Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/47be8a2e-1777-4edb-bfc9-9fcf7f4da60c.roa
File:                     47be8a2e-1777-4edb-bfc9-9fcf7f4da60c.roa (raw, json)
Hash identifier:          D7lbFXbCraZT+dNyrJa7VU7pYJ127a3YY0jbO488/QM=
Subject key identifier:   09:1C:0F:20:24:E0:07:C5:DA:99:66:21:D7:1C:62:3C:53:C2:CB:F2
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       1506CF959ED0401280785681C7DADAF1414E1E04
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/47be8a2e-1777-4edb-bfc9-9fcf7f4da60c.roa
Signing time:             Fri 31 Oct 2025 05:40:32 +0000
ROA not before:           Fri 31 Oct 2025 05:40:32 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2a68::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:06:cf:95:9e:d0:40:12:80:78:56:81:c7:da:da:f1:41:4e:1e:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 05:40:32 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=69eb8390653321104ae5b38732fe448b35cdfbea54ba7e79ed3592079803ab55, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:7b:1f:ab:eb:8b:97:ae:c7:83:f5:07:37:12:
                    d3:b6:88:50:22:f1:c4:96:a1:92:fb:9a:06:48:40:
                    ff:75:58:d8:3b:a4:18:f6:41:67:21:40:ca:7f:99:
                    74:ab:9b:d3:7c:f6:36:30:92:7b:08:f8:84:c9:e9:
                    de:c5:e3:ac:f4:ee:b0:f3:83:e1:55:55:e0:b9:f4:
                    10:29:be:92:29:a8:fd:6c:95:0f:44:03:95:72:c4:
                    00:42:74:fb:a6:c3:2e:7c:ae:a2:ee:a0:1e:80:83:
                    ff:d9:46:10:84:5e:4d:de:78:d2:56:37:7a:b8:93:
                    47:c4:74:c7:89:22:0f:3d:2f:56:c5:6a:a2:87:37:
                    b3:d0:60:a1:50:46:ce:e3:17:9a:7e:94:79:e9:44:
                    97:32:43:9a:73:64:2d:3a:75:b8:61:38:86:e4:66:
                    da:70:fc:02:f3:f7:0c:a2:fd:29:01:6f:58:b7:8a:
                    a3:e6:1b:08:c4:a1:5f:b3:9b:22:86:38:b7:ba:5e:
                    15:6e:2c:d4:dc:b3:40:c3:1a:5c:0b:5c:c1:46:8f:
                    f2:54:23:1c:80:88:cf:57:fc:a1:f9:7a:4e:ba:f5:
                    93:11:6f:49:3c:ff:71:4f:2e:a2:0f:c2:8c:4b:4a:
                    f4:df:4f:14:46:82:51:b7:b1:b7:de:b6:23:34:91:
                    24:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:1C:0F:20:24:E0:07:C5:DA:99:66:21:D7:1C:62:3C:53:C2:CB:F2
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/47be8a2e-1777-4edb-bfc9-9fcf7f4da60c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2a68::/45

    Signature Algorithm: sha256WithRSAEncryption
         40:23:35:ce:52:3d:19:77:e9:83:eb:0f:29:a9:97:94:aa:a3:
         3e:67:3f:f9:7f:36:b4:9a:5f:12:fa:33:13:dc:53:1a:b4:ba:
         ac:cf:05:e7:a9:aa:9b:7e:f0:b3:12:40:ed:18:6b:e4:e8:8a:
         ca:57:e8:e5:4f:cc:07:87:07:ba:90:67:7f:73:cf:eb:53:9c:
         55:34:67:87:18:df:31:7a:72:e6:d9:04:35:6a:d6:ef:c6:04:
         07:5c:a6:48:a4:eb:95:27:04:07:a0:5d:e4:c9:81:11:8f:a8:
         5b:ea:8f:3d:15:90:65:12:ae:87:85:e5:16:1a:92:aa:95:07:
         5d:a0:a6:f0:62:60:2e:91:40:c1:95:15:ad:55:71:7c:7d:ec:
         b9:ea:80:2e:ed:33:0a:bc:a5:0f:c8:ce:8d:96:5e:32:cd:83:
         76:ef:dc:84:73:4c:85:63:e4:43:e2:1d:a0:41:dd:9a:54:90:
         66:28:33:62:94:df:cf:44:74:77:40:fd:d2:b3:90:1c:33:4e:
         0e:97:66:fe:b0:44:f8:d9:cb:1c:c2:3a:4e:76:21:30:dc:e2:
         99:14:f3:c6:0a:1c:4e:ff:62:fd:cb:b5:0e:8f:6c:d6:bb:49:
         3b:41:4f:56:02:22:fa:8c:68:1f:39:ff:74:c2:f6:b8:d8:04:
         b3:eb:d5:51
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:55:44 2025 by rpki-client