Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9b085ab3-d87e-4ada-a303-c7f848e0d112.roa
File:                     9b085ab3-d87e-4ada-a303-c7f848e0d112.roa (raw, json)
Hash identifier:          rzi5pU7JHffih6aqS8OZMKExsnVU+Ey5nPfwcfogQCE=
Subject key identifier:   9D:4A:8A:69:89:1B:4E:42:F4:13:4C:C1:2B:9C:54:64:6D:B5:9A:19
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       331907C5952D14DF46CE4F500338FFFC4A7A637E
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9b085ab3-d87e-4ada-a303-c7f848e0d112.roa
Signing time:             Fri 31 Oct 2025 06:13:46 +0000
ROA not before:           Fri 31 Oct 2025 06:13:46 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3bf0::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:19:07:c5:95:2d:14:df:46:ce:4f:50:03:38:ff:fc:4a:7a:63:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 06:13:46 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=1797a42ab726b71460a5e1dd49c9d79d644ffe41b243de09ef54b9aacf866490, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:c3:9e:45:e1:3a:44:6f:c1:bc:18:54:f2:1b:
                    a7:c3:3c:e2:64:91:db:8e:7d:3a:26:27:d6:38:e5:
                    df:6c:18:8e:8e:7f:36:d9:b0:d2:22:37:7e:2d:9c:
                    85:12:6c:2c:9b:a2:3d:38:84:37:78:3f:d3:88:82:
                    56:d7:81:80:8d:76:26:08:0c:b6:15:e8:e8:9a:83:
                    94:61:f3:25:91:22:77:64:a5:cb:99:b9:94:f5:a6:
                    8d:b0:2e:29:c2:40:1d:29:98:15:07:04:08:9d:d3:
                    19:3d:57:1d:17:cf:59:7c:23:3f:f3:1b:7a:da:10:
                    55:4a:f9:50:cf:8a:c2:57:84:e6:c2:e0:a5:af:90:
                    88:3e:1d:fe:05:4c:59:cb:91:0b:ea:ec:31:3c:58:
                    b2:b0:d9:83:9f:e7:7f:21:65:86:60:b9:3a:e1:a1:
                    5b:4f:da:ed:30:5b:80:18:16:24:c8:a6:82:bd:90:
                    60:6b:15:11:ee:20:61:e6:b7:e0:9a:aa:79:7f:57:
                    7e:83:db:d6:bc:5b:fc:c4:e9:d0:be:dc:68:5a:6a:
                    ee:fb:0d:83:ca:26:da:21:b7:2d:1e:f4:b5:c0:87:
                    fc:df:ac:9e:0f:64:3f:cc:f1:e0:36:42:2e:99:f4:
                    72:a7:96:79:f0:5c:e0:b1:eb:3b:f7:41:dd:ea:0b:
                    2d:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:4A:8A:69:89:1B:4E:42:F4:13:4C:C1:2B:9C:54:64:6D:B5:9A:19
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9b085ab3-d87e-4ada-a303-c7f848e0d112.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3bf0::/45

    Signature Algorithm: sha256WithRSAEncryption
         43:66:49:3b:ca:a6:ce:42:42:14:c9:b9:04:e8:b9:8d:e0:87:
         03:25:a3:e3:4c:d5:e9:ee:fe:3c:f9:df:2d:f6:07:31:ec:39:
         fb:4a:61:36:41:99:c0:ed:c7:26:67:d7:a4:ac:73:7c:c3:4c:
         69:31:12:e1:89:38:b7:0c:e4:54:45:1c:aa:06:ab:1c:75:f3:
         e4:c9:05:b6:55:df:f4:45:b1:24:1b:02:96:76:fd:87:42:86:
         7c:96:c8:f8:38:5b:57:42:21:b0:c3:8e:74:8d:7e:94:0d:11:
         ba:86:c6:c3:9f:5c:4a:46:2e:bd:61:82:b9:96:5c:84:ad:27:
         a0:ea:49:5e:b8:6b:af:91:ed:91:5f:cd:44:ad:2a:d2:02:ae:
         8d:d5:a9:67:f4:19:f7:a0:d5:44:b5:7c:4a:e5:50:39:f0:d6:
         bf:63:e4:cd:f4:09:c5:cb:27:e5:ac:1b:e3:20:8e:e5:c4:05:
         36:67:b8:a2:87:55:ad:7c:67:f4:53:87:a4:67:f3:d1:81:42:
         c5:87:41:78:2d:9f:3a:59:0d:89:c1:92:85:cd:b3:60:17:cd:
         97:13:c7:c1:f5:c4:b4:0c:55:54:d3:2e:6b:b2:9c:88:cd:12:
         03:52:8f:4e:3b:df:68:da:70:e7:59:5b:fd:2b:11:d0:6a:5a:
         93:42:fd:54
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:46:01 2025 by rpki-client