Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c98d5eb6-960b-4d35-8922-3d719a077828.roa
File:                     c98d5eb6-960b-4d35-8922-3d719a077828.roa (raw, json)
Hash identifier:          5gJbuBLjaaL13eao0i5TRVSdBykry+WXQokWvl9w7IA=
Subject key identifier:   B2:D3:5E:2F:AD:45:E8:C0:F3:D7:33:88:73:20:20:0C:1F:36:DF:CA
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       203E1EBD16C07D2243763BEBFD026F2A380FCEB6
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c98d5eb6-960b-4d35-8922-3d719a077828.roa
Signing time:             Fri 31 Oct 2025 03:51:45 +0000
ROA not before:           Fri 31 Oct 2025 03:51:45 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2e50::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:3e:1e:bd:16:c0:7d:22:43:76:3b:eb:fd:02:6f:2a:38:0f:ce:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 03:51:45 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=f5707be0ed02b718dd25d90bdec7c221614ccf02b3c3b7c847d153f5dffe523d, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:82:6e:37:96:dd:a9:f1:d0:38:3d:2a:8c:2e:
                    66:ca:74:83:0d:4e:2b:03:2e:e5:ca:47:4e:e3:73:
                    c5:c9:1f:04:b5:66:03:09:ae:b3:86:78:5d:fb:55:
                    8d:fa:6f:b7:a6:b5:96:16:b1:91:d8:af:ca:7c:2a:
                    fb:81:a6:0c:fb:42:34:50:ef:2b:9f:99:3b:05:6d:
                    ce:a5:5f:31:b6:44:0e:24:bf:cc:ea:95:a7:81:b5:
                    ba:5c:f1:1b:d2:c5:6d:08:7e:ca:cb:46:e6:2b:df:
                    37:c6:6c:4e:3d:18:9f:ca:ef:97:a4:27:18:86:bc:
                    36:ed:e1:e4:49:04:85:42:b0:dc:25:67:47:15:21:
                    16:49:54:61:8f:dc:73:8e:52:ba:5d:0f:08:84:14:
                    79:e4:4e:61:c2:97:d5:a8:96:b6:82:4e:58:d0:98:
                    66:b9:45:61:e1:61:e4:3d:52:66:57:5d:b6:76:94:
                    8b:d8:71:89:f7:ed:80:f1:33:d5:e8:ea:08:5e:bf:
                    3f:15:50:9b:49:d8:54:60:a3:9e:5f:8e:b8:ec:4f:
                    d9:7a:6b:0f:3b:b2:86:43:7e:7c:4c:0f:01:44:c9:
                    75:fd:a1:5e:e4:d0:73:b1:b0:21:8a:69:a8:9e:60:
                    ef:82:b5:ff:c0:ea:28:ae:4a:9a:4e:6b:68:09:d6:
                    1e:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:D3:5E:2F:AD:45:E8:C0:F3:D7:33:88:73:20:20:0C:1F:36:DF:CA
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c98d5eb6-960b-4d35-8922-3d719a077828.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2e50::/46

    Signature Algorithm: sha256WithRSAEncryption
         4e:ff:8e:ae:8c:d6:bf:26:06:01:e1:34:fb:9c:10:b1:5f:93:
         33:dd:46:a2:83:86:bf:b4:1a:d7:8e:28:34:41:7e:c5:bf:de:
         9f:5f:2d:36:ef:da:d9:13:aa:b9:40:01:f2:a8:df:fc:93:64:
         f4:93:92:56:1b:60:35:a0:82:0e:ac:6f:ae:e9:6e:a1:c3:7a:
         b0:c2:22:f7:40:c2:d5:79:4e:3a:f4:5a:34:97:8f:46:7d:24:
         c3:19:ca:59:aa:87:63:e1:91:5b:d3:ee:7a:ff:70:ce:63:3a:
         78:47:e8:f1:3c:b9:33:1f:6b:2b:03:2e:34:07:a1:5d:1d:f6:
         ae:55:e2:49:53:98:33:f4:38:a5:f8:c6:5e:24:65:4b:d4:6c:
         42:a6:02:ee:f3:59:2f:53:38:f4:c3:f5:4e:14:9b:c3:9c:42:
         ff:f0:f9:63:b9:b1:fd:0e:15:8e:07:07:30:e2:16:fa:f0:d2:
         93:d9:ad:8b:60:c6:ea:c6:45:4b:99:07:08:42:b8:31:f1:05:
         2e:41:be:e4:6c:84:cf:a1:03:fc:c6:5e:89:ad:98:57:b2:3a:
         00:49:ee:5e:08:25:4e:66:20:c9:0d:27:ba:67:63:f6:fb:64:
         eb:bc:c9:19:83:c0:fd:85:2e:22:17:aa:f9:35:1c:3c:07:97:
         ee:fb:2a:bf
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:28:02 2025 by rpki-client