Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e5a196f2-5a22-4e2e-9069-da16b311984f.roa
File:                     e5a196f2-5a22-4e2e-9069-da16b311984f.roa (raw, json)
Hash identifier:          9X3qPn9CbNFED/DG9NGASwt48Bve4x3hHbTAGxJkZdI=
Subject key identifier:   98:21:5F:6D:E2:C1:60:0D:58:35:AD:F1:A7:80:C4:10:BD:3C:2F:B5
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       122D58AF5051276537285D20647712A550929640
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e5a196f2-5a22-4e2e-9069-da16b311984f.roa
Signing time:             Fri 31 Oct 2025 02:41:56 +0000
ROA not before:           Fri 31 Oct 2025 02:41:56 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1720::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:2d:58:af:50:51:27:65:37:28:5d:20:64:77:12:a5:50:92:96:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 02:41:56 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=bf63fb1cbf824695c73f830994e01ddb3481e5d7fbac829d947b3f02fce87305, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:fb:c3:50:4f:e9:e2:22:85:7b:01:3e:3d:68:
                    43:bb:73:cb:36:73:dc:d5:fe:85:06:b0:a9:8e:88:
                    cc:06:3e:7d:b6:c9:6f:7b:e0:ff:f5:3d:be:d8:a4:
                    ff:7c:71:67:3b:fb:fd:fd:08:be:52:1b:45:8b:b2:
                    d5:b3:3a:d6:44:6b:63:71:93:3a:94:8e:39:7f:b1:
                    2a:bd:5e:08:21:40:66:82:c0:3e:ce:6b:14:87:bf:
                    eb:36:a1:d0:19:a1:4c:38:73:05:3c:b1:cc:d2:4f:
                    fd:db:05:d8:da:4d:ea:20:b0:be:b4:0c:aa:8a:58:
                    86:b7:28:56:af:4b:f7:b0:8b:97:c0:62:0b:1a:a5:
                    f5:0b:00:ed:04:cc:87:26:7b:c5:03:b1:08:fb:d3:
                    f4:5a:4e:77:0e:68:b6:81:f7:d2:12:92:d2:47:57:
                    a6:cc:79:ec:29:99:5f:8d:d8:57:01:51:44:6b:8f:
                    4d:f6:16:42:3c:aa:e5:16:97:9d:0a:ec:c5:69:57:
                    d8:66:02:f2:4c:d9:e7:f3:96:bf:b7:95:31:b0:e4:
                    c6:4f:67:a3:63:52:b0:cb:4c:3d:2d:b0:4e:8a:f0:
                    66:ca:8e:de:f6:e8:c0:19:d3:69:8c:f4:ca:03:ae:
                    04:50:42:82:3d:ca:37:8f:3a:78:65:d9:e1:4a:00:
                    83:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:21:5F:6D:E2:C1:60:0D:58:35:AD:F1:A7:80:C4:10:BD:3C:2F:B5
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e5a196f2-5a22-4e2e-9069-da16b311984f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1720::/46

    Signature Algorithm: sha256WithRSAEncryption
         40:4d:5b:47:55:8a:80:9f:be:3a:ff:d1:aa:6e:14:26:f8:7d:
         f5:ed:a0:57:66:50:0b:4e:49:84:3e:d1:a4:70:3f:e6:79:a1:
         a1:a0:15:50:ef:7e:65:58:26:f3:fe:8d:8a:8a:1f:40:da:39:
         40:e0:ca:f9:c6:92:89:80:4e:4f:ab:29:a0:a5:16:1d:c3:85:
         57:5b:36:e3:c9:a6:62:69:f3:1e:ca:49:95:77:91:b8:97:a5:
         97:63:f4:5b:bc:e2:43:59:ad:4a:0b:1a:a3:ca:b3:f3:cc:44:
         ee:de:56:de:41:6b:ad:8d:89:5b:d2:bc:2c:78:b7:5b:6c:07:
         0f:8b:f8:d3:8e:10:53:3a:f5:9b:c7:41:24:ed:44:f1:0d:03:
         99:c6:ac:0e:0c:29:ce:e7:1d:4e:80:97:02:a5:af:05:24:30:
         0f:a5:66:c0:4e:70:26:c5:62:d1:a1:1e:12:c5:1f:8e:76:7e:
         79:66:a5:1c:55:45:ff:8d:51:ff:ab:b7:53:5b:a7:31:99:58:
         f5:d1:f8:a5:9f:9f:70:af:63:32:4b:e0:cd:3c:91:d9:31:8b:
         c8:ce:e2:7d:c6:f8:4a:dc:9c:69:96:06:32:2a:2c:d5:8d:60:
         a8:ed:d4:36:c7:8c:5a:a2:a1:53:a1:92:14:95:f3:7b:de:dd:
         a5:52:a9:29
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 15:27:26 2025 by rpki-client