Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6fa049f6-e6c8-4e77-9fcc-3555c7d7cd26.roa
File:                     6fa049f6-e6c8-4e77-9fcc-3555c7d7cd26.roa (raw, json)
Hash identifier:          //ZBAATN7VYykyR+zKUjVALDpVNPcb1loBFSgKaUPH8=
Subject key identifier:   A9:82:6F:D7:22:1F:16:01:5A:01:77:7E:09:E7:A4:41:78:8D:6A:B3
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       0ACD0424412BB993865DDDAAAD66C8C6DD6DB262
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6fa049f6-e6c8-4e77-9fcc-3555c7d7cd26.roa
Signing time:             Fri 31 Oct 2025 03:38:42 +0000
ROA not before:           Fri 31 Oct 2025 03:38:42 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2be4::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:cd:04:24:41:2b:b9:93:86:5d:dd:aa:ad:66:c8:c6:dd:6d:b2:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 03:38:42 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=75844891173a6f74189e4a2db7d15bc1da701bf9655e664a3031c8f0f1783d2c, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:5f:66:a8:5c:84:c1:c8:ec:6c:33:19:59:56:
                    37:1d:8c:0d:22:13:8d:4e:97:be:29:6f:79:36:04:
                    b7:4c:a4:c6:aa:96:4e:74:1f:fc:31:98:20:2c:dc:
                    d8:6c:f0:9e:7d:79:2e:c1:b4:23:8d:14:78:93:cb:
                    cd:fe:5f:48:a2:62:bd:55:7c:47:1d:f2:54:69:76:
                    30:65:01:18:72:37:76:78:a6:04:39:5f:7d:e1:d7:
                    60:36:c4:7e:3a:cf:74:b0:5a:da:20:ee:b0:e1:98:
                    f5:99:94:5a:6b:96:61:eb:0f:99:18:8d:c7:d5:fb:
                    7d:bd:41:87:c5:ad:0e:15:ef:a3:50:76:d6:da:c0:
                    c4:69:68:12:c2:d6:cb:af:4b:0c:01:cf:20:53:df:
                    30:bc:89:42:8a:d6:20:89:56:d6:94:91:2c:83:9d:
                    56:88:6f:51:b0:44:65:4a:dd:0a:ab:b2:29:cd:7c:
                    fe:53:e1:ee:02:ab:78:e0:e1:65:0a:e8:b5:52:d4:
                    e0:1b:13:18:3f:f3:b1:89:ca:74:b4:28:fe:68:80:
                    69:87:0c:9c:51:e6:85:74:02:ef:23:b4:73:ef:64:
                    97:bf:2a:b3:e9:83:f0:0a:f1:8e:58:f9:b6:9c:81:
                    53:40:41:42:42:43:1f:a2:f9:07:50:bc:32:95:cd:
                    50:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:82:6F:D7:22:1F:16:01:5A:01:77:7E:09:E7:A4:41:78:8D:6A:B3
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6fa049f6-e6c8-4e77-9fcc-3555c7d7cd26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2be4::/46

    Signature Algorithm: sha256WithRSAEncryption
         90:38:1f:f3:cf:1e:b0:2e:da:68:82:27:41:da:4a:aa:f0:cc:
         9d:11:c1:96:36:d6:d4:c8:27:45:46:90:45:a3:24:3b:57:15:
         4b:90:ea:16:03:a7:8b:6b:c8:6d:06:fb:50:a3:e0:73:f8:12:
         99:7a:5b:8a:5d:8e:8a:a9:93:f0:a8:5d:c3:67:45:2c:53:e2:
         cf:f1:dc:38:32:3b:25:cb:a5:4d:ee:d7:f2:67:7e:e2:5c:52:
         a5:1f:f9:76:6f:9d:8b:a9:6b:9c:24:60:dc:c5:d6:24:d0:ac:
         08:43:82:5a:f7:5c:02:56:ba:18:02:cf:c2:9d:32:aa:44:7a:
         9d:b4:0d:0a:e0:81:28:b2:2c:a7:6e:b4:9f:a1:7b:57:d4:4b:
         8d:48:cd:20:2f:fc:60:9f:bc:0a:d4:bb:c4:bf:f8:c1:a7:ff:
         7c:ea:8c:7a:a1:be:75:6d:ca:f8:ca:55:24:6a:03:5b:a0:93:
         fc:b7:53:d8:b8:b5:67:dc:fb:19:18:e5:32:82:55:b3:d1:fb:
         b8:f2:7f:bb:c5:2a:9d:56:eb:a4:c7:12:1a:07:cd:7c:3c:23:
         30:30:9c:78:52:46:83:13:05:0a:9d:64:cd:c6:a9:ca:0c:44:
         1d:9e:32:fd:e7:bf:9f:43:b5:fa:d1:35:de:7c:3a:e4:2a:d3:
         e6:48:6a:0c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:38:50 2025 by rpki-client