Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f0593fe7-0c12-4947-a56f-4b155865b0ce.roa
File:                     f0593fe7-0c12-4947-a56f-4b155865b0ce.roa (raw, json)
Hash identifier:          RBLHkJGtC9TR8+Dq7U/Ld/Y4uLf1EkveaZci+tANttg=
Subject key identifier:   A6:E3:F0:98:82:23:6C:21:AB:8F:32:74:DB:0B:41:A6:C2:2A:05:A4
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       12351F6D34108BD1DA7212A629B9A7489808EB76
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f0593fe7-0c12-4947-a56f-4b155865b0ce.roa
Signing time:             Thu 30 Oct 2025 20:53:43 +0000
ROA not before:           Thu 30 Oct 2025 20:53:43 +0000
ROA not after:            Thu 04 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1384::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:35:1f:6d:34:10:8b:d1:da:72:12:a6:29:b9:a7:48:98:08:eb:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 30 20:53:43 2025 GMT
            Not After : Dec  4 23:59:59 2025 GMT
        Subject: serialNumber=5f0e511c344027e126a02439b5be1c8bf3619af8dd26896c37484c8fab527f2b, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:20:8f:45:24:45:f2:4e:2f:38:9b:9c:d2:19:
                    9b:2b:41:53:aa:f7:6a:c6:b8:e3:42:aa:c2:0b:3c:
                    9f:5f:c9:f3:d0:c3:32:34:be:bc:48:f9:f4:79:68:
                    10:4f:da:e7:4b:de:76:e1:13:50:ec:ba:0f:87:45:
                    b5:7e:cf:f2:ba:24:ac:c4:ce:d0:e5:57:83:50:bd:
                    5c:31:5b:fa:7d:d4:f1:56:dc:fc:8c:00:3f:cc:81:
                    83:ca:76:f9:ff:9d:06:2b:27:c2:4d:38:2b:55:5f:
                    b3:77:09:b7:7a:5a:65:90:64:36:9f:e4:74:b1:70:
                    78:5f:47:e9:5f:e2:63:4c:f7:27:85:f3:8b:d0:3e:
                    35:06:42:4e:cc:b3:8a:5d:20:f6:65:82:c5:c4:7c:
                    86:13:d9:75:f4:95:a0:63:0a:92:80:43:8c:b0:ef:
                    f2:e4:24:83:0b:ef:e5:a6:72:ff:26:07:b0:b6:4c:
                    19:8a:6c:b0:11:a4:c0:9a:3c:85:e8:20:62:1e:b8:
                    8c:6b:49:32:71:0b:22:9a:4a:7f:fb:57:dc:8e:0f:
                    29:aa:d2:d0:8e:62:5c:4e:79:63:f1:e6:59:60:2c:
                    8e:e0:bf:fd:c0:e6:05:3f:82:7a:0e:2d:f0:b0:6c:
                    82:ba:ed:77:61:c0:ae:89:97:ae:49:8d:0a:26:91:
                    b6:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:E3:F0:98:82:23:6C:21:AB:8F:32:74:DB:0B:41:A6:C2:2A:05:A4
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f0593fe7-0c12-4947-a56f-4b155865b0ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1384::/47

    Signature Algorithm: sha256WithRSAEncryption
         62:14:bc:c7:49:3b:b1:b5:dd:89:b4:ac:f9:bc:a3:93:b7:95:
         59:6a:6c:f2:a1:3c:80:82:cd:16:f8:d0:ac:42:bf:4e:81:c1:
         1c:9c:b3:a2:28:c2:f0:67:54:0e:2e:d1:af:26:39:a6:f7:87:
         44:ef:e7:cd:12:9c:5d:3d:b3:51:42:29:67:f1:15:94:bd:01:
         b7:fd:02:e7:55:82:46:6a:44:3f:22:e9:e2:dd:cb:77:7a:ac:
         a8:40:75:6a:59:bd:87:7b:91:58:83:8e:00:29:e5:b1:36:15:
         ba:50:4c:74:6e:27:4b:15:fa:ab:89:8e:58:24:0b:16:94:e2:
         c9:50:ff:58:f4:a1:4e:7a:ef:d8:b3:11:a3:5e:cb:11:05:10:
         49:99:3f:d5:86:02:1b:7f:67:41:8e:4b:b4:b4:16:67:15:75:
         ad:98:b7:0a:26:0b:3f:e2:92:9d:b1:45:30:40:0a:4b:f0:6e:
         7c:f6:f3:38:cc:b8:f9:d5:58:68:21:42:d2:87:94:8e:d0:89:
         e0:2e:99:a7:ee:07:43:b2:98:06:9c:a1:2f:a6:d7:28:2c:eb:
         af:f7:09:03:cf:1a:ba:44:d7:9a:32:9d:89:2e:61:9a:59:26:
         88:dc:48:ed:95:76:55:3e:4f:40:71:64:06:3b:2c:93:f0:65:
         f6:9f:36:c8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:42:25 2025 by rpki-client