Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/56214461-65f0-4cca-9e3d-229945d93c06.roa
File:                     56214461-65f0-4cca-9e3d-229945d93c06.roa (raw, json)
Hash identifier:          nAA5vdcT5smJrXhiAPRWOQgEeP7rQV6EsxNpxRD3QIc=
Subject key identifier:   A2:58:86:61:FB:FF:9B:6A:18:77:86:2F:EA:1D:B1:28:95:EB:FF:FB
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       4B579BFAFFB72EFA76CDE1C50953E886E7E870E2
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/56214461-65f0-4cca-9e3d-229945d93c06.roa
Signing time:             Fri 31 Oct 2025 00:51:50 +0000
ROA not before:           Fri 31 Oct 2025 00:51:50 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:37b6::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:57:9b:fa:ff:b7:2e:fa:76:cd:e1:c5:09:53:e8:86:e7:e8:70:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 00:51:50 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=c7a43caa19eabdc34f17efe441904f89966aa2aa5bb7cfcfd7d91251d1abd609, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:cf:2b:2a:3f:86:27:8d:2e:bf:f7:ba:55:3c:
                    d4:f6:f6:8a:19:c5:f4:69:ba:47:71:d7:82:bc:5d:
                    4d:91:1d:bb:c7:87:09:a4:61:4e:12:e0:49:b7:eb:
                    6d:a1:05:f9:f1:74:19:01:bf:d5:3a:f0:c3:e5:85:
                    fe:24:58:60:a7:0c:58:79:40:84:b5:6f:7f:aa:2c:
                    01:26:47:12:4c:a9:2b:db:7e:a8:2e:0b:e5:4e:47:
                    ca:b8:bd:1a:4f:7d:f1:da:28:6a:b0:b6:f3:e2:38:
                    8a:c6:1d:7d:2b:e8:c3:3d:7c:0e:67:f1:56:ee:33:
                    46:5f:b7:8e:0c:c0:3d:bd:96:2b:a9:a0:aa:0f:31:
                    33:ef:4e:39:c3:3a:4b:98:43:4b:71:d7:d3:3d:23:
                    c5:53:97:a9:09:ab:1b:e5:42:2d:b4:39:b2:41:6e:
                    e3:c3:a6:ac:71:53:83:05:02:f7:06:89:df:9e:1c:
                    7f:0c:27:fb:a4:77:e4:15:9b:30:81:0b:6b:af:02:
                    15:e9:2e:4c:1f:fe:55:31:15:4d:0d:d6:3e:e7:82:
                    2e:3f:01:8b:ec:b6:3f:e7:1e:20:bb:05:50:49:19:
                    7b:12:bf:c1:83:99:d1:ac:5e:eb:e3:3a:1f:77:22:
                    3e:5d:09:ee:09:a5:c2:24:46:73:68:76:c3:d4:8e:
                    8c:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:58:86:61:FB:FF:9B:6A:18:77:86:2F:EA:1D:B1:28:95:EB:FF:FB
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/56214461-65f0-4cca-9e3d-229945d93c06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:37b6::/47

    Signature Algorithm: sha256WithRSAEncryption
         28:7f:54:6c:b4:5a:67:7b:a2:fd:73:b5:07:5f:4b:63:ef:67:
         f0:83:44:9f:da:1b:3b:56:50:56:c1:ab:5e:8a:1e:43:a2:59:
         0b:28:d0:85:7e:af:2a:11:68:fe:86:36:27:1e:4b:93:a3:a0:
         80:75:81:2f:2d:11:7c:e4:3d:18:c9:70:6a:3f:30:c0:b8:67:
         a0:dc:0e:51:6b:f2:63:e1:d6:2b:35:9a:0f:d9:8b:ce:ea:42:
         a5:aa:ec:7f:60:60:3b:35:80:f3:3c:8b:3a:c2:98:54:65:4a:
         d1:e7:c9:ec:03:ac:85:16:07:8d:b4:fc:4b:4a:3f:bf:56:80:
         11:46:01:b4:08:60:ca:65:5a:02:09:80:6b:bb:5c:1e:e8:d0:
         62:70:83:53:aa:ba:7f:f6:c4:aa:5c:86:9e:b1:5d:e4:42:ca:
         d0:d4:3b:cf:4c:a3:63:5c:07:fd:f1:5f:7c:64:f4:e4:67:49:
         3f:82:30:55:82:55:41:f0:e3:79:ec:2f:1f:29:8c:63:91:90:
         16:89:1b:d5:d6:21:12:92:46:58:63:7b:9c:8c:77:99:3b:a9:
         55:ce:eb:88:d5:f1:35:b1:db:ae:b4:41:ee:90:59:60:c9:13:
         14:42:02:14:71:f9:c1:ae:19:ae:2b:cd:48:5b:bb:ed:79:6c:
         83:57:04:38
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:53:39 2025 by rpki-client