Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/92991116-d845-4df9-8420-f53cfeb29735.roa
File:                     92991116-d845-4df9-8420-f53cfeb29735.roa (raw, json)
Hash identifier:          gP4eOzpHdA49nLqFzuRQbF/NrVuXBBT23E57nVP70oY=
Subject key identifier:   76:EC:A8:7A:31:B1:76:2B:E5:18:89:6B:60:25:85:77:83:1B:99:32
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       02EF5C75ECB8781FC4F53F9FCF2C9A97FDE3494B
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/92991116-d845-4df9-8420-f53cfeb29735.roa
Signing time:             Fri 31 Oct 2025 21:55:04 +0000
ROA not before:           Fri 31 Oct 2025 21:55:04 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:a800::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:ef:5c:75:ec:b8:78:1f:c4:f5:3f:9f:cf:2c:9a:97:fd:e3:49:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 21:55:04 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=da3c33c62a200bfe552e8b868077c2d0d1fcd07433d00a3cdc9ae3fa65baa3c7, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:15:3c:13:02:74:8e:51:fd:4a:b8:c1:49:c9:
                    d6:5f:ae:9d:ed:4d:4f:06:3c:1a:19:b3:a1:dc:9d:
                    a2:4f:f6:99:6e:ad:38:17:4a:5d:93:b1:d9:24:a0:
                    f8:97:74:d3:f0:fd:b8:26:e1:50:dc:69:16:19:f2:
                    3f:a8:a6:51:88:0c:2b:79:62:bd:e4:71:ba:e9:8d:
                    22:6d:fb:04:67:c6:8f:61:ce:84:2c:81:9b:bf:96:
                    02:f0:bb:e5:73:70:7c:ee:c9:d6:9a:c6:7d:a2:e4:
                    60:a1:d4:ec:28:d7:06:b1:24:0f:7a:52:7c:5c:81:
                    03:b0:5e:a2:dd:ff:5a:8f:9f:91:35:d8:98:79:90:
                    65:5b:b9:4f:31:c2:21:f5:23:e8:be:a7:8c:30:10:
                    b4:db:6b:90:2b:a8:b0:ae:48:d7:f4:ab:9c:d6:6d:
                    ef:c8:47:89:cf:66:c5:fc:6a:d3:61:9f:94:42:93:
                    b6:0f:6d:26:2a:1d:81:c2:ef:bf:fe:e6:ff:90:fe:
                    d7:9a:34:e6:a2:af:64:b2:a6:fa:e7:1b:e3:ea:33:
                    2e:18:b0:6b:2b:f6:eb:7e:5b:80:a0:cd:64:45:1b:
                    91:0b:bd:63:64:1c:eb:83:ba:25:60:a1:83:34:4f:
                    ad:d4:c6:1c:1d:70:a5:3a:48:7d:04:eb:f1:f7:ae:
                    ee:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:EC:A8:7A:31:B1:76:2B:E5:18:89:6B:60:25:85:77:83:1B:99:32
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/92991116-d845-4df9-8420-f53cfeb29735.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:a800::/40

    Signature Algorithm: sha256WithRSAEncryption
         45:d7:81:a5:4c:ba:71:9c:dc:97:a3:4e:c6:2c:f9:01:5d:52:
         14:09:60:04:b7:14:50:53:4f:47:f4:0a:94:f2:ee:24:15:1a:
         c7:f1:95:db:a1:5a:0c:a5:96:59:8f:91:af:7d:16:13:e4:af:
         21:23:62:a3:92:84:c8:41:ec:eb:05:a4:d3:36:1d:64:34:70:
         e8:9b:e6:92:86:99:b6:c4:72:0d:7d:28:41:b2:ae:11:2d:1e:
         06:bf:39:ac:ea:55:d3:49:b6:48:47:9e:74:84:d3:7d:3d:37:
         46:58:35:2c:54:19:9d:c2:dc:2d:e6:23:f7:0c:c8:de:0b:bd:
         03:fd:53:12:c7:06:da:cc:e8:a6:95:3b:55:10:92:4e:72:7b:
         3d:12:5e:b0:70:f6:0e:b8:ed:35:d4:8a:e5:6a:e5:60:82:27:
         30:0d:6a:17:fa:a0:b8:c9:e8:c4:e9:7d:22:3a:33:92:f4:12:
         23:89:c1:84:58:5c:fe:16:9d:1f:78:ec:81:64:36:c0:d6:a5:
         f6:79:ea:8e:30:97:da:b7:ee:10:fc:ca:de:c9:65:84:c8:4f:
         f3:b0:a1:69:b1:1d:30:55:8a:4b:1a:8f:c2:fa:d4:cc:fb:3a:
         1d:46:2f:7b:3e:cf:be:a9:5c:b5:b5:90:70:d0:2c:36:cc:78:
         26:5e:38:05
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:39:10 2025 by rpki-client