Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8fad6031-73a4-4458-9a48-a4d7ffadac46.roa
File:                     8fad6031-73a4-4458-9a48-a4d7ffadac46.roa (raw, json)
Hash identifier:          uD13lzmPPDfXTp0paVgEuYYe4gniVEADoDoyc1MJOTA=
Subject key identifier:   3E:21:89:EE:02:EC:84:28:0C:EC:BA:F8:2B:34:64:04:60:B5:82:7F
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       4CE3FE21FC4D799CF84EF4DC958F07C4B9AC6B8C
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8fad6031-73a4-4458-9a48-a4d7ffadac46.roa
Signing time:             Thu 30 Oct 2025 21:25:31 +0000
ROA not before:           Thu 30 Oct 2025 21:25:31 +0000
ROA not after:            Thu 04 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:16be::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:e3:fe:21:fc:4d:79:9c:f8:4e:f4:dc:95:8f:07:c4:b9:ac:6b:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 30 21:25:31 2025 GMT
            Not After : Dec  4 23:59:59 2025 GMT
        Subject: serialNumber=0ccb7639f7bb2b375ca21ac596e8b1b5a6d1842fdcd25b579bfa6b3c42a65c29, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b7:06:fd:ee:bb:24:ea:40:e6:4e:fa:56:c4:
                    7a:77:64:b0:cb:da:f1:2c:db:fc:be:48:a6:d6:57:
                    f8:7a:a9:d9:2e:3e:20:fa:ff:9b:00:67:ca:d5:d5:
                    ea:16:5f:fa:db:ca:d3:ee:de:65:bc:18:28:75:d1:
                    2f:61:56:46:e2:64:55:9f:b6:ae:56:d9:7c:8c:3e:
                    10:f7:54:ed:4c:d3:94:12:ce:63:17:b9:62:9c:f8:
                    38:ca:6d:6a:45:79:fc:36:15:12:f2:8f:24:e5:bd:
                    eb:95:67:80:e6:94:9f:a2:fa:42:cb:56:04:cc:91:
                    b8:be:d0:ec:d8:27:c5:a7:ce:b8:9c:ee:43:33:34:
                    ae:e3:44:b5:fb:09:7f:48:7a:b9:aa:fd:5d:55:fe:
                    2a:ad:2d:2b:af:49:29:c4:30:6f:9f:9c:94:3f:8c:
                    99:d4:4c:4e:51:e6:3b:d4:fc:d0:32:96:c3:8c:32:
                    56:52:16:19:12:13:e5:90:cd:9e:f1:b1:05:5e:4b:
                    94:58:01:44:df:40:38:8f:ab:90:1f:88:67:52:09:
                    9a:ba:6a:00:66:70:ba:d9:b8:b8:83:76:02:c9:7b:
                    45:c0:cc:5d:b5:76:0f:65:2e:fd:f7:8a:87:7b:f4:
                    a8:c1:2f:7e:f6:50:38:77:9d:cd:82:b4:ff:95:84:
                    29:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:21:89:EE:02:EC:84:28:0C:EC:BA:F8:2B:34:64:04:60:B5:82:7F
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8fad6031-73a4-4458-9a48-a4d7ffadac46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:16be::/47

    Signature Algorithm: sha256WithRSAEncryption
         47:08:56:d7:cc:af:5c:1d:13:57:3c:51:d4:d9:51:78:5c:69:
         92:7c:f0:98:63:df:9b:fa:07:69:e5:1b:81:86:47:79:08:c5:
         b0:52:30:56:e2:52:37:47:37:2c:19:6c:bf:a4:04:91:8a:26:
         ff:9a:7e:e3:b4:1d:9d:ef:b0:e9:87:e7:cf:28:2d:47:44:3f:
         06:ed:d1:5a:cb:ae:6e:20:d3:72:76:ad:99:c1:ce:ec:d7:04:
         c7:10:40:59:fc:ad:b9:10:65:f2:b4:f8:e6:5c:51:83:2c:a1:
         7c:ef:36:86:f7:e8:18:8b:80:7d:bc:78:f3:db:83:32:90:80:
         e1:d3:a0:93:c7:25:20:98:7b:2c:82:53:a5:e8:b1:24:ca:2f:
         a3:53:34:51:f7:0c:30:6c:77:de:dc:ac:71:fb:8a:ab:2c:81:
         6e:ad:92:10:01:7f:95:89:cd:2e:58:e4:b1:10:02:15:f6:d2:
         6f:dc:2d:e5:c5:43:b0:46:af:9b:47:d8:bd:ad:16:0d:d0:aa:
         2a:cc:c6:66:31:76:ab:46:31:0a:ad:f5:4a:c4:4d:9d:da:83:
         af:23:36:27:a8:5b:07:18:1c:78:c9:2b:55:b8:47:b1:1b:c0:
         f7:d8:ac:1a:6f:3c:1d:70:a7:f3:b8:46:6b:73:7a:d2:0e:12:
         06:e4:31:8c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:32:49 2025 by rpki-client