Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/53723d46-3544-4ee1-9eda-5c5a9d30e2e1.roa
File:                     53723d46-3544-4ee1-9eda-5c5a9d30e2e1.roa (raw, json)
Hash identifier:          UsFLl/YQsFL3t1glEMbf2sT9H4xW1KzrEykp3f9PvoM=
Subject key identifier:   A9:4C:3C:A7:05:24:A8:9B:8B:E5:C7:DC:AB:B0:A4:A1:A6:CD:98:BA
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       080C4AB33BD265B2F6A22E2608A1BFD2F6339EF3
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/53723d46-3544-4ee1-9eda-5c5a9d30e2e1.roa
Signing time:             Fri 31 Oct 2025 06:55:03 +0000
ROA not before:           Fri 31 Oct 2025 06:55:03 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:32a0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:0c:4a:b3:3b:d2:65:b2:f6:a2:2e:26:08:a1:bf:d2:f6:33:9e:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 06:55:03 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=f6906a7c95681670cff73ceb3417e529104fce4dc46feba5da2551ea7004783a, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e8:70:fb:47:a8:da:dd:43:e6:b5:04:a9:92:
                    0e:ce:4b:3f:c1:03:8d:2b:eb:50:f2:7f:82:c3:3b:
                    13:0e:ac:6a:93:38:94:0d:20:71:15:2a:38:23:8c:
                    cc:e5:7a:ef:28:0e:fe:af:a0:89:27:34:4b:83:1f:
                    d6:3d:d2:9e:ae:a2:e5:02:15:61:5d:59:98:cc:e9:
                    66:99:0f:b8:1b:3a:a7:18:15:63:8e:c3:f4:5c:04:
                    98:8d:7f:9e:fb:6c:1c:f4:d2:ec:46:c5:7d:dc:df:
                    32:e4:5f:53:b6:04:59:fe:c6:2e:34:f0:4f:55:65:
                    ee:c1:86:07:f7:ed:6e:5b:0f:5d:dc:bd:97:44:73:
                    72:d2:cc:01:f4:7e:f7:6b:8b:33:43:bd:e4:4e:2d:
                    29:ca:b6:76:0c:1c:3b:69:71:14:7d:5b:dd:b8:69:
                    03:41:15:41:15:ee:9f:ae:ee:73:b5:4c:56:60:dc:
                    76:1a:0e:4a:98:28:be:85:ad:73:4b:d0:3f:db:5c:
                    ea:9f:73:0c:b9:b7:0b:c8:f9:a9:88:e0:29:5b:8f:
                    5f:91:66:ff:60:2d:c2:4b:5d:90:66:35:fa:c7:39:
                    e1:29:41:72:0c:92:99:8f:9a:89:d0:6b:68:a2:39:
                    1a:f5:e0:a3:e6:ab:a6:af:3e:4f:16:e4:19:68:2a:
                    d5:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:4C:3C:A7:05:24:A8:9B:8B:E5:C7:DC:AB:B0:A4:A1:A6:CD:98:BA
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/53723d46-3544-4ee1-9eda-5c5a9d30e2e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:32a0::/44

    Signature Algorithm: sha256WithRSAEncryption
         7b:d1:82:30:66:8f:1f:ea:b7:ab:93:52:f6:4a:99:3a:19:34:
         67:7f:49:b3:3b:24:e3:f0:1f:a6:94:94:c0:96:0e:14:c8:6a:
         a8:35:1e:a8:a5:c0:7a:ae:90:bd:59:34:9c:f4:ae:a0:2f:37:
         6d:87:b6:3a:1f:47:d2:ed:8c:1a:25:58:c7:38:74:59:55:b2:
         ec:dd:68:e6:1b:d1:03:41:14:79:df:00:9f:54:f6:6d:79:25:
         35:92:88:a0:64:a4:b6:e5:04:ec:b8:18:3a:44:da:b4:7b:2a:
         a9:38:91:da:f0:fd:e7:86:32:bb:d7:3b:05:cd:24:3d:87:d3:
         76:91:91:74:33:e0:7a:6f:f4:de:66:b8:cd:70:8d:16:05:65:
         fe:4e:7d:34:ab:5a:84:2a:32:b4:71:3e:b0:a0:3f:27:44:bd:
         86:19:5e:d5:ce:4f:3c:03:07:d7:71:68:ad:c7:87:23:96:a0:
         0b:56:de:7b:97:cf:c2:19:28:15:24:12:c4:66:3d:d5:dc:25:
         94:68:1d:56:a7:33:2f:93:12:4e:f5:e0:e7:56:ae:94:b7:e5:
         4d:09:14:3e:0c:8b:61:78:0c:86:24:51:69:bc:7b:90:7b:64:
         a0:b0:2e:14:b4:35:37:2b:bf:d8:9c:1b:ac:2e:37:69:c4:5b:
         1a:21:f7:33
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:40:42 2025 by rpki-client