Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6b3f8905-9d96-4afb-af8c-02982a41fb3c.roa
File:                     6b3f8905-9d96-4afb-af8c-02982a41fb3c.roa (raw, json)
Hash identifier:          DvxiiD3aygJLqF2mZmO+eVrMpORWrkOno0ZsbM+2vlk=
Subject key identifier:   5C:5B:DA:C4:4B:C5:89:88:13:B2:DC:9C:50:EF:38:2B:90:90:DF:A8
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       7537C4285B38DC5701E0B390CEDEF7C494DEBB
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6b3f8905-9d96-4afb-af8c-02982a41fb3c.roa
Signing time:             Fri 31 Oct 2025 02:55:33 +0000
ROA not before:           Fri 31 Oct 2025 02:55:33 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1a04::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:37:c4:28:5b:38:dc:57:01:e0:b3:90:ce:de:f7:c4:94:de:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 02:55:33 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=b2509af104cb1350baa97bf52758d735652865f753fe2bbd5fd47418508a94a2, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:08:a3:e2:ac:3c:cd:0a:86:3d:cc:0f:66:fc:
                    be:e1:90:0d:7c:77:cb:be:11:16:82:5f:bf:7c:ee:
                    30:78:64:0e:6e:41:f4:e7:be:a1:fe:cb:db:26:c7:
                    b0:95:b9:14:b4:56:5b:6c:17:18:d1:7d:c7:be:38:
                    de:7b:3c:f6:4d:72:4c:b4:43:88:b8:a4:45:35:1e:
                    d4:a9:f8:c2:40:1f:b1:22:fc:fc:36:fc:38:6e:b3:
                    55:84:25:99:b7:b8:87:86:58:2d:0f:50:fa:b0:fc:
                    68:73:41:65:cd:f1:31:51:b8:bb:c7:b6:2a:f3:4d:
                    14:01:f0:0e:44:d5:26:a4:8a:ef:9d:72:51:85:11:
                    01:eb:6d:6a:50:ff:7b:ac:af:d5:cd:48:54:7e:9d:
                    44:36:0d:de:0a:b0:b9:62:26:76:99:0b:1f:9d:39:
                    89:45:8a:42:53:53:a6:1b:bd:47:26:ab:ca:5b:62:
                    23:24:27:87:c0:c8:aa:d4:ed:c1:22:ed:f8:25:37:
                    8f:71:0e:1e:7a:cb:d3:ea:70:d7:4a:e3:af:f9:39:
                    e0:dc:57:82:19:af:5e:ca:ce:39:fc:61:1a:8e:5d:
                    8a:e3:79:fe:9a:d5:82:65:d2:ab:b0:6a:4d:1f:81:
                    1c:dc:19:72:b2:65:d7:c4:8a:13:9e:1f:28:b1:c1:
                    ae:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:5B:DA:C4:4B:C5:89:88:13:B2:DC:9C:50:EF:38:2B:90:90:DF:A8
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6b3f8905-9d96-4afb-af8c-02982a41fb3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1a04::/46

    Signature Algorithm: sha256WithRSAEncryption
         19:42:4d:cf:0a:0b:ca:d6:14:9d:f6:f1:35:ec:30:3a:dc:9f:
         8a:ab:93:f0:02:7a:fd:a1:f5:f3:b6:ec:a8:71:a9:b1:3f:1e:
         36:b6:5a:ad:52:f9:18:63:c0:b1:09:de:8b:7c:a5:79:4e:e5:
         c8:73:23:86:4b:48:7a:a6:8b:6e:ee:5e:bf:68:03:70:56:b2:
         96:d5:75:7e:d1:a9:53:95:1c:7c:08:72:ec:6e:e1:29:73:fe:
         a3:61:3c:47:be:c9:5a:eb:8f:be:33:7b:eb:09:6c:8d:d3:55:
         3c:20:90:7f:88:3d:5c:18:73:8c:09:91:ad:1e:45:8a:c7:3f:
         07:fd:37:8a:1d:24:7d:79:a9:19:b8:f8:2c:54:14:b8:5c:a5:
         3a:1d:37:1c:4f:dd:2e:89:c7:b3:b2:20:6a:af:65:16:4f:3c:
         2c:42:33:b1:ce:78:2d:bf:57:0b:a1:42:7c:52:0d:87:60:79:
         5a:68:1e:b9:cc:c6:f7:90:e8:ee:88:bf:f8:55:58:13:37:47:
         52:ab:e1:22:2b:06:08:b4:e0:91:67:ac:3f:27:c5:86:e6:4d:
         0b:2f:2d:22:a3:3b:c3:21:63:09:1d:56:70:36:39:5e:f5:23:
         44:74:10:85:7c:57:12:b2:c1:d1:54:30:82:76:43:67:95:bd:
         eb:1e:03:72
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:54:41 2025 by rpki-client