Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6544dc11-b234-4da1-9eb6-2121e14402ad.roa
File:                     6544dc11-b234-4da1-9eb6-2121e14402ad.roa (raw, json)
Hash identifier:          uZxtLPqDaQUsfLsFph8UTpWSnHxVrf6Gk4B1FbMBlks=
Subject key identifier:   EF:D6:81:54:D6:40:52:33:89:D9:71:7A:7C:94:19:2D:F3:88:59:63
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       408C59EF61670869A09E79058460C9174DE27271
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6544dc11-b234-4da1-9eb6-2121e14402ad.roa
Signing time:             Fri 31 Oct 2025 01:36:55 +0000
ROA not before:           Fri 31 Oct 2025 01:36:55 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3c80::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:8c:59:ef:61:67:08:69:a0:9e:79:05:84:60:c9:17:4d:e2:72:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 01:36:55 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=ce9595fa7e66d233e77e41ebc74320a1a0df9eff79211b18b74967250adafa3c, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:1f:8c:04:a7:34:d4:04:a9:0c:d9:b5:f1:88:
                    65:b9:31:6b:8d:3a:67:60:6a:35:82:e6:b4:a9:d0:
                    d2:f0:81:9d:9c:5b:1e:b8:2f:ea:f5:22:b0:f7:a5:
                    b7:60:83:03:d9:bc:ea:07:c1:f8:09:96:4a:91:f9:
                    04:b9:48:52:e5:85:92:14:a9:3b:97:fe:21:40:a8:
                    58:ab:88:c1:25:86:de:e4:ac:41:06:b2:17:0e:f7:
                    25:04:19:4e:01:de:ea:bd:9c:c3:3e:38:fa:fd:c3:
                    f2:67:20:3d:db:54:c5:25:6a:6f:ee:e6:9c:ce:85:
                    4f:18:77:ec:76:71:95:87:7e:70:9a:88:f0:27:89:
                    99:e2:fe:cd:11:95:78:d8:15:c5:ae:a8:dd:d3:9f:
                    1e:09:4a:72:df:45:bf:71:64:9a:4b:28:c4:09:cc:
                    28:8d:ca:d4:08:90:99:6d:29:80:8a:eb:74:78:4c:
                    44:96:69:7f:af:b1:3a:6d:70:fa:71:bd:eb:1f:1d:
                    4d:e1:6e:9b:7a:1e:7f:da:12:cf:b0:b7:95:6f:f4:
                    79:5a:f2:39:ec:53:ed:f7:76:7f:5c:d4:e5:13:e6:
                    52:5f:ad:6a:87:11:86:82:51:aa:43:fb:5f:9d:fb:
                    ae:58:2e:dc:50:0c:ec:c9:b1:bd:ca:6d:17:ee:c7:
                    60:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:D6:81:54:D6:40:52:33:89:D9:71:7A:7C:94:19:2D:F3:88:59:63
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6544dc11-b234-4da1-9eb6-2121e14402ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3c80::/47

    Signature Algorithm: sha256WithRSAEncryption
         1c:1d:27:92:cd:22:b7:e6:76:6b:88:db:7e:8b:d2:36:99:57:
         c6:30:ce:88:d1:40:20:8c:7c:8c:b7:5e:5b:10:ab:67:7d:be:
         bb:47:cf:93:b5:72:67:04:53:96:ac:68:61:a9:74:87:05:d2:
         4a:6c:3b:b8:14:35:ce:ab:38:8d:80:15:f7:c2:0a:33:2a:69:
         53:bd:ae:7c:de:4f:6e:26:d2:12:0c:95:82:ea:e8:9f:80:8e:
         45:fc:a7:55:0b:4d:f1:c8:10:d4:3a:5d:41:f3:1e:57:54:63:
         92:d0:d6:7f:a2:64:be:24:86:35:32:93:66:4b:67:a3:71:50:
         fa:c1:e2:91:e9:ff:be:c9:ae:0d:7c:53:76:47:9a:6e:12:cb:
         9a:65:db:9b:6f:42:64:b2:b1:28:49:65:23:9b:bb:2d:49:87:
         af:89:bb:f3:b1:60:d1:3f:36:8e:e0:6e:1d:ac:64:51:24:0d:
         29:48:fc:6f:f1:1b:d8:34:c7:30:8f:5c:47:a7:1d:31:f3:b5:
         7c:b6:10:2e:35:f1:9e:99:9c:ee:c4:d4:1b:37:fa:1a:f1:36:
         d3:db:b4:75:70:d2:21:32:a3:66:d6:b2:9c:62:7d:8d:92:c6:
         52:08:ea:07:80:0c:c7:d7:54:40:9a:33:1b:8d:f5:5f:61:66:
         65:7f:c7:32
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 11:08:01 2025 by rpki-client