Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f6fec5e6-e1c0-4be8-ba3f-5ba9a1cf8bf8.roa
File:                     f6fec5e6-e1c0-4be8-ba3f-5ba9a1cf8bf8.roa (raw, json)
Hash identifier:          gsq4RXapJO5AXbHaVLuEj6omuxBx5Pumx6q6pD87ahk=
Subject key identifier:   64:20:B5:39:FD:F9:0A:76:1D:E6:53:BD:98:2B:26:3E:6D:BB:EF:45
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       22044539456D25CEA71A4EE845F3FE166272C4F7
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f6fec5e6-e1c0-4be8-ba3f-5ba9a1cf8bf8.roa
Signing time:             Fri 31 Oct 2025 07:37:00 +0000
ROA not before:           Fri 31 Oct 2025 07:37:00 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1a80::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:04:45:39:45:6d:25:ce:a7:1a:4e:e8:45:f3:fe:16:62:72:c4:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 07:37:00 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=7ed0dd3b279f6a3d60374728b2590e5de544d829a418d67bd7a353f6b382f483, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e0:be:73:a6:ed:29:ce:12:c9:df:31:9b:eb:
                    ab:56:c8:ba:1c:4f:1c:46:ce:11:96:65:71:94:b0:
                    26:da:5a:94:db:02:bd:bc:f8:52:eb:ea:cc:cd:84:
                    8f:21:57:b7:4c:22:be:0b:71:2a:f3:6e:24:a8:36:
                    bd:d6:8c:4b:ff:dc:57:fe:a9:51:70:5f:a6:57:7b:
                    3f:3e:6e:f4:70:40:2d:62:6e:ba:36:40:19:c1:b6:
                    f5:af:55:c8:82:a2:a5:49:95:30:90:2c:e2:16:6d:
                    4b:03:59:c2:f6:cc:56:6c:df:bd:75:de:65:10:40:
                    3c:79:ea:0b:88:aa:00:a1:c1:3d:95:a7:53:9a:ca:
                    91:0d:47:d2:9c:c7:72:e1:8b:3f:e5:48:e0:ea:2b:
                    d7:38:67:3d:2f:16:04:e9:07:ed:be:75:9c:f6:c2:
                    8d:23:6f:6e:a8:26:53:88:1d:ab:b9:b5:fe:40:4b:
                    21:1b:e6:09:03:b4:6d:06:ee:60:8c:2f:23:44:40:
                    d7:47:35:7a:2d:2a:5f:7b:64:45:3c:44:be:52:7e:
                    19:60:13:56:55:c8:b5:e3:90:8c:48:44:8d:c2:c8:
                    3f:6a:9d:25:f2:8f:d0:52:8f:af:f3:bb:6d:32:6f:
                    a2:90:e2:5a:85:be:4e:bc:a7:6f:9f:fc:eb:ca:0a:
                    35:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:20:B5:39:FD:F9:0A:76:1D:E6:53:BD:98:2B:26:3E:6D:BB:EF:45
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f6fec5e6-e1c0-4be8-ba3f-5ba9a1cf8bf8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1a80::/42

    Signature Algorithm: sha256WithRSAEncryption
         77:a5:42:c5:39:d8:e6:9b:e3:fc:00:13:77:d2:b6:f9:77:27:
         27:4a:3d:b4:8f:a3:ea:ee:29:f4:c2:44:08:e0:94:1c:cd:9a:
         5e:3e:fa:cb:14:26:2f:ea:73:16:c3:1b:6b:64:06:9b:c9:3c:
         6d:34:1c:13:2a:46:82:c1:bb:d3:a4:3b:40:98:46:ca:f5:de:
         29:1b:44:bb:6e:74:69:20:67:d5:a1:27:35:f6:eb:55:ca:fa:
         be:9b:8d:3c:77:3a:ae:c6:b3:a3:32:42:08:49:56:b3:89:52:
         77:cb:66:8c:da:4f:74:79:0a:5c:a5:e2:04:fe:23:94:b9:14:
         7f:e4:75:52:cb:f9:42:28:f8:79:56:78:e0:21:3c:f2:c7:a4:
         e8:45:8e:69:32:4a:c4:44:f8:69:ec:d1:5e:87:b7:86:e5:3a:
         61:51:75:9e:b4:04:f1:b6:ae:1c:34:1f:13:51:b6:7f:f8:f4:
         0d:76:5f:9a:ad:a0:f5:3d:d1:3b:09:d3:31:91:fd:f0:eb:79:
         90:21:c7:fc:78:37:d0:ce:31:7c:36:24:fb:49:61:51:04:7c:
         c5:d8:4c:69:74:27:fc:ed:03:7b:3c:e7:9b:0d:b9:c0:f1:8e:
         17:e1:8f:12:2b:40:a0:59:a5:d7:9e:90:41:8d:63:6b:78:fd:
         63:f2:58:22
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:55:12 2025 by rpki-client