Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5c64974e-09e8-46a1-a746-8fe4fc018c6e.roa
File:                     5c64974e-09e8-46a1-a746-8fe4fc018c6e.roa (raw, json)
Hash identifier:          LjlkFe8zCZcYZeRGOaJ95gvTVufoiF4sSrAbUAGgslU=
Subject key identifier:   6E:6A:62:38:D7:83:85:B6:E2:92:06:9D:E7:87:DD:CE:DA:53:8F:95
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       3EECD51EA9E75EEAFF9AD49DF4E60BAF179DEEE7
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5c64974e-09e8-46a1-a746-8fe4fc018c6e.roa
Signing time:             Fri 31 Oct 2025 01:27:48 +0000
ROA not before:           Fri 31 Oct 2025 01:27:48 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3be6::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:ec:d5:1e:a9:e7:5e:ea:ff:9a:d4:9d:f4:e6:0b:af:17:9d:ee:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 01:27:48 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=f2180574b1bc3607d9350a77d97a13230900ab327a49b260def236bd28a42656, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:8e:9c:20:90:3f:ea:ae:b6:6c:9e:7a:c7:36:
                    d8:cd:0b:44:db:2d:31:95:bb:ff:08:5b:24:53:35:
                    18:3c:f1:ec:b6:7a:52:b1:7e:e6:71:ce:60:75:d7:
                    3e:d8:c3:7a:f3:da:60:e3:81:69:19:7a:fa:b0:e5:
                    0a:64:24:19:eb:17:81:fd:95:af:5c:88:0b:65:b3:
                    94:1d:fa:9f:6a:31:28:82:b9:21:63:26:02:5b:62:
                    2e:e4:69:3f:14:35:50:31:4e:b6:cc:ff:d6:6f:c4:
                    42:f3:76:af:c5:32:34:b8:4e:44:ed:a8:1c:f6:18:
                    d0:b4:bf:3c:15:4f:86:de:1f:ad:2c:02:59:cb:38:
                    36:f9:10:94:5c:24:6b:2c:22:33:fd:bc:93:e0:e0:
                    5f:56:e6:89:26:35:d1:0d:34:2c:88:28:f1:9f:19:
                    18:fe:5d:f1:a3:8d:ab:19:fd:d8:c2:f5:85:18:ed:
                    c3:d1:89:cc:1c:49:2e:3b:52:e6:1b:9b:17:21:e9:
                    7f:4e:ed:70:bf:3e:5b:36:f1:33:2a:e4:c3:b2:9f:
                    5a:9d:16:ad:ff:a1:62:ba:35:a9:ca:d0:fa:15:5d:
                    87:b9:f4:97:11:4d:19:d2:c3:ef:20:13:ce:14:ca:
                    ce:0c:68:bb:33:6f:ce:90:5f:80:03:67:f4:c9:b4:
                    09:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:6A:62:38:D7:83:85:B6:E2:92:06:9D:E7:87:DD:CE:DA:53:8F:95
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5c64974e-09e8-46a1-a746-8fe4fc018c6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3be6::/47

    Signature Algorithm: sha256WithRSAEncryption
         50:8c:c4:ef:69:0f:dc:6b:ad:32:3e:cb:ed:80:45:46:3c:0a:
         20:ad:ed:99:54:4c:ee:21:6f:ce:3b:81:02:05:43:10:2f:74:
         02:5f:30:40:16:3b:42:12:f2:7a:8e:a2:28:50:7d:44:63:8a:
         3a:82:58:1d:18:70:6e:74:14:be:d1:d6:88:82:44:6b:cd:0a:
         fd:76:5e:fa:3d:5e:34:9a:43:3c:6d:0e:6d:df:9a:2c:c2:d5:
         df:97:e2:ca:de:17:9e:44:92:e6:2d:df:4b:b5:a4:e1:8f:2e:
         ea:c4:65:57:eb:d8:ce:53:08:34:c8:f1:5a:49:5d:7b:f6:90:
         3f:44:9e:fc:09:c5:46:4a:9f:a3:c0:61:53:7b:0d:ec:f2:fd:
         7a:bc:f4:9f:03:fe:c0:be:fc:cf:bd:de:d3:d1:00:38:78:26:
         6f:ec:75:ae:37:7b:1c:f3:3d:fc:66:89:a9:bc:ea:ae:e3:23:
         39:eb:17:4e:31:d1:af:41:65:84:36:c4:97:67:e3:f9:ed:91:
         9d:1a:c4:9f:8f:e8:ab:34:5b:e8:87:e2:4d:ad:fc:35:3f:51:
         9c:1f:a2:eb:f7:06:1f:b1:33:84:50:c1:b9:aa:14:57:8f:c4:
         52:cf:d1:49:6f:84:19:3f:79:c5:93:69:fb:32:11:64:d6:7a:
         93:aa:76:5f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:46:29 2025 by rpki-client