Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a8aff1c0-29b9-4015-a4ae-dbb5fe9ce42c.roa
File:                     a8aff1c0-29b9-4015-a4ae-dbb5fe9ce42c.roa (raw, json)
Hash identifier:          Li0CQLt1aqP79G05OdVBGelTKdGzX6fowALAyqEdYYc=
Subject key identifier:   8A:61:A3:C8:C5:EB:80:5E:25:A0:8E:33:47:AC:12:4B:8D:70:38:16
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       5EBD3E4D1C56EB6AFCB437358B28C55730B9678D
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a8aff1c0-29b9-4015-a4ae-dbb5fe9ce42c.roa
Signing time:             Fri 31 Oct 2025 04:53:34 +0000
ROA not before:           Fri 31 Oct 2025 04:53:34 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3de0::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:bd:3e:4d:1c:56:eb:6a:fc:b4:37:35:8b:28:c5:57:30:b9:67:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 04:53:34 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=b8578edd3d0ee41a677b70305e718b771407f9aca7ea45635002fd95f4e776eb, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:a4:ae:e6:01:0b:40:09:00:fa:8f:a7:e4:15:
                    9d:5b:4e:55:32:9d:f9:fc:16:f0:b7:59:75:dc:09:
                    79:fb:04:85:7a:80:33:e5:c6:54:e0:6c:de:71:77:
                    a8:90:2e:36:a0:b8:2f:20:c2:a3:7b:89:76:15:0b:
                    cf:13:20:1e:c4:c9:f4:74:59:99:6a:e4:d5:de:12:
                    c1:2f:ad:e9:72:88:81:fe:d0:33:80:f3:67:8f:14:
                    ae:67:8f:d7:03:02:2d:d6:7a:50:f0:0c:91:af:17:
                    f1:48:71:15:f8:84:e4:7f:ce:18:70:a9:13:17:f4:
                    23:52:cb:2f:0a:6d:a7:e8:cf:e6:06:7b:20:db:e4:
                    f8:ac:cf:4a:8d:5b:89:b8:5b:b9:12:68:d7:ba:9f:
                    e3:59:51:0d:1c:9d:6c:38:aa:d6:3d:b3:12:3c:a8:
                    75:a3:f8:90:0d:d7:cd:30:3c:45:df:43:f1:16:84:
                    19:cb:78:fb:84:9f:97:29:9d:a7:ce:d8:fb:ec:02:
                    01:f1:94:16:16:21:5a:ee:1e:bf:46:67:be:c9:56:
                    98:d6:fd:d2:d6:78:7c:ed:75:20:7c:48:19:55:4b:
                    f3:45:e3:b9:eb:3f:88:59:00:69:34:cb:4b:ca:92:
                    50:b1:50:53:d4:b8:d7:f9:8a:40:38:d3:81:90:18:
                    b1:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:61:A3:C8:C5:EB:80:5E:25:A0:8E:33:47:AC:12:4B:8D:70:38:16
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a8aff1c0-29b9-4015-a4ae-dbb5fe9ce42c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3de0::/46

    Signature Algorithm: sha256WithRSAEncryption
         6e:10:c3:c4:31:da:56:92:c3:39:e8:72:ae:06:19:8f:75:5d:
         65:97:7f:b1:12:90:c6:6b:67:ee:db:43:93:55:d3:df:e3:0b:
         94:58:45:77:73:e5:35:ad:37:51:77:4c:aa:26:28:b1:3c:76:
         ef:10:39:64:c6:8b:a8:a4:db:3f:6f:5a:a5:a3:bf:9e:c3:57:
         0d:6f:2a:4c:5e:08:11:fa:38:bc:72:98:2d:8f:68:ba:8c:7e:
         58:3b:a3:4c:30:31:bd:95:9f:05:ab:ae:85:6e:15:66:8a:0d:
         6f:35:02:b9:6f:84:9d:3b:fa:28:d7:c7:09:b9:27:80:46:9b:
         f9:55:43:ab:c1:75:f3:7f:be:c8:71:80:8d:52:09:da:67:ad:
         93:8a:9e:8f:d2:8a:90:b2:8e:4c:60:d2:cf:be:f2:2b:4e:c4:
         35:82:42:05:5c:bd:18:31:a0:3c:4e:ba:62:fb:8b:f8:6f:04:
         aa:58:7b:41:f1:8b:c1:33:d7:a1:0d:58:e3:ea:e9:68:34:a2:
         30:0f:55:3f:9c:35:82:a9:e4:60:45:cc:f2:14:d4:a7:eb:9d:
         df:34:ec:e6:35:09:5f:02:3f:11:47:b3:ef:ec:49:82:81:4b:
         5b:79:44:85:cf:d7:e0:c9:04:d2:13:d3:6b:f1:39:83:94:72:
         4e:8c:5b:98
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:43:51 2025 by rpki-client