Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d0b72c38-fab8-44ee-bb75-3cee5a4af392.roa
File:                     d0b72c38-fab8-44ee-bb75-3cee5a4af392.roa (raw, json)
Hash identifier:          w+XkcumRSOVJl0J1UDbd08x7iT9R+PGSzOppR5GqFqA=
Subject key identifier:   B0:66:A4:ED:4F:94:86:B7:F1:7A:BD:46:E6:0D:5B:DD:42:4E:80:53
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       36553F91F671BC9D16642E4E21EF3681564C26
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d0b72c38-fab8-44ee-bb75-3cee5a4af392.roa
Signing time:             Fri 31 Oct 2025 04:53:38 +0000
ROA not before:           Fri 31 Oct 2025 04:53:38 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3dfc::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:55:3f:91:f6:71:bc:9d:16:64:2e:4e:21:ef:36:81:56:4c:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 04:53:38 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=7afce430354a9371cab17cabb84552086ada5de6e69fe53d3aa3608d67819918, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d5:21:c1:e7:d0:d9:34:68:0e:fd:6b:b2:d5:
                    2e:a7:ee:e4:49:2e:70:c2:69:3e:fe:d2:19:97:ef:
                    35:ee:db:b8:f4:7f:f9:d8:a9:2d:ef:bf:76:c0:a5:
                    c8:60:55:1f:d8:aa:74:7d:a4:38:bc:92:3c:8f:3a:
                    46:4c:91:8c:4a:08:55:ab:7e:77:8c:ca:76:6f:17:
                    f6:b0:f8:ee:5a:a5:75:49:ac:99:4b:b0:88:7d:62:
                    93:b3:75:fc:65:51:36:66:2b:df:cd:b7:9b:d3:61:
                    28:49:bc:94:39:eb:a9:f5:ba:7b:ea:99:ab:85:4d:
                    5d:ae:36:66:6d:dc:03:e2:93:64:78:5b:6a:66:b0:
                    70:c0:73:f5:27:a0:c9:b8:26:a2:e6:62:b4:9f:28:
                    25:c1:9d:f8:f0:28:3d:45:e4:f5:07:83:91:dd:7f:
                    0b:41:49:29:ec:49:25:ba:0d:e2:28:f0:d9:0e:a0:
                    1b:d9:aa:ce:b8:5d:02:c6:a4:7c:a3:1e:af:88:88:
                    3b:7d:04:39:6f:5e:aa:6c:2f:9b:c6:66:0e:5c:fb:
                    d8:2a:42:74:7e:1a:06:fd:e6:33:b8:ac:aa:dd:e4:
                    a6:ef:6a:9d:77:d7:ee:07:a8:17:db:f0:25:b2:1e:
                    83:90:1b:b6:62:48:a7:0d:e4:14:2c:03:c7:e8:a9:
                    2c:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:66:A4:ED:4F:94:86:B7:F1:7A:BD:46:E6:0D:5B:DD:42:4E:80:53
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d0b72c38-fab8-44ee-bb75-3cee5a4af392.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3dfc::/46

    Signature Algorithm: sha256WithRSAEncryption
         99:6b:0c:d3:e9:65:9a:5b:09:f5:4f:c4:f5:b8:91:a2:27:70:
         fb:83:21:74:c2:e5:af:87:94:9d:99:f8:0f:14:f7:cb:e8:68:
         83:79:e5:f9:95:63:d4:b3:cf:01:45:0c:49:1e:13:97:85:a8:
         73:ba:a1:25:f2:16:6a:57:7e:54:03:82:a9:92:22:c4:c0:99:
         88:27:aa:62:89:d4:bf:fc:ba:96:8d:82:45:ca:a5:6b:63:64:
         4d:5d:81:63:6f:05:a2:2a:02:9d:f1:30:25:90:0e:0e:36:67:
         64:1a:af:66:fa:19:bd:53:c0:b0:0a:95:03:9d:a4:1e:79:4f:
         80:86:2e:a3:62:fa:e0:5e:4a:7d:07:e0:14:2f:07:d2:d4:1c:
         b5:12:0a:7f:3e:b3:ea:59:14:7b:e8:e6:46:34:a7:78:1f:45:
         07:80:da:1e:9c:16:e3:ad:9b:59:74:32:3b:72:d7:ee:eb:c0:
         b9:fa:53:27:81:80:92:06:a9:c8:86:48:46:70:fa:09:b0:dd:
         f5:ba:87:77:0f:8d:34:a6:ce:2c:16:75:9f:e7:31:47:49:7b:
         a4:9d:fa:30:70:66:d6:2a:5b:de:0c:63:52:a4:d6:f7:5e:1c:
         56:01:53:1b:0d:fc:e8:fc:18:a7:4b:34:fa:76:a2:02:16:86:
         f6:2a:ce:37
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:55:06 2025 by rpki-client