Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7338ee93-768f-44c2-a2d8-55b3a6e2afe6.roa
File:                     7338ee93-768f-44c2-a2d8-55b3a6e2afe6.roa (raw, json)
Hash identifier:          iUPQTq0ePjnCA5L7uBXzkV9mx0smBbPls8GAJzYZ4dI=
Subject key identifier:   9A:73:92:15:86:E7:DD:42:56:4F:84:BD:1E:78:7D:46:AD:6E:FB:14
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       5BC40B24DBD379957A85470AE64FB7079D1388C4
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7338ee93-768f-44c2-a2d8-55b3a6e2afe6.roa
Signing time:             Fri 31 Oct 2025 02:37:00 +0000
ROA not before:           Fri 31 Oct 2025 02:37:00 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1574::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Nov 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:c4:0b:24:db:d3:79:95:7a:85:47:0a:e6:4f:b7:07:9d:13:88:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 02:37:00 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=f15656e449fd40e021bb607a6a0e901a9cc7d6708c13c5c729edbaebdeb09f58, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:69:4c:70:a4:08:d0:91:c9:51:2f:8c:6e:15:
                    ed:33:db:79:85:12:18:5f:f9:0f:7c:3b:2f:0b:f6:
                    eb:a2:84:c1:74:ee:fe:bc:8c:3c:70:d4:d7:ba:6f:
                    e6:73:6d:9e:51:54:21:58:61:b0:a7:f7:68:a9:40:
                    bd:8d:a5:b5:4b:c1:af:de:7b:0b:12:b3:18:6a:a1:
                    0e:a4:fe:f3:fc:67:00:c0:15:55:c7:75:ec:95:a0:
                    c1:9a:ff:2d:a5:6b:70:01:99:34:78:ad:66:5c:9f:
                    5f:6e:42:71:81:e5:c7:e8:95:ee:7a:0d:e9:75:06:
                    3c:75:b6:30:27:79:5f:37:27:f6:2f:02:d1:4d:25:
                    6e:91:b0:61:a1:a9:dc:be:f1:55:76:97:7e:49:8f:
                    bc:c3:1b:ec:8b:91:0a:42:0b:73:35:e7:f7:71:5f:
                    ac:af:64:97:17:10:91:c0:0d:aa:ca:c7:84:6f:61:
                    79:0d:26:6c:1d:71:ab:fa:1c:c0:7b:69:ec:18:f8:
                    77:dc:8b:d3:fe:85:36:ef:fe:27:b3:5b:a9:2b:c4:
                    c6:4c:3e:60:56:40:15:a4:c8:d6:31:74:62:cc:05:
                    83:c3:96:dd:5c:1b:b5:14:3b:0b:1e:45:e3:d2:c4:
                    22:be:15:93:d5:26:71:26:9e:cd:e7:dd:c2:dd:93:
                    de:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:73:92:15:86:E7:DD:42:56:4F:84:BD:1E:78:7D:46:AD:6E:FB:14
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7338ee93-768f-44c2-a2d8-55b3a6e2afe6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1574::/46

    Signature Algorithm: sha256WithRSAEncryption
         67:af:a5:76:76:8a:72:36:ea:f5:8b:9c:42:a9:f2:8d:1b:db:
         1d:5a:de:cb:40:60:07:f3:75:01:26:7a:dc:20:ad:4f:49:93:
         aa:78:13:d6:62:c6:64:4f:01:9d:01:7d:3c:08:74:52:9f:b0:
         ca:7d:05:6f:be:71:9d:ad:87:d0:01:93:b5:b6:aa:c0:52:9b:
         dd:f2:30:17:e0:bb:15:61:75:94:35:71:4e:5b:17:23:33:70:
         3a:bc:04:5e:e8:74:3d:68:81:ca:89:62:dc:c0:8f:fb:6e:1b:
         46:a7:20:25:df:c5:f4:3f:62:79:e7:51:59:9d:1a:3f:9a:5e:
         11:79:7b:a4:18:0b:bb:dc:14:ec:34:62:c6:3a:d5:0e:ab:b2:
         a0:ad:d7:82:bb:5c:5e:43:bd:b1:a7:1f:18:c4:8b:d6:df:9d:
         67:1e:a4:06:48:07:b3:c2:3e:da:18:07:1d:ac:f2:69:4a:1d:
         b5:42:a6:58:c1:b6:dd:04:23:2d:47:57:3e:e8:58:46:46:c5:
         c0:3c:2a:8f:60:b5:f9:91:d2:85:da:49:02:80:64:cf:73:eb:
         f4:9d:ea:79:0c:30:28:f9:7f:31:0c:48:84:ce:9e:11:67:51:
         15:7f:8d:3f:35:1f:b2:ec:d2:6c:73:3f:ef:01:c2:7f:7c:0c:
         be:00:6f:a1
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 15:59:54 2025 by rpki-client