Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b17c3107-b34a-4903-b037-29c4ceaecff7.roa
File:                     b17c3107-b34a-4903-b037-29c4ceaecff7.roa (raw, json)
Hash identifier:          5sw7jb3hoUXEvk9S9KpbBOz3fRGLi7EstvKJzX4V8Vw=
Subject key identifier:   DA:E0:2F:A1:B0:20:B3:4A:80:5E:B7:47:74:6A:4C:84:A9:07:1F:1E
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       55450E199BB1D2EE3B820788BFE96B1EF6420C17
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b17c3107-b34a-4903-b037-29c4ceaecff7.roa
Signing time:             Fri 31 Oct 2025 06:11:54 +0000
ROA not before:           Fri 31 Oct 2025 06:11:54 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:39f8::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:45:0e:19:9b:b1:d2:ee:3b:82:07:88:bf:e9:6b:1e:f6:42:0c:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 06:11:54 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=1282cc8501304fe246d918b09f589e863bb9a08cc305f9022ba8539874aa46cd, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:67:5a:d8:ae:65:90:e8:42:51:0c:e7:9d:74:
                    e6:cb:b9:f8:cc:14:5c:eb:ae:ae:1a:8e:67:a5:27:
                    7b:7a:3c:f8:74:4d:ce:91:42:84:44:c6:b2:69:7c:
                    20:d9:e1:26:aa:f9:84:90:da:5f:4f:fa:af:ca:af:
                    d7:e6:ec:3d:0e:56:4f:9b:ae:13:36:3a:ff:d4:17:
                    7a:bd:81:8b:a7:ea:f4:1e:ff:03:6f:84:73:7d:e9:
                    79:8d:af:fd:70:f4:bb:cb:cc:22:3d:81:40:2a:e0:
                    12:a6:af:fe:96:7f:1a:db:38:7a:70:1c:29:61:98:
                    a9:51:6e:9b:9f:e8:34:ce:f6:f4:9f:88:ca:f9:9b:
                    09:52:bb:9e:29:ba:3b:5a:a4:29:b4:d1:33:79:85:
                    dd:87:50:06:f0:7a:e4:80:6f:af:9e:f9:28:57:fe:
                    6c:9d:0e:3d:c4:3f:60:4f:b6:7e:4a:6f:76:f4:66:
                    7b:5f:c6:83:5c:c0:eb:66:4a:41:50:5f:19:2d:f7:
                    9e:6f:6f:af:8c:74:a9:5a:72:62:c3:59:58:5c:ee:
                    07:7d:86:b4:00:fe:5a:0d:31:b7:65:b9:97:f1:2d:
                    2a:80:99:4d:be:e0:e0:07:aa:30:31:8e:85:4f:29:
                    55:da:c0:84:2e:80:9c:79:80:5c:be:6f:5b:71:ac:
                    27:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:E0:2F:A1:B0:20:B3:4A:80:5E:B7:47:74:6A:4C:84:A9:07:1F:1E
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b17c3107-b34a-4903-b037-29c4ceaecff7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:39f8::/45

    Signature Algorithm: sha256WithRSAEncryption
         21:ee:a8:9e:d6:dc:8e:66:6b:88:fc:3c:6f:e8:19:34:1b:96:
         aa:53:85:ba:f6:9e:ee:a7:6c:38:94:e8:95:8b:b8:31:ac:8e:
         ae:dd:b1:ce:dc:7d:57:e6:1e:e3:e3:ff:a7:0d:a0:b3:0c:ee:
         25:89:2e:23:5e:64:29:a8:8b:48:5a:cf:45:a7:ee:d4:e9:1c:
         1d:de:fe:64:d7:59:7f:b4:5f:3f:ae:17:dc:dc:7b:5a:91:c5:
         5f:60:a3:b4:0a:c5:e7:3c:69:d0:ee:28:64:cb:c7:8c:e7:e8:
         e8:b0:87:ab:0f:a0:3d:01:ac:c5:f8:56:c1:a1:63:b3:df:c3:
         79:57:55:bc:0d:72:4f:b8:f1:58:66:91:9d:5b:9a:d8:13:10:
         40:46:97:2b:df:33:1c:55:72:79:e9:a6:92:8e:7a:ba:5e:52:
         07:f7:fb:5b:2a:8b:6f:a1:dc:47:fa:c5:ff:11:6c:91:98:4f:
         94:bc:fc:94:84:46:a1:69:41:4d:f0:61:44:dc:61:0a:6f:4f:
         c8:23:f3:dc:8b:67:0c:31:ff:99:e6:34:bc:b5:6d:a2:2d:cd:
         0d:67:d3:a3:7c:32:38:62:2d:02:08:12:ea:8b:37:e2:f5:05:
         2f:09:3f:7f:93:ce:39:6d:4b:fb:28:71:e5:14:c9:40:76:8e:
         a1:db:65:e3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:36:10 2025 by rpki-client