Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/807b53c7-cfd9-4cc3-8753-e4120dd7c436.roa
File:                     807b53c7-cfd9-4cc3-8753-e4120dd7c436.roa (raw, json)
Hash identifier:          17fimzQ7k0wyJEpohA8EVwkH7sS0SHeQsx5geepFk7E=
Subject key identifier:   3D:C1:93:4C:B6:C9:6C:26:57:8D:FD:8C:B0:35:15:D1:63:99:91:04
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       55E7527405DA0A0BCCDC5BF967FCEA5189889E8F
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/807b53c7-cfd9-4cc3-8753-e4120dd7c436.roa
Signing time:             Fri 31 Oct 2025 00:13:56 +0000
ROA not before:           Fri 31 Oct 2025 00:13:56 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3448::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:e7:52:74:05:da:0a:0b:cc:dc:5b:f9:67:fc:ea:51:89:88:9e:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 00:13:56 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=95c9ead5902920f3d86ad359bd4f98f7e792055c7f056d281bda83cd29ddd065, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b7:38:ad:f8:dd:7b:03:ea:8e:62:40:48:fb:
                    80:06:8c:78:b8:69:d2:b5:65:b9:e7:2e:1b:d9:98:
                    b2:94:02:97:be:77:be:34:fb:c3:8c:8f:ea:8a:55:
                    86:7b:3d:45:1d:b0:09:08:70:b2:02:db:8b:d3:85:
                    62:1a:53:0b:7c:2a:0e:b1:50:61:bc:ce:a8:6c:9c:
                    d0:83:3b:04:59:c9:df:f6:38:e9:b2:02:fe:0c:97:
                    23:6f:1a:e7:1f:fd:6a:0a:38:9e:9f:54:68:9a:bd:
                    12:f5:ea:6d:f2:c2:2d:68:1a:fb:93:85:f3:a3:2b:
                    21:46:3e:0d:41:89:40:3e:1a:86:6d:4b:24:f2:34:
                    be:32:ce:bd:78:27:d9:2d:80:ac:14:ed:47:3f:88:
                    82:23:b5:e4:1b:f2:22:bd:84:d0:67:39:22:fc:7b:
                    88:cf:b1:a9:43:5b:e8:87:9f:b6:37:39:b7:e9:db:
                    d4:f1:e8:91:47:5c:3b:00:c2:9f:78:29:de:9b:b4:
                    88:93:17:66:d9:d0:3f:ab:80:06:79:97:e8:e0:f2:
                    c1:c7:fb:01:db:02:7a:50:4f:06:3b:dd:c4:09:47:
                    a2:e9:1e:83:33:d1:2a:2d:27:76:4f:04:e5:07:74:
                    59:a0:2c:bb:c7:e5:39:00:2e:14:39:10:89:6d:dd:
                    75:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:C1:93:4C:B6:C9:6C:26:57:8D:FD:8C:B0:35:15:D1:63:99:91:04
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/807b53c7-cfd9-4cc3-8753-e4120dd7c436.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3448::/47

    Signature Algorithm: sha256WithRSAEncryption
         17:ab:71:31:11:dc:f6:e6:c3:bb:a3:ba:0c:08:0d:86:3c:4b:
         75:38:bd:b6:be:35:34:3a:5d:41:23:f1:f1:6b:82:25:79:24:
         8c:a2:1c:db:3e:b5:b3:c0:bb:d5:13:31:10:bc:bf:1f:ac:f9:
         e3:43:f4:a5:77:d5:94:02:61:46:07:f3:10:db:dd:67:b3:79:
         bf:98:5a:10:43:bc:0a:07:42:67:67:56:04:0b:a9:8f:69:94:
         39:ee:d1:05:63:84:f9:6c:f8:d4:d4:c2:17:5c:29:e6:20:47:
         04:1c:a7:92:44:fa:38:fb:fb:36:ff:95:37:71:91:f1:90:3d:
         2f:28:88:45:02:be:6e:9f:a0:d2:04:ce:cc:1a:da:de:ce:51:
         62:1e:7f:15:11:13:6f:29:42:d6:d4:ee:49:20:ff:c1:bf:9d:
         7b:9b:da:97:40:09:df:aa:e4:a1:be:2c:9d:1b:72:ae:e1:99:
         4f:a0:cb:e8:f1:e4:5d:6c:eb:7f:63:6c:c5:d1:ee:7d:b4:d9:
         20:cc:b7:d1:a3:61:51:38:9a:37:d9:74:d5:77:8d:59:ba:63:
         e3:0a:61:3e:9d:58:94:e6:9c:4d:be:78:cf:4c:ca:09:35:c9:
         04:ef:8d:08:40:51:85:c6:e1:75:f5:bf:ce:ff:f2:f0:54:08:
         44:40:cb:9a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:38:46 2025 by rpki-client