Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ef0b7126-abec-4cd8-b33c-5da19ddcbe5e.roa
File:                     ef0b7126-abec-4cd8-b33c-5da19ddcbe5e.roa (raw, json)
Hash identifier:          Fgeg+7w1436U8QXup1Q+k6Bf/RmPZEr7wnjgzRvFYH8=
Subject key identifier:   3A:CB:4D:0F:D4:5B:78:D8:4D:D3:9F:08:43:E1:BC:D2:79:0A:FA:2E
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       55A81142A4A0E8E51B9D349093220E04002117F9
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ef0b7126-abec-4cd8-b33c-5da19ddcbe5e.roa
Signing time:             Fri 31 Oct 2025 06:56:41 +0000
ROA not before:           Fri 31 Oct 2025 06:56:41 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:36e0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:a8:11:42:a4:a0:e8:e5:1b:9d:34:90:93:22:0e:04:00:21:17:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 06:56:41 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=ffa795d439c5dbd91bcf34b7e258a362c6811c7a63498d56c6cc36b1a3333d69, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:99:a8:f2:a2:87:16:9e:bc:3f:2c:59:ba:ba:
                    cb:00:74:83:33:f1:5d:fa:4c:e3:f9:2f:4b:3b:c1:
                    79:97:6b:5e:28:91:bb:6b:8a:d9:28:7f:ff:e5:f9:
                    67:49:3d:a6:ba:27:1c:60:78:01:bd:7e:a2:60:c6:
                    54:a1:6e:f3:d8:f8:68:81:cc:af:c3:df:49:09:e5:
                    2b:fe:ae:65:0d:1e:58:2b:44:6b:3e:84:5b:e3:bf:
                    e9:e4:8d:31:88:47:82:c8:f0:17:77:43:27:fd:6d:
                    bb:73:72:91:5e:11:6a:2a:b8:0e:29:f5:30:59:9f:
                    49:65:92:7d:e3:f6:07:cd:69:06:4a:de:7a:0b:25:
                    81:62:5f:ca:1e:7f:da:af:dc:4a:b3:20:82:70:2c:
                    d5:05:7f:59:98:f2:6b:3d:91:b0:5a:b7:9c:3f:d0:
                    26:22:f6:0b:6d:a0:05:d6:9e:5d:fc:a4:79:65:28:
                    d8:cc:b2:cf:4e:75:74:6f:06:48:a6:a6:88:51:e8:
                    50:59:9c:9b:44:11:17:d3:b9:a0:fb:1e:f3:eb:07:
                    13:0f:99:0a:af:0b:dd:33:d0:a4:ea:ce:6f:28:77:
                    76:f2:14:b2:80:7c:4d:52:6f:ad:2b:f8:ea:4a:b6:
                    87:da:2f:49:70:ae:0a:ea:be:05:8c:7a:e1:fd:d8:
                    28:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:CB:4D:0F:D4:5B:78:D8:4D:D3:9F:08:43:E1:BC:D2:79:0A:FA:2E
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ef0b7126-abec-4cd8-b33c-5da19ddcbe5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:36e0::/44

    Signature Algorithm: sha256WithRSAEncryption
         85:8c:7a:3c:df:dc:8a:70:1e:4a:1f:3c:9f:26:a6:2d:39:1b:
         a9:31:91:4c:ec:cd:b7:8f:a1:30:55:51:75:b3:b5:b2:62:12:
         71:dc:3b:aa:ff:85:fc:40:97:a0:52:bb:c8:a9:73:2f:6b:bf:
         37:f3:5b:2d:ff:54:2d:23:79:49:97:ab:51:22:47:5f:46:5d:
         0b:de:7c:71:64:6d:d2:0f:6c:80:a5:8b:64:10:c5:74:6f:d4:
         86:bd:fe:88:0c:31:8d:5a:02:3d:90:84:87:75:27:93:26:7b:
         48:2f:2e:70:c0:73:c9:44:41:19:91:6a:d0:f1:93:93:34:cb:
         46:02:05:08:9c:d9:14:a1:e9:ad:09:ba:37:62:9d:fa:53:21:
         5a:8f:46:9e:26:52:53:b5:32:62:9b:f9:00:16:a6:32:82:9e:
         d7:9f:52:c6:13:5e:78:27:2c:12:27:cf:18:23:ce:7a:54:36:
         d0:92:31:9e:b5:fb:9a:3c:35:e4:b0:96:db:17:11:fb:bf:6a:
         b9:e2:4f:f9:11:d4:a5:04:6a:22:c7:b0:61:dc:29:20:f6:0f:
         fd:97:d9:36:1a:c1:17:b8:3c:8e:39:52:ea:a7:cf:df:63:f6:
         b0:22:9f:0d:89:1e:03:20:15:c6:04:fa:6e:97:7a:65:ac:85:
         b8:b0:0c:76
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 12:49:07 2025 by rpki-client