Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f864ac6a-52f9-469e-95e3-4f8ef9b529e5.roa
File:                     f864ac6a-52f9-469e-95e3-4f8ef9b529e5.roa (raw, json)
Hash identifier:          VyjvWX2G8L5VpTGCNO2JX6nQpJ6I0rqGp43pz8L/ATM=
Subject key identifier:   CF:DA:B7:69:DA:B4:6A:6B:AE:BA:10:FB:81:7A:2D:D6:FD:E2:5D:7C
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       23269D20ED8E2BB43FBD82EC6A9BD28E59C55604
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f864ac6a-52f9-469e-95e3-4f8ef9b529e5.roa
Signing time:             Fri 31 Oct 2025 01:21:48 +0000
ROA not before:           Fri 31 Oct 2025 01:21:48 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3ac6::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:26:9d:20:ed:8e:2b:b4:3f:bd:82:ec:6a:9b:d2:8e:59:c5:56:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 01:21:48 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=d69fb8e57a7c1c3585f0be7e0f6ed6eb6d2025f462cc5256cf49a8aec7dee554, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:f4:2e:1b:6f:69:2b:c2:c8:31:19:8c:78:76:
                    c9:0a:86:7b:a0:8d:bb:96:c6:ce:cb:69:52:35:e6:
                    07:b9:d4:61:cd:79:f9:1c:38:62:8b:9e:c5:d8:6d:
                    00:6e:dd:a8:f9:9d:13:cc:74:8e:be:be:d6:51:ed:
                    75:06:e5:60:b8:ca:6b:fa:45:75:d0:a3:36:c0:e9:
                    ad:87:a5:49:00:4e:fd:c9:5d:e7:41:a0:bb:e8:b8:
                    c2:82:44:06:04:70:47:2d:87:fe:17:c9:f4:33:d9:
                    1c:c6:70:ba:f1:a2:89:16:58:d9:99:17:88:6e:17:
                    bd:70:a0:37:92:66:f5:61:62:6c:e4:e4:bd:51:7f:
                    df:79:66:84:7d:b8:96:61:84:d6:19:16:9a:07:f2:
                    ea:91:ed:22:ec:d2:5c:94:79:b9:49:74:16:84:e2:
                    97:34:c2:b6:24:23:8a:ae:af:13:3a:0d:90:f8:b8:
                    e5:3c:98:48:71:2b:bb:c1:e1:40:99:a2:b5:0c:0e:
                    f2:84:5e:8e:e0:43:c4:b0:ee:3b:64:0e:99:7d:d9:
                    8c:f0:e6:93:17:f5:0d:2e:96:79:38:62:8a:99:36:
                    23:3a:05:55:9d:ac:3d:82:f4:ba:37:ee:53:87:65:
                    b0:c3:26:c0:96:da:6c:77:41:1a:19:bb:86:21:ab:
                    d6:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:DA:B7:69:DA:B4:6A:6B:AE:BA:10:FB:81:7A:2D:D6:FD:E2:5D:7C
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f864ac6a-52f9-469e-95e3-4f8ef9b529e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3ac6::/47

    Signature Algorithm: sha256WithRSAEncryption
         40:e7:52:49:8a:01:d0:c9:66:73:05:22:b6:05:71:4b:e3:6f:
         e7:c3:76:87:68:06:ab:cb:6a:bc:db:99:3b:d0:00:91:1a:12:
         31:44:3e:d0:41:9f:47:b6:d4:4f:5c:a9:0b:42:41:65:02:44:
         2e:ad:14:21:8f:31:87:33:14:23:ca:3d:ff:c1:6f:33:49:48:
         12:a9:b6:a5:68:1f:08:e4:fe:b1:26:5a:f2:05:bb:dd:68:97:
         26:d3:69:23:ba:f9:f1:e1:59:7d:ee:15:ef:f4:5f:46:3b:15:
         b1:16:cd:16:bb:b2:88:4a:96:a5:ec:ef:89:ea:c8:91:0b:14:
         c9:7e:ea:a8:bb:f5:55:67:32:2f:db:dc:7a:52:79:00:00:23:
         7d:2b:48:1e:10:57:f4:42:12:5a:07:7a:a1:5d:38:a8:d0:11:
         ca:a6:27:94:a9:7b:34:0e:3c:67:b8:0c:f5:96:c4:c7:f9:72:
         c4:dc:88:d8:99:9d:03:a9:fc:b6:c8:62:57:72:11:de:e1:2c:
         c9:9e:7b:38:f3:a6:59:01:e3:61:05:34:d0:53:f7:3b:a4:4f:
         99:a2:8c:2b:45:8b:37:74:91:db:db:10:ed:d1:e9:a8:43:a6:
         1e:0e:2e:7a:c1:9a:60:99:38:5a:b7:a6:cf:e4:94:88:37:b9:
         52:15:b1:ce
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:34:46 2025 by rpki-client