Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7c33c67d-ad99-4a54-bb23-5531c7c24e7c.roa
File:                     7c33c67d-ad99-4a54-bb23-5531c7c24e7c.roa (raw, json)
Hash identifier:          AQU2fX2x4UZabxS4+Bx2F1Y+fWknZbaL1KiqiThjyuU=
Subject key identifier:   87:74:7E:25:21:65:C2:6B:4F:0B:05:D0:4B:01:13:08:50:7F:44:86
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       69C38954B01714A0EA118EDBA3B3298F7F369AA3
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7c33c67d-ad99-4a54-bb23-5531c7c24e7c.roa
Signing time:             Fri 31 Oct 2025 02:38:51 +0000
ROA not before:           Fri 31 Oct 2025 02:38:51 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1668::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:c3:89:54:b0:17:14:a0:ea:11:8e:db:a3:b3:29:8f:7f:36:9a:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 02:38:51 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=d6918f9c8deb1bf6c0573de436d2def59e8c4a543a5a77861488f978e047dcb7, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:4c:62:71:c3:3f:de:44:b2:b0:1a:35:1e:84:
                    39:54:77:b6:fc:b4:b1:de:7c:dc:e8:c9:af:b2:ea:
                    42:91:c3:28:ed:0e:65:ed:f8:b5:c5:20:97:7e:ee:
                    a7:0a:f7:2a:e3:08:da:32:b7:cc:9f:17:ba:6a:f6:
                    33:0b:93:55:f6:9b:42:21:c1:0e:b8:90:10:91:d6:
                    4f:53:27:81:eb:9d:c2:57:c1:70:8e:c4:cc:30:20:
                    4f:6a:14:38:3a:8a:cb:9c:91:fb:11:0d:23:0c:41:
                    d8:69:ba:00:9c:e6:52:8f:38:19:ed:0a:01:2a:2e:
                    c0:7d:3d:2a:76:cf:d6:7e:25:53:3b:0a:6e:b5:83:
                    7b:d5:dd:f5:c3:8c:7c:85:92:cb:e7:c6:9b:c7:de:
                    a5:91:8f:f8:1c:3c:be:9a:a9:f2:2d:84:fe:6b:d4:
                    d2:fe:4d:35:e6:ca:4f:e9:70:21:8e:fa:5a:22:32:
                    27:af:b6:fe:5a:6a:13:a7:f6:a3:50:e0:24:d2:9f:
                    e4:3c:83:17:39:8b:9d:bf:ca:c5:f0:b9:6b:1a:d9:
                    33:17:5c:2e:61:5b:d7:0e:b7:82:7a:96:41:c6:65:
                    dd:e7:0e:10:cd:93:f8:f4:3f:bf:c2:80:86:10:f8:
                    7d:e7:a2:01:d4:99:77:19:08:73:9c:5e:a2:9b:ad:
                    09:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:74:7E:25:21:65:C2:6B:4F:0B:05:D0:4B:01:13:08:50:7F:44:86
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7c33c67d-ad99-4a54-bb23-5531c7c24e7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1668::/46

    Signature Algorithm: sha256WithRSAEncryption
         b1:a0:d4:32:9a:c2:47:2c:11:93:4c:84:f0:fa:06:9f:fa:12:
         09:e4:dc:32:71:04:40:07:eb:2c:93:a7:5e:6e:01:f1:7e:ca:
         a3:a9:13:86:80:c4:6a:49:f3:a5:2b:9f:a1:b1:97:c4:fe:62:
         ed:c5:d4:bc:ec:2c:6d:9e:d7:cb:19:bf:2c:da:69:26:e0:20:
         34:1c:c9:e2:6d:a4:c6:24:da:e5:e9:41:b1:e0:b5:8c:5b:88:
         e5:7c:73:2c:44:94:38:b1:e9:56:d1:6c:5e:b7:9a:52:ca:5e:
         bf:e6:c6:b2:e5:ad:fe:7c:02:bc:09:51:1c:07:3f:a3:54:62:
         ba:64:88:5f:58:4b:8d:c3:f6:1d:d0:85:5a:19:fd:35:f9:b6:
         d2:4c:56:2d:48:8d:e9:e3:34:5b:a6:5f:ec:f2:68:d4:78:90:
         60:ba:f7:bc:b3:56:e3:92:d0:07:53:e2:a4:ce:27:c5:57:f2:
         d4:f2:92:1b:eb:77:51:25:45:99:66:9a:53:16:3e:e2:97:1d:
         ba:8f:40:36:33:31:a4:29:b3:7e:55:68:1e:33:c3:63:ff:c7:
         9f:07:99:50:78:f1:c4:50:b2:da:4a:c8:05:a6:29:36:0a:05:
         bb:65:b3:5f:d7:0e:58:69:d7:59:ef:fc:f2:28:15:d5:08:a7:
         ea:f3:ee:cb
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:42:31 2025 by rpki-client