Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5aef6427-4740-4a10-a1e8-75b9c16bf05f.roa
File:                     5aef6427-4740-4a10-a1e8-75b9c16bf05f.roa (raw, json)
Hash identifier:          BkX3uP2q2pWwTeg527AtFnXWTRpVdgrQHQRmZuEDfPU=
Subject key identifier:   DB:12:EF:ED:EE:89:76:BF:9C:CE:5C:F0:CA:95:DE:A0:13:DA:36:23
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       1BE03DD33EAB5D39CE9EFEAE8435919EF667EF8A
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5aef6427-4740-4a10-a1e8-75b9c16bf05f.roa
Signing time:             Fri 31 Oct 2025 03:53:22 +0000
ROA not before:           Fri 31 Oct 2025 03:53:22 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2f00::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:e0:3d:d3:3e:ab:5d:39:ce:9e:fe:ae:84:35:91:9e:f6:67:ef:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 03:53:22 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=e10dc8c63737101643a3a3a3117cd7f909ee493e3e55f4fd51cee0db22da617f, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:cc:99:a4:27:ad:af:6a:08:0a:9b:9e:ba:3d:
                    ee:5c:44:ef:08:34:a4:10:b2:b4:7e:31:f1:85:6f:
                    b2:40:a8:75:71:14:39:86:6f:3a:56:b1:07:c8:c0:
                    97:2d:7c:52:2b:31:3c:5e:bb:fe:f4:91:81:c1:69:
                    db:7b:65:ce:a6:f8:42:1d:19:73:75:00:51:19:98:
                    0b:6c:82:22:09:59:a9:62:26:30:ee:e9:ba:04:0c:
                    ad:65:43:2f:af:2a:a8:7e:03:2f:ac:d0:6d:67:b0:
                    3b:87:30:53:7f:50:49:e5:91:57:73:fd:5c:e2:74:
                    ef:0f:ee:44:17:4e:58:ed:68:97:77:75:9e:59:41:
                    20:d6:3e:46:57:38:fe:94:5f:37:08:d2:ff:67:f6:
                    7f:fa:0e:53:c1:a3:5a:96:08:2a:ef:4b:a1:f5:e9:
                    cb:3f:20:04:39:b6:e8:77:d3:f6:25:c2:8f:fb:ee:
                    b2:e5:b3:6b:aa:0b:93:32:05:c0:b4:c8:c5:f8:7c:
                    92:3d:e6:dc:2f:d2:46:5a:90:e9:46:93:89:dc:87:
                    06:b0:08:c6:66:01:8a:db:f4:f8:80:2f:ef:94:33:
                    81:1b:62:5f:cc:6d:ab:a1:49:ef:74:c2:ea:71:36:
                    16:53:c5:20:5f:38:f7:a5:28:e9:89:5b:16:6f:a1:
                    2e:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:12:EF:ED:EE:89:76:BF:9C:CE:5C:F0:CA:95:DE:A0:13:DA:36:23
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5aef6427-4740-4a10-a1e8-75b9c16bf05f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2f00::/46

    Signature Algorithm: sha256WithRSAEncryption
         64:e5:37:84:e5:cd:3d:d0:4b:11:d1:f5:d6:1d:2b:a5:1f:6c:
         61:94:02:3b:50:03:9b:3e:79:87:64:90:d7:25:2c:9b:05:08:
         82:61:e3:68:dc:96:a9:6a:f6:5d:f7:0d:d0:55:e0:61:ff:49:
         b2:35:28:ca:ac:92:61:55:bf:46:b1:ab:65:69:b2:9a:3f:68:
         cd:53:fa:2d:b2:84:6b:6b:6e:75:9d:43:c0:ce:8d:c0:06:21:
         6f:16:a8:ca:75:53:82:25:d0:32:ff:56:fa:7d:16:9a:17:28:
         ec:d0:94:45:93:35:22:62:f2:9a:db:1e:20:54:6a:e0:27:77:
         54:7a:b7:dc:31:5b:09:69:4f:1f:0f:aa:b4:3b:f6:7c:46:e7:
         c6:2f:77:33:3a:a1:22:2f:7e:dd:d9:77:98:ea:eb:52:ca:f7:
         06:11:ab:7e:f9:54:27:67:c0:f3:ca:17:60:16:3a:18:99:08:
         45:5d:c9:c4:c3:75:2b:a3:b8:e3:94:a2:cf:08:ed:64:f4:76:
         12:8d:30:f7:7e:91:e3:a7:b4:35:16:87:7d:a6:31:da:0b:d4:
         0e:e6:56:ed:0f:8d:77:e2:42:cb:d8:fa:d1:13:52:2a:44:d5:
         4e:64:40:c4:a1:48:a0:b9:7b:25:bd:e2:c2:ad:0a:64:0b:e3:
         45:ac:64:17
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:34:11 2025 by rpki-client