Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e5088e80-b3d7-496b-9c0e-662a03bcbd59.roa
File:                     e5088e80-b3d7-496b-9c0e-662a03bcbd59.roa (raw, json)
Hash identifier:          4RQu8QJCD8Gka2Z0btgzrb7ZOztz5HkBm/8pgfRlHo8=
Subject key identifier:   9F:AA:89:3C:85:5E:D5:A9:85:BE:52:FF:45:C6:85:69:7E:2F:12:9C
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       527C08F20C68D2FB555D74B47789B941CF10C9E1
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e5088e80-b3d7-496b-9c0e-662a03bcbd59.roa
Signing time:             Fri 31 Oct 2025 00:55:00 +0000
ROA not before:           Fri 31 Oct 2025 00:55:00 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3848::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:7c:08:f2:0c:68:d2:fb:55:5d:74:b4:77:89:b9:41:cf:10:c9:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 00:55:00 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=48b7f0099b142c27405302b8eda7544aca6dfd1869418802ef9c02996745ced0, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:3b:e7:2a:51:eb:b7:38:3c:5b:93:76:04:45:
                    08:0d:09:97:f0:53:a5:a6:e9:38:93:c0:9d:24:59:
                    9b:44:49:4b:f7:36:9f:eb:35:aa:6f:9c:76:7b:8f:
                    a1:f0:fc:4c:af:67:46:40:3d:0b:85:6f:7b:b3:47:
                    7b:b2:e7:07:ef:39:c3:4f:a7:70:e2:d1:b0:f5:34:
                    4e:c4:53:e7:bc:fc:ef:16:19:b3:bf:d6:59:9a:55:
                    b2:7c:ad:98:7c:8d:b7:e9:8c:b3:b2:f8:e8:5b:f9:
                    5d:5b:a2:15:bd:5a:91:b8:ec:39:13:41:4b:27:23:
                    14:77:70:3e:52:2f:16:95:87:0d:b9:96:a0:8c:ea:
                    f2:74:62:3a:ca:8e:fc:b1:58:87:59:28:ef:1f:8d:
                    e8:bd:9c:bb:73:52:d0:a0:6f:21:d1:cb:59:49:4a:
                    e8:12:7e:e0:57:dc:6c:99:8e:37:1a:39:27:2a:07:
                    f2:32:7d:2f:41:01:ef:6f:44:bf:95:35:e2:db:68:
                    dc:b2:69:82:ea:4a:a3:c3:4b:b6:27:93:52:a4:59:
                    21:3b:f7:71:23:1f:59:c3:67:0a:76:23:0c:4b:25:
                    87:cf:2f:c4:fd:7a:a8:49:db:30:72:fc:fa:a1:ba:
                    59:b8:18:36:17:f7:2b:20:52:8f:dd:b1:bf:1e:97:
                    cd:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:AA:89:3C:85:5E:D5:A9:85:BE:52:FF:45:C6:85:69:7E:2F:12:9C
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e5088e80-b3d7-496b-9c0e-662a03bcbd59.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3848::/47

    Signature Algorithm: sha256WithRSAEncryption
         6a:ac:82:68:2c:b6:8c:d7:86:53:14:e7:cd:00:13:99:87:47:
         52:7a:cf:6f:0e:56:85:0d:06:6e:1e:e8:cf:88:4c:9d:0a:1e:
         05:a9:6b:ee:92:4d:d7:fa:fd:80:5e:c2:e9:f1:02:8a:c7:75:
         96:57:f3:76:98:db:ef:27:fd:69:23:91:6e:20:d1:80:11:8b:
         ff:6d:96:28:f1:9c:d4:c3:da:c2:56:46:88:71:b3:be:36:25:
         73:09:8c:6b:2b:ba:ef:ca:28:d6:c5:bb:f7:fd:98:9e:bd:73:
         26:59:20:ff:e3:7e:2f:11:79:71:ae:c3:6e:b9:19:ac:7f:56:
         44:23:10:d6:55:20:29:72:78:3f:cc:d4:f2:af:4f:9b:8f:f4:
         8b:9c:93:3a:19:9f:17:a8:fd:e4:7c:7b:fd:de:91:df:a3:3c:
         1d:e8:d1:be:73:25:79:54:ab:63:04:30:f6:28:fa:af:12:a8:
         30:5b:da:ee:3b:74:93:f4:e1:3b:44:82:83:c0:0e:37:29:23:
         bf:7a:92:11:2e:fa:e0:71:8a:a4:92:b7:5b:42:7f:d3:56:e6:
         83:86:70:e6:00:c7:bf:e0:16:8c:e2:63:b0:ee:d9:d2:5b:cb:
         31:16:bb:17:94:ee:73:3f:16:bf:d6:45:de:0b:2f:7c:f9:39:
         d1:85:e4:57
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:55:05 2025 by rpki-client