Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ca066383-2a2f-4ef2-af5f-1940b58cd493.roa
File:                     ca066383-2a2f-4ef2-af5f-1940b58cd493.roa (raw, json)
Hash identifier:          +RTcHhFEyAl/PLXs7LxX2mtoB3yvLzg775ie2kiEWgU=
Subject key identifier:   3C:0A:A7:96:3A:72:67:1D:EF:88:1A:7F:EA:6B:4D:A6:EA:36:27:AA
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       05FCE479F79ABC0CA35880BFE98C0BCBDEE1C4CE
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ca066383-2a2f-4ef2-af5f-1940b58cd493.roa
Signing time:             Thu 30 Oct 2025 23:13:54 +0000
ROA not before:           Thu 30 Oct 2025 23:13:54 +0000
ROA not after:            Thu 04 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2c34::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:fc:e4:79:f7:9a:bc:0c:a3:58:80:bf:e9:8c:0b:cb:de:e1:c4:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 30 23:13:54 2025 GMT
            Not After : Dec  4 23:59:59 2025 GMT
        Subject: serialNumber=aa6c7891c0e61ea8e69ff759fa13e8b13e9242a1904d68c123237108ef42c1ca, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:55:29:ca:19:4b:dd:50:1f:6a:62:f6:ba:2e:
                    4c:2b:ec:e1:97:ff:61:b8:cf:7a:94:32:9f:30:52:
                    ea:c7:ac:32:7b:13:c6:78:80:ea:94:6f:d5:84:36:
                    1f:89:55:d3:4f:e3:5c:37:98:8f:78:41:b4:7c:7c:
                    07:be:6b:37:69:2a:12:99:cd:d0:77:07:3b:80:b9:
                    b2:35:44:e7:8a:02:04:18:3d:5e:6d:8a:83:fb:f0:
                    45:5a:a1:bc:31:7d:8e:39:dd:cf:d4:ed:b0:fe:68:
                    49:c3:90:7a:b2:d0:7f:90:1a:e8:68:77:c9:9b:a5:
                    96:4c:74:bd:8c:78:ca:c4:0a:f7:35:c2:60:ca:47:
                    f2:3f:5b:e1:9b:63:8d:6e:9b:4b:6c:2d:51:1a:2e:
                    ce:ff:06:ad:9f:48:8c:98:d4:ec:26:20:cf:97:c4:
                    f9:22:ed:79:9c:60:25:1d:e7:60:ef:51:46:a4:e1:
                    f6:05:3d:b8:5d:d6:a7:c3:e2:38:3a:9d:58:47:cd:
                    3f:ba:98:ea:d6:4e:d0:51:b0:44:ef:1b:bc:e1:1b:
                    53:6f:0c:5c:4f:5f:75:26:a1:75:e5:af:ae:5d:57:
                    77:e5:47:f8:2b:ec:4b:1c:b9:6d:e1:43:99:71:02:
                    02:7b:63:90:31:eb:1d:9e:53:8d:0e:14:58:3d:28:
                    ad:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:0A:A7:96:3A:72:67:1D:EF:88:1A:7F:EA:6B:4D:A6:EA:36:27:AA
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ca066383-2a2f-4ef2-af5f-1940b58cd493.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2c34::/47

    Signature Algorithm: sha256WithRSAEncryption
         8e:46:9f:b9:bf:45:a7:36:c7:36:b9:a2:10:1d:91:0e:dd:8c:
         ef:7f:e9:fd:28:83:2c:d6:32:cd:ec:30:a6:06:0b:84:da:26:
         9d:e6:f6:56:78:95:7d:dc:04:2e:05:4f:21:d0:f8:c4:5d:6f:
         99:ac:c1:73:4c:53:56:8e:2d:96:25:8f:a6:14:dd:43:9b:f5:
         e8:a2:30:49:dd:cb:cc:d5:1a:b0:18:26:ba:e8:0e:d4:67:32:
         87:15:c4:1d:0d:47:1b:58:13:28:ca:98:78:d0:57:32:7f:6b:
         68:1a:72:43:bc:21:70:d0:41:56:e3:4c:c4:ee:42:94:ff:52:
         9c:9c:ba:19:5c:17:08:fa:46:2d:c1:02:32:66:9e:fc:f4:e6:
         cc:4d:13:c0:eb:d8:46:f1:b5:7c:9b:fe:82:7a:26:63:76:79:
         83:c7:88:e7:bf:26:83:d7:06:bc:1c:0c:f3:df:0b:cc:ef:af:
         d6:b9:2d:51:64:bc:be:13:0b:56:61:10:31:72:ed:db:8e:5f:
         8b:d8:5d:1c:45:eb:08:2b:fc:7b:79:bd:d5:e1:fd:0b:fd:ff:
         52:f3:98:80:56:70:2e:55:d1:46:fb:a4:3b:4f:d3:d5:cb:c2:
         3c:ab:fc:a3:8f:d3:c5:10:7d:cd:e6:3f:2d:98:ac:3d:7f:c7:
         d0:12:44:49
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:34:43 2025 by rpki-client