Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7d6a31e5-5d37-4e38-83f3-f7e8c1277620.roa
File:                     7d6a31e5-5d37-4e38-83f3-f7e8c1277620.roa (raw, json)
Hash identifier:          lW4lCnJbVqrfniQ+pgHJx7+cdNfYHVLvetxKBKKgFvk=
Subject key identifier:   53:0F:9D:D2:C4:B7:78:89:D1:57:D0:96:A6:36:27:25:7B:91:AD:6A
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       7CC500060CA9532D6ABBFADC97F2AB65577F3EA9
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7d6a31e5-5d37-4e38-83f3-f7e8c1277620.roa
Signing time:             Fri 31 Oct 2025 02:27:00 +0000
ROA not before:           Fri 31 Oct 2025 02:27:00 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1408::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:c5:00:06:0c:a9:53:2d:6a:bb:fa:dc:97:f2:ab:65:57:7f:3e:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 02:27:00 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=b52f648578508a7298962f569905a13af7a3143caf140f074e21722eb367cd1f, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:0c:a1:8f:c8:40:6d:8a:da:c4:10:ec:74:86:
                    17:2c:4e:f7:29:57:6d:a5:ab:63:4f:80:fd:ca:cd:
                    46:8f:4e:d5:da:74:11:ea:05:2a:7b:f2:e0:f8:82:
                    45:13:50:a7:e8:70:09:df:c4:a1:ad:46:bc:2a:31:
                    5b:74:e7:56:43:0a:d7:45:98:b5:c4:5d:56:0c:a1:
                    f7:6e:55:dc:39:71:e0:62:d4:57:3c:8b:f2:2b:dd:
                    f2:9d:28:e8:cb:d3:06:13:65:36:a5:15:d6:42:b3:
                    e4:6a:fa:69:81:b1:1f:13:d3:10:48:66:44:10:ab:
                    1b:67:cb:dd:13:7b:bf:6a:f4:d4:33:c8:54:98:da:
                    c4:a1:73:c7:f8:8b:1d:5c:65:1b:3d:14:16:1e:75:
                    69:6b:95:41:91:0c:21:37:72:2b:cb:c6:9f:9b:5d:
                    42:3a:b4:8e:74:23:d2:22:9e:0d:8f:d7:c6:a6:ed:
                    f8:6a:8a:9a:8a:a9:20:4e:f4:ee:92:f3:00:33:4c:
                    6f:a2:f7:cf:61:d7:c1:81:59:7b:74:5f:1c:40:a0:
                    18:15:35:af:a2:5a:63:9e:84:55:00:a1:2c:8c:94:
                    fe:13:52:00:26:07:50:1d:71:ca:9f:09:d5:8b:9a:
                    19:4f:86:b2:33:47:6c:58:40:7c:6e:cf:9f:f5:cf:
                    65:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:0F:9D:D2:C4:B7:78:89:D1:57:D0:96:A6:36:27:25:7B:91:AD:6A
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7d6a31e5-5d37-4e38-83f3-f7e8c1277620.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1408::/46

    Signature Algorithm: sha256WithRSAEncryption
         76:b8:d0:5d:f6:5b:18:04:45:5f:03:6b:7f:96:88:6e:81:14:
         f6:75:11:05:d1:70:55:a6:62:c2:86:3b:1d:2b:d4:e5:87:50:
         d6:64:4c:67:35:db:6c:e3:9a:b0:e6:36:32:16:7a:16:d8:16:
         7a:b3:a6:29:77:43:c2:a9:b0:8d:76:e1:96:d1:de:49:ed:98:
         3a:7e:28:0e:7b:b5:72:ea:c9:78:9e:8d:c7:e0:ca:57:46:1b:
         ba:20:8a:b8:87:71:cd:ba:87:a6:e8:65:c2:20:6c:ac:7f:f8:
         3a:78:89:c6:7e:57:ab:1b:f3:72:4c:27:61:09:e0:a1:2b:1e:
         1b:cc:92:be:ac:a5:dd:bd:16:7b:35:1b:72:12:61:70:5c:2a:
         af:a4:e4:2d:a5:95:e7:83:e1:78:54:91:6d:a3:b2:98:07:c2:
         20:08:a8:c6:4d:32:94:31:bc:05:5a:5e:71:c5:05:4c:38:4b:
         58:16:39:b3:f0:4f:da:d1:5e:a1:65:97:a9:f7:41:eb:d0:da:
         33:20:5d:5b:6e:d9:b6:3c:a0:a2:65:d9:8d:2d:db:87:a5:e2:
         1d:17:d5:27:d6:96:92:ec:dd:52:02:ba:ee:34:68:ff:f1:7a:
         84:bc:68:c5:53:0f:27:e6:a0:0e:a3:7f:bb:23:c9:12:d7:7c:
         1c:4f:3f:59
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:55:05 2025 by rpki-client