Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8c57e1c8-1d47-4627-80b0-9b3685ffed30.roa
File:                     8c57e1c8-1d47-4627-80b0-9b3685ffed30.roa (raw, json)
Hash identifier:          MZJ0D8CzpPP5HXy2yHDwcUkRV3/9LrQVOY1z4crEDWY=
Subject key identifier:   89:26:DC:C8:DB:5C:72:0A:42:65:94:21:A0:EC:B1:16:C1:F0:7D:7A
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       7D72BDB812AD0C0B7120713E12E7B052D905F612
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8c57e1c8-1d47-4627-80b0-9b3685ffed30.roa
Signing time:             Fri 31 Oct 2025 04:42:51 +0000
ROA not before:           Fri 31 Oct 2025 04:42:51 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3c7c::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Nov 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:72:bd:b8:12:ad:0c:0b:71:20:71:3e:12:e7:b0:52:d9:05:f6:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 04:42:51 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=6937bf86d0a23e738cbf4e48256ccf23b14ecf0261182e2ae144ccaf533ce7d0, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:eb:dd:75:99:c3:f8:6e:ac:ec:19:e0:e5:e6:
                    2d:13:b7:8b:60:50:eb:11:76:fc:19:28:64:fb:89:
                    a4:74:19:1e:7c:4e:e2:ce:1a:cb:ea:06:3c:5a:4f:
                    05:17:a8:42:de:96:7e:05:31:e6:ce:88:c3:60:92:
                    4a:70:b2:d5:a9:da:c4:69:e1:89:13:f3:54:3c:20:
                    30:86:a3:c2:87:bc:73:8c:fb:e7:a8:52:1a:90:7a:
                    e7:1c:b2:19:d3:48:db:e2:c1:da:bd:bc:44:9a:37:
                    0e:db:9b:35:e6:70:58:bf:ba:d9:2f:77:e5:4a:a3:
                    57:d5:81:27:e8:12:84:9d:6a:4c:c7:cf:2b:69:f4:
                    ad:dd:6c:b8:99:2c:0d:b8:32:3c:9b:44:4c:ff:36:
                    ef:10:c1:c6:47:85:71:b6:9c:36:c3:8f:be:c7:92:
                    3d:e5:d0:9b:7f:8d:87:ca:16:8e:fe:21:9d:a2:1f:
                    aa:76:ef:c9:8d:23:a5:44:70:57:9f:d2:62:70:78:
                    95:e8:97:7e:17:f6:ff:ab:f5:0c:4a:af:82:46:a3:
                    a0:64:48:07:2a:ed:70:35:78:91:ed:df:1a:fc:a2:
                    46:02:e0:59:da:94:f4:5a:03:73:fa:dd:5a:e6:99:
                    7c:4e:c9:99:af:fe:82:7e:a9:90:ac:52:d1:53:42:
                    ca:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:26:DC:C8:DB:5C:72:0A:42:65:94:21:A0:EC:B1:16:C1:F0:7D:7A
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8c57e1c8-1d47-4627-80b0-9b3685ffed30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3c7c::/46

    Signature Algorithm: sha256WithRSAEncryption
         b6:8f:dd:05:38:a6:84:22:fb:63:ff:c4:16:43:3f:ca:e3:ef:
         c2:40:43:57:57:c4:86:34:b3:b2:ba:d4:f5:d1:d8:ac:5c:73:
         47:fb:49:0c:fd:07:4b:4c:f7:66:7b:cd:4f:43:ef:5a:6b:e5:
         5f:cc:b2:f2:65:39:92:84:c6:45:6c:05:73:dc:32:54:9f:22:
         0c:5d:25:6f:82:6d:84:ed:6d:e3:75:e1:e0:e1:e1:38:3b:b6:
         ec:8e:1e:0f:f3:82:60:9f:73:47:3e:48:79:04:ce:b5:8a:2d:
         36:d7:97:a4:a7:2b:17:55:c2:03:af:08:df:74:0c:0e:e1:39:
         93:cb:73:fe:90:3f:51:d0:dd:62:62:9d:4a:b2:d3:bc:00:b6:
         92:d2:f2:6a:ad:b3:ff:11:4e:8e:d5:e4:aa:7a:0e:08:b5:43:
         63:41:54:2f:a9:64:4d:f5:1c:7e:90:df:d3:23:ae:f0:04:7a:
         47:3b:b3:85:46:9f:14:60:97:5a:58:2d:03:6d:39:84:6f:9b:
         50:e5:5a:e8:be:99:6c:12:ac:57:42:6d:77:f9:c0:19:57:41:
         d2:5d:aa:1a:4f:35:7c:f0:d6:62:9d:1e:09:c4:8b:e4:2d:78:
         a8:9b:e2:af:d0:52:0e:29:92:97:07:9d:99:a2:55:72:6a:a6:
         76:b9:bc:98
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 18:12:02 2025 by rpki-client