Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/96494cb5-0e63-4e29-b8b4-24b98d62bf25.roa
File:                     96494cb5-0e63-4e29-b8b4-24b98d62bf25.roa (raw, json)
Hash identifier:          AQ5gHj5byQlMyNub/yTsxnrc9RXJujKfTcw1RBw9tgE=
Subject key identifier:   AB:D1:E7:1D:52:C6:8A:48:A5:B3:BC:DD:19:15:6B:3D:3F:A1:DE:56
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       7BC12CACCAF265A1C05954F45F39F8398206E9D7
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/96494cb5-0e63-4e29-b8b4-24b98d62bf25.roa
Signing time:             Fri 31 Oct 2025 05:14:16 +0000
ROA not before:           Fri 31 Oct 2025 05:14:16 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1830::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:c1:2c:ac:ca:f2:65:a1:c0:59:54:f4:5f:39:f8:39:82:06:e9:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 05:14:16 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=3f2dd8adaa422ca904678b27ebd46dd6bff4984497189bc8255f4375294fce96, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:5a:f2:8a:aa:70:c2:13:4e:9c:70:c1:b0:75:
                    c0:30:6e:3e:14:71:c4:2e:96:02:6c:f8:15:7a:7c:
                    a1:e3:64:47:07:d3:ee:21:65:c7:75:96:9b:38:0d:
                    41:11:0e:e0:62:3f:5e:76:9b:e1:00:0f:07:cd:40:
                    e5:be:06:fa:5e:34:d6:c5:a2:f9:3c:98:78:4b:f1:
                    48:b5:8b:13:24:b5:d2:13:68:e3:b3:8b:cc:cb:08:
                    30:59:5e:1d:5a:7c:f0:cf:7b:22:b1:0d:45:26:62:
                    b2:a6:68:d0:20:10:19:50:2d:30:48:95:60:29:46:
                    a1:2e:e9:28:3d:3a:02:6f:fc:1b:5e:23:e5:92:0b:
                    ef:03:dc:70:86:46:3c:9e:92:65:45:42:9e:85:67:
                    b8:90:f0:15:d0:96:d2:52:82:16:79:fb:d5:f7:88:
                    64:c9:80:2f:b5:25:da:e5:3b:e0:38:e8:22:0c:58:
                    4f:2a:ac:cc:7d:15:0a:83:82:69:93:0a:45:ef:41:
                    5b:5e:f2:71:d3:2d:ff:46:88:a9:3d:58:de:60:ce:
                    7f:10:70:a6:2c:41:0f:98:82:d2:be:ef:3c:48:d9:
                    a4:5a:c2:0d:3c:6f:9c:33:95:4a:00:67:53:aa:2b:
                    a2:a9:6c:8f:20:c7:e9:37:82:39:b2:65:cc:41:96:
                    33:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:D1:E7:1D:52:C6:8A:48:A5:B3:BC:DD:19:15:6B:3D:3F:A1:DE:56
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/96494cb5-0e63-4e29-b8b4-24b98d62bf25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1830::/45

    Signature Algorithm: sha256WithRSAEncryption
         bf:5c:6d:1a:26:c0:ab:d0:61:2d:0f:e2:f3:c8:3b:4a:d6:47:
         dd:c4:8c:08:e3:67:d7:9c:86:85:98:6f:ac:ce:af:e7:82:ce:
         84:a7:96:5b:d6:18:84:1a:3b:d1:59:7f:6d:25:e2:ac:79:f8:
         d7:b3:98:ba:e4:3b:b9:68:e1:74:5a:74:27:38:b0:d4:05:b4:
         18:fb:1b:48:df:1f:ad:09:cc:0e:27:c0:57:7d:84:fd:af:b8:
         01:46:ba:d2:93:0c:aa:bc:06:99:6c:05:27:2d:ff:96:6c:5b:
         1a:e5:dd:a0:03:b5:54:01:46:3b:58:2b:7c:a2:b4:61:c8:78:
         4b:af:ad:f9:4a:f9:f3:92:fa:52:f2:12:26:ee:f3:e0:4a:b4:
         6d:1f:1a:20:aa:ac:65:61:de:2c:b8:e4:47:e1:6c:07:49:a1:
         6b:66:e3:71:96:75:a8:8c:6f:9f:95:19:e1:ec:8e:66:41:c4:
         02:71:e2:67:f3:c2:cf:81:2f:c6:96:c7:a3:ce:8d:9b:4b:b6:
         2d:f0:ac:2a:f1:0a:20:ec:f5:07:d6:98:37:60:1a:e5:0f:b1:
         e4:6c:ae:66:fe:2f:94:c3:50:d2:ae:64:89:fc:00:c3:2e:66:
         b6:1f:5a:78:40:8a:1b:7d:5e:33:3d:2c:65:d5:a9:39:70:cc:
         26:31:ca:2c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:36:09 2025 by rpki-client