Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6e12d6fa-176a-43df-b7a8-200a65685e59.roa
File:                     6e12d6fa-176a-43df-b7a8-200a65685e59.roa (raw, json)
Hash identifier:          4h6qwTRhu6htBGKpayfyzI343FrwiSvh7l3Uy5Tdmhg=
Subject key identifier:   AE:69:99:F3:62:48:61:95:AB:2D:42:8F:73:97:30:9C:7F:9E:F5:2C
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       60254D32AC67542CB135BDC163A02B55BF054E93
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6e12d6fa-176a-43df-b7a8-200a65685e59.roa
Signing time:             Fri 31 Oct 2025 05:53:46 +0000
ROA not before:           Fri 31 Oct 2025 05:53:46 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2fa0::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:25:4d:32:ac:67:54:2c:b1:35:bd:c1:63:a0:2b:55:bf:05:4e:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 05:53:46 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=d45fa5c26f86cd08263b2e8d9a6fca82bec782e570ba0470f59a67c266df3f20, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:09:9b:6a:c3:d3:fb:19:5f:ad:48:d5:5b:5e:
                    3c:45:72:b8:a9:74:a2:f7:4f:e6:9f:d3:d8:1d:f8:
                    d7:a4:c4:56:d4:4b:b3:bf:25:d6:13:bd:9a:65:b2:
                    57:d0:c0:7d:57:3a:dd:d8:84:89:59:ff:39:b0:5e:
                    dd:0d:f3:7f:c3:98:48:8f:83:d3:3b:a6:89:62:79:
                    ed:d2:e7:c0:5f:f7:50:c6:b1:6e:33:56:eb:eb:6e:
                    d1:14:65:4f:1b:1d:b1:5b:36:26:58:a6:ac:85:a4:
                    0a:aa:26:66:97:7f:19:63:15:6e:e6:fc:a1:b7:1d:
                    15:54:65:87:ad:d6:24:96:55:91:18:3a:a9:56:5f:
                    bc:dc:a8:b7:dc:9d:eb:3d:ab:ec:fb:ee:1f:78:8f:
                    73:d1:36:b6:ad:6f:86:39:1d:b9:0e:8d:27:4a:5f:
                    c8:5c:a7:e7:21:64:f7:05:de:b5:8e:d9:ac:fc:36:
                    a7:36:94:a1:c8:51:92:12:6c:1b:54:1e:ed:e5:18:
                    f6:2a:7c:f1:22:03:ae:6a:25:b4:2f:b2:be:c8:6e:
                    89:6c:c6:49:a9:21:a8:a8:ee:34:c9:80:32:39:88:
                    f9:de:02:8a:be:72:ba:7e:ba:de:7d:74:e3:3e:8b:
                    24:1a:46:e1:0a:df:1d:7d:0b:46:fa:a1:f7:05:d4:
                    60:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:69:99:F3:62:48:61:95:AB:2D:42:8F:73:97:30:9C:7F:9E:F5:2C
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6e12d6fa-176a-43df-b7a8-200a65685e59.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2fa0::/45

    Signature Algorithm: sha256WithRSAEncryption
         45:0b:7c:3b:e3:9d:84:73:d5:1d:4d:8f:a1:cc:29:74:27:03:
         37:60:30:ee:f2:a8:ad:f4:9b:b2:76:89:30:af:24:65:68:c5:
         8c:86:a2:06:95:2e:94:07:9f:22:51:0a:9f:c3:0e:d1:d7:23:
         49:de:28:b8:47:21:b2:f2:70:32:63:8d:f0:1c:99:b4:fe:36:
         99:5c:c0:17:c0:49:05:5d:c9:08:cc:52:31:7b:e0:5f:92:f0:
         b0:54:81:ab:43:b6:bf:dc:49:6f:ed:3c:f6:ed:2a:59:ae:7f:
         67:0c:38:42:df:ef:9c:95:24:2c:cc:ae:70:05:d8:d4:07:23:
         87:42:92:f7:c5:10:5b:8d:fd:29:49:2f:66:2e:00:ab:36:21:
         8b:d4:5c:aa:15:9a:16:e2:81:c6:18:43:ab:89:7f:b1:ce:04:
         70:33:99:76:32:e7:45:57:bb:c2:84:84:a1:75:f2:b6:81:59:
         8e:16:44:45:22:28:54:ee:65:49:f5:f1:48:c0:3a:92:14:e9:
         d2:8d:2a:71:e2:92:d5:44:dd:f6:68:2f:b2:1e:2b:af:43:00:
         60:c3:9c:23:82:31:7c:89:2a:00:d3:85:ba:bd:dd:7b:ae:af:
         12:a5:6b:7d:e2:28:5c:db:4c:20:52:6d:74:b6:e4:83:bd:74:
         db:b2:74:d0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:28:17 2025 by rpki-client