Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/55c44eca-c50b-40ef-aa4c-b86ca66ed122.roa
File:                     55c44eca-c50b-40ef-aa4c-b86ca66ed122.roa (raw, json)
Hash identifier:          k9nd1oJdLx+G2VBREfQiumyr1N2y0Q4SdyoapZHBm5M=
Subject key identifier:   9C:A5:73:5F:3E:9C:54:36:F4:2D:FD:41:E4:D5:1D:D6:50:E9:91:DC
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       3CBD0500058198AF8A76516B8C8B4627525791
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/55c44eca-c50b-40ef-aa4c-b86ca66ed122.roa
Signing time:             Fri 31 Oct 2025 07:29:13 +0000
ROA not before:           Fri 31 Oct 2025 07:29:13 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3e80::/43 maxlen: 43
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:bd:05:00:05:81:98:af:8a:76:51:6b:8c:8b:46:27:52:57:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 07:29:13 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=be5b046b39c2991cf39c5f91e86df1487831bca92e71e924ed98100af18aa0bf, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:6f:bb:f2:cd:98:90:f9:4c:c0:c5:c9:ba:20:
                    d2:ab:85:25:ea:be:17:8e:ff:46:3e:f6:63:a9:54:
                    e6:b6:d8:40:f3:60:e2:8f:49:bb:09:68:bb:4d:37:
                    20:dd:c2:73:46:fc:f8:52:4a:2a:66:64:4b:e8:46:
                    00:f0:c5:c2:16:4e:26:58:bc:e9:d3:ae:ef:47:12:
                    f1:91:94:c0:1e:79:31:8f:d1:0c:57:ae:08:b0:02:
                    74:ee:f3:4f:8f:f1:24:df:7c:13:aa:34:b5:0e:49:
                    9c:90:27:bb:83:03:82:ca:b5:a0:fa:95:a7:80:37:
                    a5:cd:fa:b1:94:9d:08:44:58:b1:ff:ae:5b:c6:f2:
                    11:7c:82:64:31:6e:88:da:03:e3:48:1b:35:f7:0d:
                    b4:a3:ec:50:30:b5:2c:f8:c2:bf:3b:a0:7f:cc:3e:
                    c9:a6:de:87:7e:4b:ea:42:c8:9c:05:3c:62:4e:4c:
                    97:74:89:35:6c:3c:3c:ea:9e:a3:25:fb:f2:08:af:
                    23:7f:eb:1a:6b:7b:8b:eb:6d:fb:60:68:8f:84:f2:
                    64:0d:70:41:f4:21:f3:9d:2f:48:93:64:25:69:44:
                    7f:f0:37:09:16:c4:3c:51:77:52:1c:9c:8e:12:88:
                    26:3d:18:11:a3:7d:7c:da:9b:58:3c:89:7b:bc:91:
                    c2:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:A5:73:5F:3E:9C:54:36:F4:2D:FD:41:E4:D5:1D:D6:50:E9:91:DC
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/55c44eca-c50b-40ef-aa4c-b86ca66ed122.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3e80::/43

    Signature Algorithm: sha256WithRSAEncryption
         27:98:c1:f4:4b:57:4b:93:4b:e9:56:30:f4:db:05:74:48:af:
         25:da:47:41:e7:71:4b:d2:25:cd:4b:6a:d2:a1:f9:d9:07:f8:
         76:e6:a4:5e:8e:0f:02:de:b5:d9:85:80:4c:de:0e:f6:b7:96:
         90:e8:b8:e7:2d:3b:5e:69:af:7a:46:49:74:25:82:32:d5:fa:
         ea:ab:be:b5:a4:67:08:5c:59:fe:fc:d7:ec:a6:79:ec:08:60:
         79:a2:74:e5:31:d8:2f:09:14:5f:53:7a:ba:4a:6d:07:b8:7d:
         7a:55:65:fa:a5:82:e0:49:3e:a4:84:7e:d9:24:da:bf:d1:27:
         bd:1f:6d:f7:0f:0c:a6:0c:a8:cc:5e:9b:1c:71:03:3d:16:cd:
         08:c4:fa:3f:f3:f9:b9:6b:80:7d:10:e7:a1:0c:d3:64:2f:07:
         8f:94:d0:ca:a3:2f:d5:2f:a2:81:92:7f:65:24:b3:6f:74:be:
         de:75:b6:22:a1:89:2b:a4:2c:7a:73:e2:8e:84:3f:a5:cb:e6:
         77:f3:51:b5:2d:5b:22:9a:a2:75:e5:ca:15:a5:5a:63:3b:32:
         0e:d2:6a:32:73:7d:89:e6:69:2d:55:4d:7a:c8:47:13:dc:e9:
         ff:b4:c0:b9:1c:3f:e6:d2:b6:cb:ba:0c:ed:dd:54:dc:03:a4:
         a6:bb:d8:ef
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:55:51 2025 by rpki-client