Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7c6123ea-98a5-41b8-83fc-fe25d54193ee.roa
File:                     7c6123ea-98a5-41b8-83fc-fe25d54193ee.roa (raw, json)
Hash identifier:          admEqZ6NGTmIt1c0foAMja0CnJhC3HASAO9xJ7pL9oM=
Subject key identifier:   FE:E3:A9:82:6A:39:3D:43:FF:2B:D1:7A:BA:91:E1:47:CB:84:07:D7
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       7FFA9E289B76B558C5F00B985764883B93ACE121
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7c6123ea-98a5-41b8-83fc-fe25d54193ee.roa
Signing time:             Fri 31 Oct 2025 03:56:37 +0000
ROA not before:           Fri 31 Oct 2025 03:56:37 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3248::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:fa:9e:28:9b:76:b5:58:c5:f0:0b:98:57:64:88:3b:93:ac:e1:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 03:56:37 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=560ecc3127526855f137c8344726cabb34930e7fa6ddd61bd7399b66b99a9aea, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:37:f0:81:ba:a6:25:2d:1c:47:bf:1c:b7:61:
                    b7:b2:2c:ca:ce:2e:d1:f1:79:a5:eb:fb:28:0a:85:
                    5e:1a:1b:87:f5:52:a5:fc:c1:2e:b7:84:68:b6:57:
                    57:3e:74:6f:dc:01:4f:c9:ef:1c:98:ec:01:86:53:
                    5a:6a:17:b3:f4:2b:5f:be:af:b3:bd:5b:8d:7c:6b:
                    57:b3:40:27:8f:dc:de:61:ca:e6:33:fc:85:f4:61:
                    72:d7:55:74:d0:a4:f1:6c:f8:6d:24:a7:b6:ce:fb:
                    a5:03:2d:7e:cd:37:6e:9a:4c:3a:59:27:c1:7e:44:
                    d1:9b:e7:e8:79:f8:6d:46:f1:6e:b5:fd:e8:0d:e8:
                    84:42:2e:6b:fa:6a:48:99:52:ef:e9:93:1a:0d:68:
                    9c:43:f1:d2:3b:27:a6:d8:ad:7a:f6:57:f9:ed:ad:
                    76:15:af:50:28:36:42:c6:0a:b8:e7:58:b4:b0:67:
                    67:27:00:c2:8d:51:aa:13:97:8e:24:c3:4b:da:9d:
                    bd:0d:e6:bc:7f:10:a2:62:7b:ef:27:d9:6b:f8:8e:
                    f3:63:29:38:e6:39:18:e1:cb:3d:ab:d4:44:f4:96:
                    51:d5:66:a2:0c:b7:34:4c:84:cd:75:cf:51:1e:fd:
                    5e:b0:3b:fc:47:a6:bf:40:f3:8f:66:b3:3b:4f:07:
                    95:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:E3:A9:82:6A:39:3D:43:FF:2B:D1:7A:BA:91:E1:47:CB:84:07:D7
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7c6123ea-98a5-41b8-83fc-fe25d54193ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3248::/46

    Signature Algorithm: sha256WithRSAEncryption
         57:fb:b2:0c:3e:de:6d:5d:25:db:c7:8e:82:38:46:d0:ca:cd:
         e1:fb:c1:ef:ff:ec:20:7f:63:84:bc:26:9e:9e:58:f0:a4:24:
         f7:6f:98:72:6a:6b:a0:92:d3:66:94:8d:8f:b3:0c:c8:da:16:
         ed:85:56:1e:5e:a1:c3:21:77:7e:88:87:42:17:bc:18:a2:21:
         e3:cb:63:45:22:ba:64:5c:32:e3:86:52:ed:87:ac:e0:cb:58:
         4c:53:ca:84:a1:25:9e:48:88:be:37:d2:48:a4:5b:ae:83:28:
         65:cb:95:50:73:5d:7d:90:a2:b1:ff:49:25:7a:e1:79:e8:95:
         20:06:37:2f:8b:73:48:fb:7b:1e:a4:0c:64:da:11:b8:b1:98:
         e2:56:6b:3c:9d:39:a6:ea:69:3b:58:01:dc:e8:83:9e:b1:49:
         e1:c1:e5:76:63:06:4c:b0:54:31:be:e5:5a:ef:b2:97:e6:73:
         7d:a0:29:d6:12:e8:db:34:8e:88:8f:34:da:6e:b9:c7:76:d2:
         fc:6b:97:d8:8c:a7:dc:7f:9e:bb:7b:c5:44:da:44:1b:2d:82:
         63:d4:d4:ff:93:2a:f4:dd:b4:77:23:2e:c8:31:54:ae:f4:85:
         c4:65:9c:55:c9:23:5b:e6:8b:c5:13:8c:28:9d:b0:a6:4f:4b:
         60:01:82:5a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:39:05 2025 by rpki-client