Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ce828243-d4dc-4a8f-b44d-b171799b0a55.roa
File:                     ce828243-d4dc-4a8f-b44d-b171799b0a55.roa (raw, json)
Hash identifier:          Gdk4EcqMqfdvzMcF6MyZvAPu5rfrUql5Y6BrX8SZJto=
Subject key identifier:   4E:17:BB:46:EA:4E:3D:B0:48:D6:EA:27:AD:11:A8:68:8A:4F:83:82
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       58B9A1744B8700C7FD66784C0C2B00FCFB529111
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ce828243-d4dc-4a8f-b44d-b171799b0a55.roa
Signing time:             Fri 31 Oct 2025 03:41:55 +0000
ROA not before:           Fri 31 Oct 2025 03:41:55 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2d4c::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:b9:a1:74:4b:87:00:c7:fd:66:78:4c:0c:2b:00:fc:fb:52:91:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 03:41:55 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=f18e28c63b1a1b44e08861454d57b3f4460a767c0475728ed60f92ab111d56d2, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:3f:0b:9b:c4:42:5d:d9:61:16:d7:f5:e7:f6:
                    49:11:26:83:a1:2d:38:65:9a:e4:df:e9:7e:a5:94:
                    a1:c8:36:a8:a1:6d:41:11:b8:43:17:23:1b:a1:64:
                    48:ab:56:7a:f6:47:d5:4f:d4:20:18:98:5a:1b:da:
                    bd:06:88:98:53:c3:0b:79:15:c8:6f:73:68:00:df:
                    d6:10:28:94:11:7e:42:34:44:be:22:29:91:3e:c0:
                    37:17:c6:c8:5f:39:3d:1a:d1:7a:c3:e6:98:b5:5b:
                    97:6e:75:6e:f8:d2:5f:5e:96:df:51:97:cb:91:c5:
                    a5:38:44:08:3e:ec:73:68:93:d7:39:58:a0:48:be:
                    fe:f8:6c:c7:81:bc:66:d0:65:9b:8f:81:e5:d4:34:
                    30:e3:77:84:5c:6a:61:13:2c:a8:51:5c:50:78:05:
                    d4:e7:c0:54:d9:60:cb:d4:52:c6:14:4e:55:7f:c7:
                    ba:c5:4c:c4:c1:40:0f:a6:50:09:66:29:43:bd:da:
                    0f:04:c8:28:0e:5d:fa:4e:99:49:41:e7:2b:dd:17:
                    2c:d3:0f:b4:67:7a:6e:73:cb:78:f1:01:68:25:bd:
                    50:6f:26:72:8d:ea:5d:59:0e:f8:84:06:2d:f8:ea:
                    2c:8a:ce:b6:75:33:53:3f:ca:85:2b:e9:df:bf:e5:
                    0a:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:17:BB:46:EA:4E:3D:B0:48:D6:EA:27:AD:11:A8:68:8A:4F:83:82
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ce828243-d4dc-4a8f-b44d-b171799b0a55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2d4c::/46

    Signature Algorithm: sha256WithRSAEncryption
         2a:5a:4e:c9:ed:27:5c:0c:f3:d6:e2:be:da:1c:bf:e2:8f:ce:
         ed:4a:a1:aa:32:a8:94:d8:b0:a5:f0:80:e3:d2:84:fe:7d:6d:
         ce:4b:e6:d6:cb:35:bf:70:d2:e8:b7:a3:58:14:2d:46:b8:69:
         35:3a:33:15:71:c7:d9:6a:81:10:b9:b8:6f:c8:67:20:a4:d2:
         3c:c7:84:cd:e8:8d:0d:0a:1e:ee:73:ab:ac:9b:b8:5e:aa:4a:
         ee:24:6b:53:f0:d9:24:02:2f:41:db:ff:be:e6:ea:94:cd:b0:
         f0:4e:eb:4f:b3:7e:9b:b6:02:e3:70:34:c5:f8:22:ed:8f:db:
         01:c9:79:c9:27:c5:26:f9:29:a3:4b:22:b7:16:2f:f1:2d:a0:
         71:8c:79:e7:4b:07:45:ca:af:c8:4a:e2:21:e6:fc:20:89:a4:
         92:d5:28:fa:05:e9:05:e2:ee:17:8a:35:08:04:b8:62:2f:5f:
         cb:a3:af:69:5d:bc:c9:5b:86:fb:63:2c:e2:dc:0d:40:bd:86:
         c5:81:47:9a:85:98:01:32:d9:0c:a3:bc:cb:52:a4:58:09:5f:
         ef:40:1a:53:07:b3:2c:70:d3:52:10:64:d6:5e:27:42:c2:e4:
         e7:49:c9:dd:8d:08:1e:10:9a:64:48:70:b3:bd:ea:8f:fd:48:
         28:7a:b5:0a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:55:15 2025 by rpki-client