Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/481ee24a-b886-4c43-8611-e22651194c64.roa
File:                     481ee24a-b886-4c43-8611-e22651194c64.roa (raw, json)
Hash identifier:          WWXAv7Vq37Xsnb8Bo5wJsBF63Sgyctu3QpyqCTE8clE=
Subject key identifier:   49:0D:28:CD:FE:E2:E4:35:4B:8E:38:9E:1D:8A:2F:6C:1F:CA:34:03
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       729494A1D9E7DD505922BF66D2BFE232868BC88D
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/481ee24a-b886-4c43-8611-e22651194c64.roa
Signing time:             Thu 30 Oct 2025 21:36:57 +0000
ROA not before:           Thu 30 Oct 2025 21:36:57 +0000
ROA not after:            Thu 04 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:178e::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:94:94:a1:d9:e7:dd:50:59:22:bf:66:d2:bf:e2:32:86:8b:c8:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 30 21:36:57 2025 GMT
            Not After : Dec  4 23:59:59 2025 GMT
        Subject: serialNumber=b0fd0922efcde83dcaffc9aaeba7f24f8254f9383bef32de3ea1100020835349, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:53:88:34:ba:24:07:cd:80:a1:6a:1b:f7:f0:
                    14:9e:32:17:47:11:d2:53:52:02:14:68:5b:61:42:
                    48:61:32:30:3a:03:df:fe:33:a4:92:87:41:f5:fc:
                    af:0f:12:f2:cf:d5:06:35:0a:16:65:19:81:ca:44:
                    9c:cb:17:ba:8e:cf:9c:d6:3d:2f:e3:3d:00:19:4e:
                    d5:a8:63:7d:e3:8b:ed:c9:0e:02:9e:bc:b4:3f:64:
                    16:7c:ff:c9:f8:5d:3c:2a:bf:dc:e2:ee:da:9e:c7:
                    3e:ed:25:3a:7e:dc:5f:80:ed:0e:bc:06:a4:af:58:
                    c6:c1:87:b3:58:d9:42:e7:50:13:97:61:56:36:31:
                    fc:fc:9f:17:55:fe:c4:1a:51:4c:58:44:6c:38:fe:
                    9c:e8:96:6e:3c:38:0c:32:37:6e:66:f7:e6:2e:9d:
                    d9:19:63:34:80:53:fc:f5:aa:b0:5b:9a:d2:e2:5a:
                    80:7b:b1:80:6a:1c:42:08:7e:04:db:eb:cb:3b:a8:
                    80:7e:0a:21:be:65:21:25:bd:9d:78:b7:2b:89:97:
                    ba:10:1a:58:c2:69:f3:e6:e8:f8:c4:6d:07:cd:32:
                    a8:85:48:5c:b4:e1:15:22:eb:ff:39:93:26:66:34:
                    ca:ee:dc:34:24:50:b8:bd:51:f5:84:26:62:a1:07:
                    1d:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:0D:28:CD:FE:E2:E4:35:4B:8E:38:9E:1D:8A:2F:6C:1F:CA:34:03
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/481ee24a-b886-4c43-8611-e22651194c64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:178e::/47

    Signature Algorithm: sha256WithRSAEncryption
         48:74:06:c1:43:ca:76:0a:5e:77:17:57:31:10:8c:f7:fc:0f:
         29:77:74:d9:b3:98:70:3b:99:44:ad:a3:f6:bc:60:a1:3d:a3:
         f7:d2:4d:87:b7:29:83:de:66:30:d4:3c:1a:35:ee:8f:ec:b9:
         fd:6a:c4:1e:2c:58:20:6f:1c:31:dc:9a:58:77:c8:c1:30:1d:
         b2:ee:fd:22:a9:fe:98:82:32:ee:cb:65:9b:40:74:fd:1e:53:
         91:6c:df:22:39:aa:b2:53:fd:ba:a1:ef:64:85:70:8b:22:07:
         5e:24:a2:87:64:b3:6b:61:3d:b2:43:43:58:71:20:f9:5d:1a:
         e3:0a:80:87:a9:fc:3e:99:ab:3f:2c:d8:a1:a4:d6:c2:4c:cd:
         f9:67:d9:6e:20:c3:0f:28:ea:87:c8:3f:ec:ea:a6:60:36:0d:
         df:47:28:97:cb:fc:dd:49:d9:f7:b9:1d:df:54:65:f2:b1:50:
         ef:58:39:d4:1f:88:86:2d:d1:8f:a4:a1:76:19:82:41:28:9d:
         4d:6a:5f:7b:32:54:f1:e4:45:89:88:ca:c1:5f:d0:c4:84:d5:
         e7:3d:12:ec:f8:4c:98:1a:15:c1:7d:bb:1e:7b:6c:a5:dd:e5:
         5c:49:ad:c3:d3:cf:ff:ff:ac:c1:20:eb:31:92:42:77:83:6e:
         70:b2:70:9c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 15:29:14 2025 by rpki-client