Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5dc9d44e-ff64-45a9-94bd-a5d90889c3f1.roa
File:                     5dc9d44e-ff64-45a9-94bd-a5d90889c3f1.roa (raw, json)
Hash identifier:          w1dqUWcaxPzjwhsWFGmbH+ttwJDqGwTUgcI8pvKzAAk=
Subject key identifier:   34:88:63:29:3E:B1:4B:62:85:DB:03:AF:C7:6F:A0:C5:B7:E5:51:94
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       79F80A7D06699BFCB22C278D2139AA17F7091B7B
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5dc9d44e-ff64-45a9-94bd-a5d90889c3f1.roa
Signing time:             Fri 31 Oct 2025 06:51:50 +0000
ROA not before:           Fri 31 Oct 2025 06:51:50 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2bc0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:f8:0a:7d:06:69:9b:fc:b2:2c:27:8d:21:39:aa:17:f7:09:1b:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 06:51:50 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=d431f6e4d0f9ce072eae956f73ca677e2da20117d74d4f7dbd7f6a2558995c33, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ea:92:e9:b3:cb:68:94:09:60:15:fd:2a:90:
                    a5:c8:b7:19:da:03:86:9e:1e:84:5a:e7:e3:2a:60:
                    7c:30:a6:3c:56:f6:38:a0:58:44:d9:83:cb:0b:10:
                    b2:d9:c6:93:b6:f7:c4:f2:1b:22:e1:75:d9:82:fe:
                    85:dc:1b:99:d2:b6:2a:1d:83:77:d7:03:bc:41:d7:
                    75:52:36:a0:05:54:5f:83:06:d5:9c:20:0a:a8:49:
                    a6:ce:d8:b9:66:31:ed:9d:f9:d7:e2:6c:60:f1:52:
                    e1:cb:bb:1f:40:75:13:4c:9d:be:aa:e2:00:df:25:
                    6e:df:dd:e0:e4:53:c7:a1:20:1b:45:fe:de:8f:49:
                    7d:23:37:d2:92:8d:af:8e:39:2a:89:fc:5a:49:23:
                    64:67:78:69:f0:2f:dd:33:f1:5e:69:71:a9:30:ea:
                    8b:9b:70:15:2c:41:69:78:7f:e2:af:ba:51:7f:29:
                    af:28:ca:e4:e2:a3:38:2f:dc:ea:0a:0b:65:c8:52:
                    7b:21:e4:09:e7:0f:f1:37:cd:0c:65:72:58:40:2f:
                    2c:dd:e2:87:fd:05:44:97:16:06:36:fa:3c:2d:68:
                    8d:6a:8c:df:e3:49:ab:43:d3:d3:9b:45:bc:8b:d1:
                    90:71:d9:d8:a2:42:b3:a3:c3:27:d9:5c:cf:51:45:
                    67:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:88:63:29:3E:B1:4B:62:85:DB:03:AF:C7:6F:A0:C5:B7:E5:51:94
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5dc9d44e-ff64-45a9-94bd-a5d90889c3f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2bc0::/44

    Signature Algorithm: sha256WithRSAEncryption
         56:bd:bc:f6:a5:cb:29:f7:95:a5:49:d5:bc:b5:15:4a:fe:fb:
         82:f6:0e:f0:89:c6:7a:ff:0a:22:be:2a:07:56:8b:a1:cd:fa:
         2c:46:49:db:d6:07:fb:2c:ab:21:37:17:3d:91:c0:a9:9b:86:
         4c:2a:bb:ac:59:10:6e:d5:34:67:45:41:17:a1:5e:72:2a:5c:
         aa:38:3b:fb:4d:25:07:d1:a2:c5:20:47:87:5b:21:16:e5:a4:
         10:e4:bf:f6:97:db:fb:61:0c:29:fc:a2:b8:3e:dd:0d:36:63:
         df:92:9f:9f:00:9b:0d:72:45:50:ff:af:99:66:7e:6b:7a:5a:
         59:f8:4a:1f:04:37:be:75:a7:01:ed:b6:07:75:e1:d9:4a:1a:
         0d:de:c6:f3:41:e1:ce:00:bd:e1:75:ed:96:98:f5:2b:30:53:
         8a:b0:aa:da:d3:0d:74:40:a6:90:25:91:58:22:53:87:e0:1d:
         6c:53:a3:4f:6f:16:e3:3a:5d:b8:29:99:28:d4:1e:fa:bd:e8:
         9f:79:54:89:37:01:ab:8a:83:33:4c:2d:7b:21:c1:64:9e:e4:
         c2:35:9e:aa:c3:b0:b5:6d:90:97:02:d8:2c:73:a4:e8:6c:3d:
         de:94:9a:0f:b1:56:4a:9d:8f:9d:3c:c7:b9:ad:04:23:4e:56:
         e5:37:c7:a6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:55:55 2025 by rpki-client