Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/bf78ba01-9a21-44c2-ad49-811d7ac34bdb.roa
File:                     bf78ba01-9a21-44c2-ad49-811d7ac34bdb.roa (raw, json)
Hash identifier:          nHReeFu/toFJPu/r9+sQgWxzKX8tQZ+8v8erOKjRFgQ=
Subject key identifier:   03:03:10:B8:5F:E1:07:18:E5:BC:CB:77:47:EB:BC:83:27:20:94:5C
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       0F3939397D31CE65CEC681E7DA847E742D8021A7
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/bf78ba01-9a21-44c2-ad49-811d7ac34bdb.roa
Signing time:             Thu 30 Oct 2025 23:38:57 +0000
ROA not before:           Thu 30 Oct 2025 23:38:57 +0000
ROA not after:            Thu 04 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2e6c::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:39:39:39:7d:31:ce:65:ce:c6:81:e7:da:84:7e:74:2d:80:21:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 30 23:38:57 2025 GMT
            Not After : Dec  4 23:59:59 2025 GMT
        Subject: serialNumber=85daabca2896cdf404d7bb5f7f94e7c8f694b7d184e0525921daedd27195e9f4, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:fd:79:4d:83:26:d7:1d:75:36:5b:a9:9d:c4:
                    d6:9d:79:5a:06:92:b6:9b:71:0b:29:97:b3:a8:6c:
                    51:f8:cc:98:f9:88:e8:b3:8d:aa:83:9b:5e:c1:2e:
                    82:80:5d:dd:13:ab:ef:3f:3f:55:78:c9:67:d9:4d:
                    5c:27:d9:e8:e2:28:f9:65:cc:c1:21:28:a2:37:11:
                    09:a9:c5:db:c9:c8:ee:4d:2c:8b:23:b0:97:ec:e6:
                    58:11:eb:30:83:f2:5c:88:d4:49:cd:35:28:ad:4d:
                    b8:f7:89:68:e7:90:9c:1e:92:3a:89:c2:90:d5:84:
                    03:40:a7:5b:30:86:59:ff:51:6f:ae:0e:d1:49:3f:
                    5a:1e:9d:bc:8b:07:27:8c:d4:b2:6f:21:89:1b:c2:
                    ac:a9:1e:8a:a4:72:7f:86:42:c3:1c:6a:b6:af:c3:
                    20:96:05:b6:bf:4b:30:c3:e3:f7:ef:24:cd:8f:a9:
                    04:09:26:19:85:51:bb:37:5d:16:f3:cf:b6:b3:38:
                    0f:35:c9:99:c9:11:99:66:3f:fd:a8:2a:2d:ea:19:
                    26:8d:19:9f:87:e4:49:3e:84:8b:55:62:c5:16:1b:
                    4b:d3:9b:ee:98:32:70:e4:2b:3d:98:d9:a7:48:91:
                    84:38:c9:1d:b8:94:99:3f:93:fd:c3:a2:34:11:13:
                    ae:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:03:10:B8:5F:E1:07:18:E5:BC:CB:77:47:EB:BC:83:27:20:94:5C
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/bf78ba01-9a21-44c2-ad49-811d7ac34bdb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2e6c::/47

    Signature Algorithm: sha256WithRSAEncryption
         7d:fd:0d:24:b8:df:20:26:33:8a:9d:e3:75:f0:ea:29:57:1b:
         a6:29:05:8c:84:93:d0:40:34:69:49:1c:bf:46:69:c1:28:11:
         08:60:35:b2:e8:9d:e7:e8:07:69:4c:47:22:2e:17:7b:21:18:
         ba:ee:47:df:4f:2f:e6:f8:62:42:4f:bd:19:92:bd:b0:9f:01:
         28:9d:93:1c:ff:2e:eb:4b:1b:ed:19:76:aa:db:6a:6d:62:8d:
         12:15:40:bc:22:14:cd:a0:5e:b6:14:f1:29:ab:2d:38:60:37:
         94:e4:5e:a3:27:df:f7:d3:e7:9d:a8:a5:50:fb:ab:cc:9f:67:
         42:f7:50:0c:04:5c:29:eb:0a:00:f5:f7:0a:a6:4d:c8:e7:64:
         0f:9a:39:7b:16:11:f4:00:c6:02:77:50:21:70:de:23:5c:7a:
         ed:e9:06:77:96:d5:22:05:7c:cf:11:55:84:2e:01:82:12:12:
         64:7b:4e:f1:fe:fa:36:43:be:35:f4:be:f6:91:a5:f9:bf:5a:
         a7:e6:5b:44:ae:57:e1:d0:0c:90:d7:57:b2:83:0e:73:84:f3:
         eb:cd:e2:36:fb:0d:23:89:9d:3a:5b:e6:3d:1a:57:2a:a5:4e:
         07:91:43:7e:fb:70:59:eb:bf:04:ff:30:e4:89:e8:5f:1c:c2:
         a5:ee:b6:88
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:05:42 2025 by rpki-client