Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ecb563b9-9e7e-4b49-8763-8b4d824a409b.roa
File:                     ecb563b9-9e7e-4b49-8763-8b4d824a409b.roa (raw, json)
Hash identifier:          OKALd4VAMw/mdy/EhOcHULvxmcfNrqT2bfXBmLYqUNA=
Subject key identifier:   D0:10:66:82:F9:44:DA:D1:79:6C:8D:04:61:32:BA:8F:16:FD:FA:A0
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       047D3349F4770C23A8EAA71D0B0C3DEDC366F32E
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ecb563b9-9e7e-4b49-8763-8b4d824a409b.roa
Signing time:             Fri 31 Oct 2025 02:22:02 +0000
ROA not before:           Fri 31 Oct 2025 02:22:02 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:128c::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:7d:33:49:f4:77:0c:23:a8:ea:a7:1d:0b:0c:3d:ed:c3:66:f3:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 02:22:02 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=b40c700dce8d846ed4dc07c524183d4a0e01cf55254232357b2489bc15696e3c, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c5:a0:cc:56:50:79:84:54:ee:45:c4:67:eb:
                    fb:aa:57:a1:e2:0d:61:da:68:7e:d6:b9:ef:f3:f3:
                    7b:98:ae:a2:56:9b:cd:63:0c:12:c9:a1:1a:b2:13:
                    3e:f3:3d:2e:3e:9b:b1:8f:44:cd:7a:d5:8b:7c:22:
                    3d:f3:f3:f0:67:85:58:8c:86:24:cf:e0:29:1a:f6:
                    51:02:0e:cf:d5:e3:dc:eb:54:86:04:a5:65:4e:0f:
                    61:58:a7:fd:ff:60:9f:af:22:87:3a:a4:85:ee:6b:
                    ae:aa:83:76:bf:31:96:8d:eb:53:20:2c:e5:81:44:
                    1c:ca:cd:8e:eb:48:6c:0c:b9:f3:b3:ce:2a:0c:3b:
                    ad:53:0c:9e:f3:d4:a7:22:9f:57:18:d4:cf:5f:47:
                    da:8c:d8:01:8f:fc:ef:53:c0:6c:0c:fe:06:e8:f5:
                    f8:95:22:09:42:71:fb:3d:cb:19:df:f0:24:f9:35:
                    b3:df:e9:41:58:31:2f:b0:9f:d0:6f:7e:33:02:03:
                    78:3a:ed:c2:02:d4:f6:26:52:c4:5a:a4:e2:59:f3:
                    81:7e:a6:34:47:cb:3b:aa:f1:08:15:2a:29:2f:65:
                    75:e7:ff:60:fd:f7:96:c7:c3:76:65:52:5e:00:7d:
                    ba:a2:81:f0:e9:74:4d:07:e1:70:15:0e:e0:9e:8b:
                    3a:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:10:66:82:F9:44:DA:D1:79:6C:8D:04:61:32:BA:8F:16:FD:FA:A0
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ecb563b9-9e7e-4b49-8763-8b4d824a409b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:128c::/46

    Signature Algorithm: sha256WithRSAEncryption
         6a:ac:3d:a1:e2:dd:37:a3:d9:7e:9b:f1:59:fe:ee:93:f6:34:
         1b:4e:c0:61:d8:58:cd:9b:54:a7:2d:18:0f:84:f3:19:0e:d4:
         f5:20:0b:e9:8f:c7:b6:53:eb:34:98:2f:71:aa:d5:77:b5:a8:
         52:b3:29:76:10:d1:54:30:0e:7e:87:9c:d0:cf:cd:11:7e:c3:
         59:91:3b:64:95:ce:e8:2e:0d:53:9e:15:a1:42:ba:6e:bb:2a:
         a4:b2:14:36:7a:40:5a:3e:11:af:97:51:70:8e:c8:3e:f8:f1:
         49:c9:8c:41:23:f1:10:5e:fb:18:3d:5c:67:0e:a4:4f:bb:ad:
         d6:78:c3:a4:aa:9e:33:e9:79:31:93:4d:24:20:c3:0a:5e:2d:
         50:b0:f0:2d:80:b2:64:b2:e3:4a:ec:9b:06:74:47:37:5d:4c:
         00:a1:ae:dd:df:29:68:25:c6:41:28:86:f9:34:e3:ac:b7:a5:
         96:35:80:82:53:28:ae:04:1f:20:f7:1c:ad:78:bf:88:27:3e:
         40:e5:d9:92:39:aa:c6:6b:4d:ef:6d:4c:81:bc:13:85:da:dc:
         10:8d:89:84:a3:9a:59:0c:d0:ca:1b:ae:1a:70:07:74:a3:00:
         00:37:9f:e4:f0:88:40:86:44:40:c4:52:c1:60:3a:56:2a:27:
         26:1d:62:8e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:38:53 2025 by rpki-client