Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a1925bb4-8f3c-417d-bb59-9da8ce4512d8.roa
File:                     a1925bb4-8f3c-417d-bb59-9da8ce4512d8.roa (raw, json)
Hash identifier:          eHd0pd+WV/X+jM7/R1nxcneeOqJga+1GGhjhg0HRthk=
Subject key identifier:   7C:69:BB:BB:BC:8B:2E:16:A3:8B:24:C0:A1:03:4B:13:D7:1B:69:89
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       48C9909F53F2F186B8111CBF028A899538CA0F83
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a1925bb4-8f3c-417d-bb59-9da8ce4512d8.roa
Signing time:             Thu 30 Oct 2025 21:22:11 +0000
ROA not before:           Thu 30 Oct 2025 21:22:11 +0000
ROA not after:            Thu 04 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:163a::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:c9:90:9f:53:f2:f1:86:b8:11:1c:bf:02:8a:89:95:38:ca:0f:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 30 21:22:11 2025 GMT
            Not After : Dec  4 23:59:59 2025 GMT
        Subject: serialNumber=a6a99ebf6c2ae191c316c9f9e0ce82b5f8e5abdd56fc4e077a7afe8063c918c2, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f0:4f:b4:c4:89:28:fd:79:b8:69:f6:6f:cc:
                    e3:d0:03:18:f5:56:77:f6:5c:bd:6f:f7:69:ee:fd:
                    37:28:3f:15:9a:11:9b:aa:8a:20:6a:95:5c:bb:ea:
                    17:7d:9c:f2:54:76:20:3a:62:20:91:40:8e:5c:4a:
                    5e:3f:6c:a6:81:33:50:7b:cf:44:da:b5:a8:8d:5f:
                    57:cc:bf:eb:2b:2c:e9:21:3f:1b:bb:64:25:f5:41:
                    70:e2:ac:9b:30:47:6e:c7:3e:e5:47:23:f4:0e:27:
                    c3:ce:73:3d:47:94:38:33:f6:46:fa:9a:5f:ae:45:
                    96:67:e5:77:89:5f:c8:a7:ee:13:78:ff:67:db:2c:
                    0c:98:dd:20:40:0d:bd:f0:b8:ac:b2:30:c3:48:09:
                    ef:09:23:1f:96:59:c2:62:4b:02:a9:63:80:0b:32:
                    f2:b4:3d:f9:d7:27:c8:3f:27:97:2f:9d:cd:98:9d:
                    06:c0:9b:d2:ad:48:05:ad:e0:d8:70:25:1c:84:8d:
                    13:f6:f3:16:ba:a4:98:07:0d:be:0d:d6:e9:e7:bd:
                    f8:c3:1a:71:f0:ee:88:7f:85:ae:c7:e4:06:3b:ad:
                    ae:83:ba:83:d7:ae:36:29:aa:0d:e7:a1:6a:8d:72:
                    39:54:2f:64:93:be:f2:39:02:20:4a:d3:9b:e1:4e:
                    29:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:69:BB:BB:BC:8B:2E:16:A3:8B:24:C0:A1:03:4B:13:D7:1B:69:89
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a1925bb4-8f3c-417d-bb59-9da8ce4512d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:163a::/47

    Signature Algorithm: sha256WithRSAEncryption
         28:67:9d:cb:df:3f:69:02:34:44:2c:fc:cd:50:41:72:98:62:
         f5:79:f2:6c:76:c7:b2:38:5b:92:87:b0:ca:15:fa:bc:ff:9a:
         ef:4e:49:d6:55:32:77:2d:d9:94:e8:5a:c3:8c:91:4d:7b:27:
         44:f7:29:9a:80:6c:e2:c8:25:a2:6f:45:1a:6f:1b:4e:78:ce:
         1e:ff:55:b5:83:93:e2:7d:08:8c:eb:5d:63:b3:f7:42:91:76:
         d3:48:15:cf:ae:e3:3c:38:6d:87:b7:00:cb:e7:b9:a3:19:0a:
         b9:c7:20:70:6d:bb:89:b0:ea:80:72:f7:03:13:db:0f:ad:94:
         da:fc:1a:45:1a:bf:85:0d:7c:c3:cc:98:8e:da:78:83:7f:cc:
         7f:b2:1e:35:ed:ba:0c:ef:f7:31:2a:3e:ac:ee:9b:a7:65:01:
         79:74:b8:52:e0:94:b1:06:e1:a2:90:9a:d9:7d:09:2d:43:e4:
         50:76:dc:04:28:05:ed:63:da:47:5a:32:fd:7c:95:f8:41:63:
         10:a9:53:95:ea:c8:e7:e7:28:9c:8f:b7:d3:58:f8:85:21:47:
         96:32:17:37:78:c4:47:be:9e:a0:3b:84:3e:7d:5c:26:5f:91:
         bf:65:9a:32:c8:40:a1:bc:58:e3:4d:94:c7:b8:52:14:d6:b2:
         86:b6:73:e8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:42:44 2025 by rpki-client