Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f460eb8c-5bc9-43aa-b6dd-7cb271a8504e.roa
File:                     f460eb8c-5bc9-43aa-b6dd-7cb271a8504e.roa (raw, json)
Hash identifier:          FH9IwuoNX7fj8ngrxXJT4n9sagff/8j8mJPBNDLbRo4=
Subject key identifier:   98:11:7D:4E:CC:9C:20:58:49:E0:FF:7F:92:6A:16:E5:51:80:A3:1C
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       41577E6AA95BB0E1093D8F4DAE99A2EBB10AF6
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f460eb8c-5bc9-43aa-b6dd-7cb271a8504e.roa
Signing time:             Thu 30 Oct 2025 23:08:37 +0000
ROA not before:           Thu 30 Oct 2025 23:08:37 +0000
ROA not after:            Thu 04 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2b18::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:57:7e:6a:a9:5b:b0:e1:09:3d:8f:4d:ae:99:a2:eb:b1:0a:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 30 23:08:37 2025 GMT
            Not After : Dec  4 23:59:59 2025 GMT
        Subject: serialNumber=f420199e8374c88b88d02b1596cf95fd02b35c4e8c8164d3c496082d1d76d04c, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:80:c2:f9:d2:7e:63:33:2f:75:5a:cc:a4:a2:
                    d1:29:a7:16:0c:77:47:eb:f4:6d:4f:56:03:4f:73:
                    c3:eb:9a:e5:0d:54:ed:26:b5:52:c1:25:42:f9:56:
                    f7:79:51:9d:c0:cc:a6:36:de:01:fb:77:c0:ad:41:
                    0c:79:fe:be:99:2a:d0:d6:31:71:58:5d:f5:2f:5c:
                    6c:59:68:63:c3:47:9d:27:3e:aa:fc:c0:92:b3:65:
                    c4:d7:09:23:fb:72:e8:64:cc:ad:01:52:48:b2:ee:
                    3a:ae:06:92:9f:3d:86:f1:16:da:65:a2:3c:de:85:
                    b6:79:70:34:d8:67:c5:7f:49:be:39:72:a4:19:a3:
                    5a:42:3b:67:89:6a:ac:40:91:5c:3b:24:38:3b:a8:
                    e5:26:f9:79:02:46:44:57:a4:c6:20:90:a4:6a:d2:
                    78:af:17:26:2a:24:ba:a6:84:e7:33:9c:e2:db:ce:
                    37:18:6d:ec:a9:8f:5c:b0:0e:e5:b9:54:69:b6:76:
                    91:d1:a8:2d:65:b0:de:e8:13:e9:18:74:0e:a1:f8:
                    ea:54:e8:b5:28:3a:0c:91:d6:39:18:aa:dc:ed:1c:
                    ac:26:8b:a7:5c:38:cf:f5:c5:59:71:98:2d:f3:01:
                    f2:d7:b4:a6:ac:d7:dd:e2:98:ac:87:70:6c:be:4d:
                    5f:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:11:7D:4E:CC:9C:20:58:49:E0:FF:7F:92:6A:16:E5:51:80:A3:1C
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f460eb8c-5bc9-43aa-b6dd-7cb271a8504e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2b18::/47

    Signature Algorithm: sha256WithRSAEncryption
         12:85:b8:d9:04:ce:65:cc:d3:88:ed:d7:14:47:49:18:c3:b7:
         ec:e4:fa:a5:1a:0f:87:73:a2:b9:bc:b9:86:de:15:62:bb:2f:
         b4:fc:31:8d:3e:80:51:bb:1a:78:95:c7:10:c1:6a:c0:0b:bf:
         99:36:2d:3f:89:b4:e3:a3:83:f5:29:d2:0d:8c:14:64:a4:b0:
         15:47:4d:9b:c0:fb:a5:fc:74:d8:45:42:ef:81:9f:38:92:e5:
         88:6d:85:2f:a3:ec:42:14:44:2d:76:c8:c6:8a:42:0a:59:99:
         99:7e:44:69:a9:48:12:31:3e:5b:d0:0a:45:33:c8:b5:12:2d:
         92:c4:ff:73:2e:08:bb:68:b5:ca:58:d2:ee:17:e7:4b:86:df:
         27:bd:34:10:16:16:55:47:d5:41:0f:30:7a:59:e1:e3:1a:ce:
         1a:9e:4e:88:2e:33:51:99:ac:bc:5f:86:35:19:a6:c4:42:39:
         13:d4:fc:5b:50:c9:13:70:60:f7:27:09:57:9b:d5:bd:81:bb:
         51:1d:ac:c5:f5:70:4a:0c:51:63:8c:80:0e:cd:f4:cf:e1:18:
         01:13:87:7c:03:ee:e9:eb:34:2b:aa:30:28:ef:b2:0a:4b:17:
         90:b2:c7:f7:cc:72:52:c1:00:66:31:00:b2:ea:6e:5e:a1:57:
         dd:cc:27:bf
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:28:23 2025 by rpki-client