Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/579fdd9d-f046-4a7c-a0f4-d0f9950ae152.roa
File:                     579fdd9d-f046-4a7c-a0f4-d0f9950ae152.roa (raw, json)
Hash identifier:          2NiuponqlLIE3SHmVxnUYgEK8QdyiLVbRHHRtc6Ohos=
Subject key identifier:   A1:DD:CF:30:1A:C4:89:40:4A:64:BA:4B:7E:E4:DB:71:06:F2:4C:FA
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       3515870374EFDEDD09752A56DE32108261ED67D5
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/579fdd9d-f046-4a7c-a0f4-d0f9950ae152.roa
Signing time:             Fri 31 Oct 2025 07:25:54 +0000
ROA not before:           Fri 31 Oct 2025 07:25:54 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3660::/43 maxlen: 43
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:15:87:03:74:ef:de:dd:09:75:2a:56:de:32:10:82:61:ed:67:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 07:25:54 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=919894470d35b56647a27fc60df840b465478931e735e12c0838e021465c7c6b, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:4d:b1:ac:e8:27:29:dd:df:ee:9b:05:09:36:
                    09:80:80:45:20:c8:ba:93:5c:52:4b:d2:cc:c7:0a:
                    3f:fe:71:00:93:7a:40:8e:56:25:77:f8:f6:df:23:
                    66:fd:4d:3a:a2:46:bd:95:cd:06:8d:d6:64:cb:4f:
                    9f:f6:20:0e:b2:c9:02:3b:b5:35:ac:95:02:5b:73:
                    d4:f2:86:3d:da:e8:ad:25:06:0e:0f:2d:2b:ca:48:
                    a9:7b:28:8d:d3:64:d1:94:99:b6:53:b6:2b:ca:0c:
                    8b:68:68:5c:0c:57:36:07:13:86:3f:b7:9f:56:f5:
                    3d:4d:e9:9e:1d:a7:93:69:38:f9:f2:e6:04:4e:7e:
                    35:bc:68:70:f9:04:c6:d9:cf:47:ca:95:1b:17:67:
                    37:c3:90:82:91:0d:6d:12:d1:17:27:cf:31:52:70:
                    c4:3a:fd:7c:a9:8c:23:62:b6:cd:61:9e:e7:ad:1b:
                    22:08:10:7c:5b:f2:d4:04:0e:5e:f2:3c:19:df:e1:
                    c5:7b:88:54:07:fc:89:47:da:d4:59:08:d0:01:e2:
                    af:d2:36:45:f7:6d:88:bc:9f:f1:82:17:40:9b:26:
                    65:44:40:74:5c:df:63:e7:f9:58:63:08:4e:ee:fe:
                    75:f3:09:e9:4a:d3:78:82:11:6f:50:32:13:f2:bd:
                    69:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:DD:CF:30:1A:C4:89:40:4A:64:BA:4B:7E:E4:DB:71:06:F2:4C:FA
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/579fdd9d-f046-4a7c-a0f4-d0f9950ae152.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3660::/43

    Signature Algorithm: sha256WithRSAEncryption
         b4:d1:29:70:14:86:f9:18:b2:f3:26:94:0e:88:0b:d3:e0:93:
         35:46:f0:83:b3:da:aa:0a:17:af:6b:8d:ca:07:3a:b0:53:76:
         e4:cc:a5:ad:0e:21:eb:50:55:ce:ca:c2:c6:53:e0:7d:88:65:
         72:14:e2:1f:a0:08:d0:86:a8:b3:3e:a9:fa:6a:36:bb:b4:97:
         04:cd:a7:f3:17:1c:1e:32:52:e7:9e:ea:38:8f:03:90:15:f4:
         99:1a:92:83:d1:2b:58:64:e0:8a:fc:9d:49:63:82:82:92:2c:
         18:90:c7:92:c2:b2:e0:b2:c7:a8:73:42:49:c4:1f:9b:bb:88:
         73:f7:29:b5:f0:05:62:90:e4:71:cf:6b:19:99:de:37:e9:df:
         59:fc:ce:41:d6:fa:1a:bf:0a:44:a6:ce:90:bc:ac:3d:7f:5c:
         cb:a6:cc:a0:ac:e1:e5:7f:ee:93:dc:3c:60:68:17:c5:cf:18:
         d5:33:65:25:b6:4c:58:8f:28:1e:64:02:31:a1:77:bb:f4:98:
         1e:15:70:1c:62:12:e7:70:2c:22:93:c4:34:d9:28:ee:48:a8:
         9f:6c:af:21:c6:40:fb:1c:ff:80:02:d3:48:f8:52:22:5b:f2:
         b9:32:01:34:65:5a:47:e2:ba:e1:ad:fd:f7:bd:16:23:1b:3c:
         bf:fd:b4:76
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:34:21 2025 by rpki-client