Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f3b23f20-1ea7-4c63-8af8-6e0571fe30b7.roa
File:                     f3b23f20-1ea7-4c63-8af8-6e0571fe30b7.roa (raw, json)
Hash identifier:          U9Ph9AwLoPJhr2bOJhaYNftoUCoR3Ew1RqIn3Cx9ztc=
Subject key identifier:   76:D4:F2:74:7D:BB:F4:0D:F9:87:BB:7C:53:01:0A:4D:ED:7E:F8:F7
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       3EE1C4E43C61519E484E33AA40B34FB2725CD8B5
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f3b23f20-1ea7-4c63-8af8-6e0571fe30b7.roa
Signing time:             Fri 31 Oct 2025 05:52:03 +0000
ROA not before:           Fri 31 Oct 2025 05:52:03 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2e38::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:e1:c4:e4:3c:61:51:9e:48:4e:33:aa:40:b3:4f:b2:72:5c:d8:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 05:52:03 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=cf0ec9500b1f95184347b4f125b699ef0cf7eb0d47b7aca5eb62c3022052071f, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:bd:57:4e:b4:95:48:5e:90:fa:77:74:87:cd:
                    ab:6f:29:d0:e2:b1:83:c0:97:d1:22:a9:b3:1c:ae:
                    5b:79:11:95:b2:ff:1c:28:6b:e1:29:a3:4a:07:7a:
                    8e:9c:2a:22:1e:8f:2a:fc:30:1f:26:8c:15:af:3e:
                    f7:21:05:18:62:7b:bd:55:e1:46:ff:32:43:43:ff:
                    cb:dd:3f:3f:96:fd:4f:d1:ab:9c:9b:ad:98:7d:bb:
                    3c:81:03:b2:8c:a1:82:3b:33:d9:0c:62:6d:37:d9:
                    00:ca:da:9e:89:b3:0e:f1:04:a5:86:17:31:73:e3:
                    52:d9:87:47:6b:0d:5f:72:ff:8e:49:03:57:fd:4b:
                    c8:52:16:e8:80:85:33:36:61:22:83:cc:08:11:30:
                    f5:e1:d8:89:0c:88:66:fa:08:c5:46:82:02:5e:e0:
                    3a:38:b8:06:f4:9d:e1:7c:1a:d4:70:bb:71:42:7f:
                    7c:49:41:00:06:63:20:37:48:ef:24:58:66:ce:81:
                    f1:25:e2:2f:d0:a9:00:8b:d7:0f:36:95:c5:ac:85:
                    1b:3b:c9:fc:c5:05:eb:b6:42:50:57:c4:36:19:3a:
                    cf:48:29:64:74:f0:bf:41:72:47:19:75:8f:83:e8:
                    a1:52:05:f5:29:6f:11:0c:33:d2:62:7b:ba:65:d0:
                    bc:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:D4:F2:74:7D:BB:F4:0D:F9:87:BB:7C:53:01:0A:4D:ED:7E:F8:F7
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f3b23f20-1ea7-4c63-8af8-6e0571fe30b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2e38::/45

    Signature Algorithm: sha256WithRSAEncryption
         02:ac:e1:5e:50:05:fc:fa:18:e1:4e:e3:7e:97:fe:23:08:a8:
         15:d9:f1:6c:b5:98:1a:0e:54:ab:26:c3:a0:aa:c4:64:4f:ac:
         3d:1a:8e:df:1f:8b:21:d2:c3:eb:29:07:f4:5d:fe:7b:f0:13:
         ff:f2:15:15:94:c8:3e:bd:2a:d0:4c:60:d0:2a:cf:b9:12:f6:
         fd:ab:ff:f9:8e:d6:14:c1:83:33:98:20:b7:1a:dc:26:96:b9:
         d3:d5:5d:b2:59:fa:46:19:3f:31:26:67:6e:8c:4d:1e:03:d2:
         70:90:41:14:92:4e:6e:7a:f2:d5:c8:42:7f:09:0a:4f:f6:6d:
         01:d2:62:68:51:3c:3b:04:b7:0c:88:51:32:84:37:91:f2:b4:
         08:e8:4c:fc:69:0a:0d:10:17:09:eb:53:f3:e3:94:cb:e4:df:
         08:d6:5c:74:e6:45:7e:2c:ad:d5:08:6f:8e:eb:24:dc:73:22:
         6b:04:bd:b8:f9:06:38:ea:2f:b2:6a:6b:16:3c:24:bb:90:7e:
         57:88:75:13:0b:c8:1e:4c:64:91:ea:de:8b:46:4e:a4:75:8a:
         76:30:9a:d8:2c:9d:51:59:b2:c7:01:27:16:4a:80:1f:b3:b5:
         9e:d4:4e:5d:24:4d:6f:a7:a7:98:3c:c5:19:13:8d:b4:53:35:
         67:be:af:55
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:38:28 2025 by rpki-client