Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8381e128-415c-42f7-8fe7-db368e2343db.roa
File:                     8381e128-415c-42f7-8fe7-db368e2343db.roa (raw, json)
Hash identifier:          2exkC/Aem84/FZ8DZFF3wl/yZt9Rf4wJJGsZv5vljkA=
Subject key identifier:   C1:64:69:E6:F3:A1:A3:A4:BF:58:5C:F8:AA:1F:22:AD:C1:39:C6:AB
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       0E1E1D40D085D8EA5BAB0876B1BEA8D5C29FD5A4
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8381e128-415c-42f7-8fe7-db368e2343db.roa
Signing time:             Fri 31 Oct 2025 04:38:15 +0000
ROA not before:           Fri 31 Oct 2025 04:38:15 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3aa0::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:1e:1d:40:d0:85:d8:ea:5b:ab:08:76:b1:be:a8:d5:c2:9f:d5:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 04:38:15 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=1d0ea144e1a27982f7d9e74971267269d6d06c11782c5fdecd978340563996fd, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:da:51:ff:08:1c:db:81:01:0a:c3:c7:21:03:
                    f2:e3:ad:38:7b:12:25:18:3b:ec:77:e0:1d:79:8b:
                    20:bb:ee:7c:ba:a0:86:d2:91:1e:54:2e:d2:b3:5a:
                    b1:44:e5:73:dc:d2:94:98:bb:55:2b:78:9c:b6:f5:
                    2d:70:d7:88:b1:89:3a:b1:7a:ff:41:6f:f5:ad:a0:
                    0e:42:82:74:50:45:06:3c:24:49:14:6e:81:84:d7:
                    7e:df:d5:dc:af:2c:10:df:6d:37:46:00:f3:93:c4:
                    95:73:05:d1:ae:0e:aa:8e:43:35:42:90:80:1c:09:
                    9b:96:23:9f:aa:73:d5:2a:25:20:97:76:06:0a:8f:
                    45:09:c6:7f:a3:78:1a:fb:ab:29:43:a4:55:53:c9:
                    0b:e8:b2:5d:aa:69:be:91:59:7f:e6:d3:e1:fc:3a:
                    1a:04:fb:51:2b:75:1f:28:26:66:26:44:e6:e5:5a:
                    60:9b:bd:8d:21:a7:6d:46:a0:d0:a3:7d:67:60:85:
                    db:de:7e:6f:73:96:48:70:e6:f1:39:90:ba:08:8c:
                    2a:f0:73:bd:51:f8:7d:4b:9f:2c:fc:9f:a8:7c:21:
                    52:25:bd:57:47:57:33:1d:9c:e4:f1:10:23:11:98:
                    22:a9:5a:bd:b1:a6:09:50:af:32:32:2b:47:10:14:
                    c7:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:64:69:E6:F3:A1:A3:A4:BF:58:5C:F8:AA:1F:22:AD:C1:39:C6:AB
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8381e128-415c-42f7-8fe7-db368e2343db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3aa0::/46

    Signature Algorithm: sha256WithRSAEncryption
         9f:df:6e:3e:2f:ab:87:3d:16:4b:8a:3a:58:c9:72:33:83:40:
         ad:bb:7c:ae:b9:2f:6f:8f:76:fc:9d:55:7f:7d:07:ae:88:39:
         9b:7e:31:c0:33:b2:09:fa:fa:b2:d4:58:25:99:6e:91:4e:1b:
         e9:56:92:30:45:45:2a:d0:df:1a:34:71:27:dc:0e:68:76:7f:
         2b:93:cc:12:79:b3:f4:fd:d7:a5:df:86:0c:65:1b:68:34:45:
         ac:a8:63:f3:61:41:5c:5c:9e:60:d1:f1:0b:17:ab:63:85:9a:
         b7:cc:32:ab:8f:6a:4b:86:66:a0:e0:d1:83:22:23:f0:68:9a:
         41:ad:02:06:d8:6f:af:e9:10:b0:9c:c0:1f:d9:d6:ef:67:a1:
         a5:88:ea:2b:21:ab:96:43:1f:96:16:09:e6:16:7e:06:52:f4:
         b4:70:dc:23:9c:6b:01:59:19:c1:c9:01:f5:1b:c1:7b:71:26:
         ab:94:01:50:92:2c:c1:33:ea:f8:84:cf:1a:57:a2:28:04:47:
         da:6d:87:4a:79:ba:6c:c3:61:84:d3:05:a1:3c:8c:d1:24:bb:
         80:da:60:73:69:bf:cc:0c:46:fb:89:ce:9b:92:3e:e5:82:57:
         08:67:87:aa:df:48:3d:00:2e:e8:5a:f8:18:75:7f:7b:64:d3:
         18:df:80:4a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:42:47 2025 by rpki-client