Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c6f4656c-1014-4997-8fea-9d03af0cc551.roa
File:                     c6f4656c-1014-4997-8fea-9d03af0cc551.roa (raw, json)
Hash identifier:          WXAXbJPRRXGejsyWxp7S+OxuPT1AlvtbuDIALWf+N2Y=
Subject key identifier:   9B:9F:E6:E2:8D:10:0E:B5:ED:B1:52:8B:AC:26:EA:89:20:1D:D2:D1
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       40AA0EA1CADD984DA24289BB74014B9E1FE0DE07
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c6f4656c-1014-4997-8fea-9d03af0cc551.roa
Signing time:             Fri 31 Oct 2025 04:21:58 +0000
ROA not before:           Fri 31 Oct 2025 04:21:58 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3718::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:aa:0e:a1:ca:dd:98:4d:a2:42:89:bb:74:01:4b:9e:1f:e0:de:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 04:21:58 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=8a7662241d8030858484495d186872fb40db5ca0206ef7e5b7402c4a82b88c1e, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:41:8b:15:de:d9:34:41:a8:17:23:a5:73:b5:
                    8e:24:38:67:8e:3b:11:a8:e7:02:07:c2:18:80:78:
                    8e:a9:8e:aa:2a:fd:f7:71:7b:09:c5:18:ea:27:a2:
                    6e:04:aa:07:18:87:04:0f:ed:3b:b1:25:09:7d:68:
                    ec:bc:b9:84:af:31:86:03:9d:9a:b3:3d:5d:21:8f:
                    78:fd:9b:64:2a:d8:d9:4f:57:dc:8d:3c:93:19:78:
                    61:37:e3:9a:95:0c:0c:23:3a:9a:50:12:10:b6:ae:
                    56:a9:e5:aa:c9:b5:f3:f3:bb:54:19:36:70:f7:cc:
                    7b:4b:c8:a7:be:ba:c1:9c:74:23:c9:b9:df:8d:50:
                    7f:1a:cc:2a:fc:c6:ba:c2:8b:fb:7c:6b:08:0e:3e:
                    93:82:69:3d:46:0a:57:32:36:57:ce:21:56:f8:d1:
                    50:e2:fd:c8:71:6a:3f:94:93:f3:9a:ce:65:e2:05:
                    aa:62:3c:6c:98:da:28:b5:a6:6c:e7:8f:dc:e9:b3:
                    88:e6:5d:68:cf:c4:0b:c3:80:ca:ed:26:55:a8:f8:
                    18:77:76:18:4d:e2:77:0d:16:0c:5b:c9:79:0d:f4:
                    b3:2c:60:95:30:92:dc:ee:89:11:73:b2:2f:22:da:
                    8b:29:6d:fb:fd:f1:6f:e0:da:85:02:96:69:2c:38:
                    b9:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:9F:E6:E2:8D:10:0E:B5:ED:B1:52:8B:AC:26:EA:89:20:1D:D2:D1
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c6f4656c-1014-4997-8fea-9d03af0cc551.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3718::/46

    Signature Algorithm: sha256WithRSAEncryption
         a4:0e:17:9d:52:50:65:80:42:63:b4:cf:51:3a:7e:b7:cd:69:
         31:cb:79:56:ba:85:3b:07:72:5c:9e:ea:0f:82:df:51:55:32:
         9f:fb:7b:40:29:03:c9:4f:79:80:56:af:a6:b5:c3:aa:3e:aa:
         92:99:57:44:39:31:5a:b3:83:be:d2:f6:76:71:47:15:bf:3c:
         e0:23:58:bd:ad:2d:2f:88:75:a4:3a:9a:b4:13:58:44:1a:bf:
         be:d3:ee:80:48:70:4d:ee:58:a5:98:0f:39:c7:60:10:d3:31:
         a1:6a:6c:c9:76:d4:74:4a:2b:c0:86:e6:26:10:85:31:14:a0:
         07:0b:0a:33:b8:20:37:b9:a7:32:5f:18:be:86:8c:ae:13:e2:
         60:e0:36:41:de:a2:e3:8d:86:7c:c6:39:de:fa:54:33:69:be:
         e3:1d:b1:c9:00:7b:fc:bb:bb:95:5e:3b:87:33:c4:60:93:71:
         0e:09:db:71:4a:40:51:e7:e3:5b:3d:f3:db:b5:80:a8:2f:c4:
         ed:9d:81:6e:fd:bc:fe:95:e7:b5:1b:4d:68:d4:31:27:24:67:
         d9:7e:16:01:74:b2:64:bc:57:12:00:09:83:35:8d:7d:8d:b0:
         04:21:52:cb:d4:ba:df:d1:88:86:ab:74:78:d6:69:44:03:18:
         27:bf:88:bc
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:55:11 2025 by rpki-client