Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8c7022e9-28b5-4a1d-be72-35ca4aed5d06.roa
File:                     8c7022e9-28b5-4a1d-be72-35ca4aed5d06.roa (raw, json)
Hash identifier:          iqCJC6anV4suqaHhBErTvikpUf32q/MO2rfv8RpCG5g=
Subject key identifier:   4B:09:2C:2F:EA:E2:F5:EB:64:46:D9:9A:A0:6C:26:2E:BE:B1:30:10
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       44828DFA09A59E3E0DD96431C89B68B5B444ADD4
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8c7022e9-28b5-4a1d-be72-35ca4aed5d06.roa
Signing time:             Fri 31 Oct 2025 07:55:44 +0000
ROA not before:           Fri 31 Oct 2025 07:55:44 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:82:8d:fa:09:a5:9e:3e:0d:d9:64:31:c8:9b:68:b5:b4:44:ad:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 07:55:44 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=1325de15c25ddfb7ba471b646157c291c04133dbefb6a795bd6558f7bcadefcd, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:df:ae:e9:8b:bf:b3:a7:fa:c3:7f:7a:b3:bd:
                    db:1d:04:70:0e:59:70:6b:11:91:3d:43:3c:aa:26:
                    d8:1b:07:c5:2c:9f:2c:3d:0b:8e:49:ff:13:cb:e5:
                    20:c3:5b:f1:cf:3c:62:44:77:2a:25:1a:e6:d3:5c:
                    73:31:a7:2f:c4:f7:3a:c0:67:e5:c8:4d:0b:0a:ba:
                    d3:e0:b2:31:db:11:31:38:9e:80:a6:5a:bd:ec:d0:
                    f3:ef:59:21:44:dd:08:60:d7:59:6b:d6:2c:09:03:
                    81:8b:c9:89:be:41:52:5f:2a:d1:92:05:a7:9c:e8:
                    02:12:cf:37:fa:ba:71:63:a3:c0:31:cd:c7:fa:a8:
                    17:ac:1b:c1:fa:eb:13:87:d0:55:2b:bf:8a:65:f0:
                    07:9e:26:fa:b6:aa:45:17:c0:4c:0d:eb:ba:bd:f7:
                    c5:34:a4:b5:88:0b:f1:0c:84:76:3d:9b:4f:4f:5d:
                    7c:fc:55:0c:aa:51:28:d7:62:ff:f5:50:5b:ff:ad:
                    18:ba:10:0f:c9:58:19:5b:f4:7e:de:87:63:43:28:
                    6c:aa:a8:81:e3:14:78:0e:4c:14:00:77:2b:17:60:
                    a4:8d:5d:8e:c8:1b:29:77:23:e0:d8:43:17:ea:ac:
                    bc:96:fe:83:9b:a7:8e:fe:79:f0:a0:8c:a0:c2:78:
                    e7:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:09:2C:2F:EA:E2:F5:EB:64:46:D9:9A:A0:6C:26:2E:BE:B1:30:10
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8c7022e9-28b5-4a1d-be72-35ca4aed5d06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3400::/38

    Signature Algorithm: sha256WithRSAEncryption
         94:17:0b:99:00:3e:3f:a9:f8:f0:17:d0:e9:e5:52:af:59:d6:
         1d:69:46:83:83:f3:33:69:ab:7d:9a:a9:f7:07:61:09:78:bd:
         5e:65:12:77:73:3e:bf:20:65:db:fe:4a:cb:00:49:d5:16:04:
         d9:6d:4f:a2:b4:54:72:7e:0a:e8:f0:1a:7e:09:9f:59:f3:0b:
         49:b7:a1:3f:c4:d1:31:f8:ed:68:20:ec:17:e2:19:cc:0a:25:
         fa:e8:9e:89:13:5b:86:89:a4:84:7d:13:e4:51:3e:44:7d:00:
         6a:42:07:d1:41:34:ff:a4:58:31:e4:cd:2e:66:d4:85:93:b9:
         a3:bf:92:26:c3:79:ab:1f:79:ec:3c:af:89:f6:4d:71:87:79:
         7b:0f:cb:4a:fe:ae:4e:02:0f:2a:44:96:80:f0:67:f7:f2:56:
         e3:98:9c:64:a2:64:96:cb:12:88:5d:2f:42:2d:f6:e7:57:28:
         e3:0f:e3:ae:5f:9d:d6:e2:24:5a:af:2e:63:9d:f8:6a:0b:e7:
         10:22:d9:7a:2b:a7:8f:71:0d:48:b1:97:41:92:37:50:b5:e4:
         01:71:60:21:57:9a:5e:5a:b0:4c:8f:aa:7d:48:34:1a:79:cd:
         0f:cf:68:f4:cc:aa:66:a4:0d:02:10:a8:34:2c:2c:41:0a:88:
         72:b6:ee:4e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:28:35 2025 by rpki-client