Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f6cb66e5-1d06-4515-b02d-e54d41bac6fb.roa
File:                     f6cb66e5-1d06-4515-b02d-e54d41bac6fb.roa (raw, json)
Hash identifier:          CUtir89WkSSv63Z+V32M+zt3j6ZJ622UN/zR2+lH7gM=
Subject key identifier:   9C:F8:8D:90:06:9E:52:2E:38:D2:3A:78:20:0C:85:D9:02:14:AF:1D
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       518C8396EBCEA613307F767EA8C49E6A73F24DC7
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f6cb66e5-1d06-4515-b02d-e54d41bac6fb.roa
Signing time:             Fri 31 Oct 2025 02:43:14 +0000
ROA not before:           Fri 31 Oct 2025 02:43:14 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:17e0::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:8c:83:96:eb:ce:a6:13:30:7f:76:7e:a8:c4:9e:6a:73:f2:4d:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 02:43:14 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=031cb62fc2a0b000a6320ffa3eb329b21f984cfa6f62608e8662bb7879e7660b, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:83:0e:26:ae:eb:e7:88:7d:33:65:4e:98:14:
                    75:cc:e3:4b:9e:78:1d:d4:76:b3:6b:a0:8a:29:98:
                    91:f0:0b:52:9f:8e:cd:1a:4f:b7:48:3e:fa:c6:59:
                    20:ac:4e:1e:82:bb:26:47:67:60:95:28:62:8b:ed:
                    da:61:67:45:62:a0:b1:26:5d:89:bf:61:54:b9:78:
                    13:93:78:de:ac:f8:df:45:07:77:df:b3:94:85:35:
                    2b:a9:8a:60:ee:2d:d6:dc:32:1d:69:31:b8:e9:2d:
                    b8:a5:51:59:11:e9:fd:9f:5f:11:39:40:00:e7:10:
                    18:87:21:f7:ef:99:8a:3a:e8:d7:d3:54:93:37:53:
                    67:82:f1:c0:71:45:8d:7e:99:41:84:e1:b1:26:0f:
                    2d:b9:8c:80:00:ad:b3:2e:7e:5d:ef:cd:20:59:69:
                    f2:fa:b1:47:92:b3:e0:ad:10:4e:f8:4b:43:7d:33:
                    7f:14:a7:c1:65:62:6a:01:1f:f5:0a:83:52:31:4b:
                    b9:1e:94:5d:5b:6c:72:95:12:fc:50:02:d3:8a:55:
                    09:0a:dd:1d:c0:95:48:29:12:9c:33:b6:24:eb:54:
                    7a:63:c6:a6:9f:2b:d6:c3:c3:e9:db:8d:f7:2e:e7:
                    21:29:0b:25:85:2a:e9:70:5f:5a:d4:8c:96:55:e6:
                    19:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:F8:8D:90:06:9E:52:2E:38:D2:3A:78:20:0C:85:D9:02:14:AF:1D
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f6cb66e5-1d06-4515-b02d-e54d41bac6fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:17e0::/46

    Signature Algorithm: sha256WithRSAEncryption
         92:6a:56:90:a9:92:a1:bf:ff:ca:42:b1:72:71:bd:57:08:19:
         91:18:7a:c5:4c:bf:94:b5:f4:01:a2:c0:fc:e2:75:ce:05:8f:
         f5:51:0f:fe:03:33:33:75:21:85:2a:d7:55:09:60:d7:e4:34:
         27:1a:22:a0:39:3f:c2:60:5e:ac:00:94:b1:23:7e:b5:e2:3a:
         e9:6c:e7:48:e9:d1:fe:dd:a6:1c:9c:60:0b:3b:73:f9:6f:58:
         a5:12:f1:7f:e2:7f:46:e8:9a:2b:3e:71:3c:7c:88:c9:b7:50:
         81:c4:5d:65:45:2d:1e:c3:91:b5:c0:30:d8:b4:59:5b:ab:5d:
         21:fe:a1:3c:10:55:8c:b9:7f:ce:9c:8f:a0:56:ce:5a:90:c4:
         04:29:a6:cd:7e:c8:e7:b2:4d:fd:5d:7a:e3:fd:ae:d2:e2:50:
         58:53:7f:e3:43:e6:af:87:17:48:ee:7a:56:8f:fc:0d:3b:37:
         52:1a:b9:90:88:c7:9d:8e:c8:14:04:35:48:93:77:2c:86:17:
         cc:a5:a9:75:fa:34:33:9d:0c:1b:44:f8:c4:8a:f2:9a:59:27:
         a7:2a:b1:db:e2:85:c3:1f:d4:a4:97:5e:91:e8:53:ba:7d:16:
         35:c8:91:99:e4:26:0e:02:12:23:b9:45:c1:84:a5:45:78:57:
         fc:57:37:6a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:42:52 2025 by rpki-client