23:AC:C2:57:1F:9E:89:D6:06:B9:51:65
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       77C4D7DE76D2F2D9614A473F4B7131D4F3122D3A
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/43520838-c56e-4d59-973f-d6f803a1f11c.roa
Signing time:             Fri 31 Oct 2025 05:27:21 +0000
ROA not before:           Fri 31 Oct 2025 05:27:21 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1d18::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:c4:d7:de:76:d2:f2:d9:61:4a:47:3f:4b:71:31:d4:f3:12:2d:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 05:27:21 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=05745d8926774f262c9d615080a231195434da1bc226d1c022d6c66d8a8de69f, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c6:e5:73:c8:ea:56:a3:81:de:c4:50:9c:ea:
                    fb:a7:b3:2d:54:27:30:8f:f4:75:aa:ff:87:e8:4b:
                    89:f1:5a:6b:26:f0:00:40:60:12:0a:14:98:f0:be:
                    6f:5d:c8:1c:e3:f3:70:29:c7:c4:8f:f0:32:cc:e5:
                    bf:24:2c:29:d4:a6:9d:11:c4:17:93:49:bd:ea:4b:
                    9e:32:cf:4b:3f:9c:c4:2c:d4:59:61:7b:77:3a:14:
                    0e:7c:41:e4:38:02:c3:d2:06:9b:05:4b:ad:15:fb:
                    94:bd:a6:7e:dc:fd:dc:3b:70:af:c8:4a:12:2b:58:
                    c7:0c:e9:97:2e:d6:24:1a:1d:0b:c1:0d:ab:4c:0f:
                    f8:58:dd:ac:60:8e:f8:4d:a5:c7:58:dd:f3:3c:79:
                    e4:6f:0e:d6:93:51:c1:8b:5c:81:15:f9:dd:cf:55:
                    ca:c1:78:4f:35:d0:3a:f2:9e:9b:26:30:33:ba:51:
                    02:55:9b:80:6e:90:0a:96:bf:d0:40:d3:9c:15:da:
                    41:93:b1:b0:72:1b:b2:44:c4:b3:9e:7c:6c:b5:93:
                    8c:0e:1e:97:8f:ac:6c:90:84:cf:3d:0f:63:eb:15:
                    7f:b2:7a:29:50:26:58:c9:c8:1d:8f:cb:7c:f0:66:
                    1a:12:a2:85:d4:b8:4e:c6:43:ed:47:96:14:07:f8:
                    e2:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:6E:A8:56:0F:42:E0:3A:23:AC:C2:57:1F:9E:89:D6:06:B9:51:65
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/43520838-c56e-4d59-973f-d6f803a1f11c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1d18::/45

    Signature Algorithm: sha256WithRSAEncryption
         17:7e:a5:44:63:c5:3c:37:39:21:26:eb:b5:be:29:f2:58:1d:
         55:30:59:d9:5f:82:79:ae:68:db:59:88:82:6a:8c:a9:dc:32:
         8a:db:93:22:a2:91:a5:8a:63:d7:92:be:77:29:a7:6f:a9:8f:
         13:1c:33:5a:32:53:d6:7c:79:a4:2e:95:7a:e8:eb:3a:5b:56:
         72:78:6e:ea:8a:fa:76:48:f6:f7:0b:26:80:0b:79:7a:41:64:
         5e:cc:e3:7b:65:0b:d9:4b:bc:c5:50:b0:e6:16:c5:da:26:37:
         de:1c:d4:f0:b4:e1:2a:e7:c3:5c:d7:f4:de:4f:98:bf:0a:d6:
         3a:8d:dd:be:00:91:e1:ec:5c:3e:36:16:84:8e:91:58:df:ac:
         8d:63:b3:27:e0:4d:2c:85:7c:07:6c:20:76:dd:ea:e8:11:22:
         fb:33:42:f1:3e:83:c9:99:20:e5:5a:46:c0:1b:a8:b9:a5:c1:
         74:e8:7d:a2:b7:1c:24:e5:ae:05:19:7a:35:45:82:6e:cb:5e:
         00:b5:fa:59:45:a8:9c:27:b9:a9:9d:e3:95:31:85:e4:52:09:
         10:ab:b1:4d:a4:75:1b:2d:21:c8:31:b9:bb:3a:21:58:eb:ed:
         88:0c:2b:55:b5:38:62:86:7d:b3:4b:04:a4:76:3d:ed:0e:ab:
         8a:31:ba:e2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:43:14 2025 by rpki-client