Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b7181a51-4736-4e29-a08b-2a998bee2cce.roa
File:                     b7181a51-4736-4e29-a08b-2a998bee2cce.roa (raw, json)
Hash identifier:          CruXU7xYa2GGoXOnEM9sipwaVG0nMl7/72n1COw1dQo=
Subject key identifier:   74:42:4F:33:55:3B:20:24:40:EB:72:71:93:56:47:20:90:9B:DC:6E
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       3739909A580DFA39BEFD42B541CDCECF81D342D5
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b7181a51-4736-4e29-a08b-2a998bee2cce.roa
Signing time:             Fri 31 Oct 2025 04:39:38 +0000
ROA not before:           Fri 31 Oct 2025 04:39:38 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3b14::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Nov 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:39:90:9a:58:0d:fa:39:be:fd:42:b5:41:cd:ce:cf:81:d3:42:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 04:39:38 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=6e9f007acc4a88e3efc82c7264a8e2d90b1fab7ba0ed80ad8ccc05699b440739, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:8e:a8:51:0e:ca:3e:90:d5:20:b9:e4:77:58:
                    bc:c2:8d:9e:96:80:c8:ba:6e:8a:28:2f:14:f2:cb:
                    e7:d2:fe:76:70:58:1c:16:4f:0c:c5:be:e4:0e:11:
                    71:d1:40:4b:b6:f5:2d:f0:98:28:ca:ad:d3:45:83:
                    aa:86:11:47:01:09:96:25:c5:d8:df:0e:59:49:b4:
                    c3:b0:51:a5:85:26:70:48:68:75:f3:b1:03:1b:84:
                    a6:e4:d5:3d:3c:f7:76:28:49:5b:f5:89:5b:64:c5:
                    f8:79:65:d2:32:34:06:f5:d0:04:33:03:2d:01:47:
                    8a:89:29:3f:a9:5d:95:fe:0d:6d:b8:76:fa:5b:f5:
                    55:83:e6:e8:ea:db:3e:22:ee:fd:d5:d9:fc:94:6b:
                    76:2f:8b:a6:fd:68:37:09:3c:60:a4:a4:99:4e:cf:
                    89:5a:e9:19:bf:52:5d:c9:28:7a:08:89:d2:f8:29:
                    42:d1:59:c5:4d:32:73:80:df:5c:7a:c8:cd:4b:a4:
                    8d:17:3a:57:4d:18:b8:b7:01:bc:a2:a7:18:7e:f9:
                    3b:66:12:40:48:8c:ec:06:59:51:a2:16:41:91:e0:
                    30:f0:1c:5e:0c:a5:4d:f3:01:9e:84:c9:b5:61:05:
                    28:17:1f:b4:e2:8d:b3:0a:25:62:09:11:11:55:e6:
                    e1:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:42:4F:33:55:3B:20:24:40:EB:72:71:93:56:47:20:90:9B:DC:6E
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b7181a51-4736-4e29-a08b-2a998bee2cce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3b14::/46

    Signature Algorithm: sha256WithRSAEncryption
         12:04:cf:94:e3:b2:a5:0f:2a:41:b0:21:13:27:0c:53:1c:b9:
         79:c0:0d:fa:08:4f:6c:34:65:09:aa:a5:fa:e0:57:8c:8f:4f:
         06:8b:fc:ac:65:40:8a:b1:a6:64:a8:7e:2b:8c:83:96:b1:27:
         59:c3:d3:df:df:15:63:c1:a2:25:80:fa:09:8a:03:de:4a:0d:
         cd:d0:56:19:07:57:d5:b5:63:fd:7a:10:5d:ff:13:1d:87:15:
         0c:b6:36:82:c2:66:7f:65:ba:8c:8b:46:f1:69:44:70:e8:c5:
         14:91:fc:56:ea:db:45:da:25:e9:46:55:78:95:5d:32:77:f6:
         bf:a7:96:d8:ff:f7:e1:be:3d:1b:b0:aa:c1:f7:de:d1:d4:3c:
         a8:84:e3:08:fe:0f:2e:d0:bb:f6:4d:97:ee:6f:a6:0f:f2:ca:
         b2:4a:3e:82:0c:fe:89:cc:41:8d:f8:8b:f5:eb:75:fa:b9:ed:
         f3:d1:93:0e:fa:70:c4:53:d6:02:95:6d:4e:db:85:db:a6:55:
         80:09:7e:91:3b:55:45:86:f5:9c:a8:fc:90:c5:c1:55:dc:b0:
         f8:05:78:12:74:e4:80:65:b3:4f:23:98:f3:71:ab:fb:09:88:
         97:9b:ad:49:c0:02:38:f4:67:d1:99:c1:b2:30:b9:8e:d6:2e:
         94:60:4c:8c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 17:26:36 2025 by rpki-client