Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/fe415966-8194-4c29-90dd-966b68c688ba.roa
File:                     fe415966-8194-4c29-90dd-966b68c688ba.roa (raw, json)
Hash identifier:          u46hOecs6r3F1U65pC9khW4Dxx0q4sSvqHucZWHZGOs=
Subject key identifier:   B8:65:E8:BD:94:25:06:CA:01:99:7C:69:F1:2C:5A:7E:B0:41:BB:B0
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       49200B679E892321D5397241E624F3EB7B4FFDDE
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/fe415966-8194-4c29-90dd-966b68c688ba.roa
Signing time:             Thu 30 Oct 2025 22:28:46 +0000
ROA not before:           Thu 30 Oct 2025 22:28:46 +0000
ROA not after:            Thu 04 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1d7c::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:20:0b:67:9e:89:23:21:d5:39:72:41:e6:24:f3:eb:7b:4f:fd:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 30 22:28:46 2025 GMT
            Not After : Dec  4 23:59:59 2025 GMT
        Subject: serialNumber=f1361d97d4225b0c5a95d94dbfbe9f542b49648eb164d93afb05a1dda36b98d7, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:97:d6:c6:c8:f4:84:30:8b:24:db:5a:12:8a:
                    bd:a0:6b:29:57:b4:e3:82:1e:d0:9a:cc:78:e4:4f:
                    af:77:a2:11:cb:ae:74:0d:1b:70:00:fd:46:80:8b:
                    1c:a8:01:e5:79:82:52:da:bf:0a:de:09:7e:51:a4:
                    a9:2f:6b:12:4d:98:61:fe:82:43:89:34:29:60:f6:
                    da:f6:2a:44:5c:36:3d:d8:a4:54:ff:15:ba:6a:7c:
                    b9:5e:fb:04:4f:08:54:b1:e2:b1:8a:39:de:2a:04:
                    88:b4:da:55:7c:0f:cc:d9:a5:fc:96:0f:75:e3:a6:
                    a7:6b:6d:7c:52:f8:48:f1:1b:e8:b2:1f:01:5f:1f:
                    9f:25:cc:35:da:29:42:91:92:d6:fd:27:a9:21:7c:
                    d8:30:e5:21:8c:c7:46:28:78:35:a4:d5:f9:fe:1a:
                    57:8b:5d:bd:a8:cb:af:bd:7d:99:8b:ed:24:a3:b5:
                    6c:11:07:e5:fd:7b:c4:8a:c2:44:56:cd:f1:bf:08:
                    29:9f:2a:87:4e:0d:0f:22:9f:14:c0:17:00:ae:9d:
                    90:98:a6:5a:c5:d1:06:f6:f9:55:bd:53:fe:86:b3:
                    78:6c:93:89:58:41:ff:2b:3e:0e:d9:d8:e9:47:9a:
                    54:f0:d2:52:78:02:dc:4d:29:3d:29:45:b2:28:61:
                    95:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:65:E8:BD:94:25:06:CA:01:99:7C:69:F1:2C:5A:7E:B0:41:BB:B0
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/fe415966-8194-4c29-90dd-966b68c688ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1d7c::/47

    Signature Algorithm: sha256WithRSAEncryption
         ab:4a:61:b1:cc:13:0e:49:09:ec:de:84:46:62:b0:a0:ac:32:
         53:64:b9:de:5f:0d:d1:09:75:a8:1e:af:41:89:5d:b9:cd:a3:
         23:6d:b6:8d:c1:b6:aa:c5:de:a4:03:19:f0:51:e7:ec:fc:15:
         01:8e:65:12:58:df:32:b3:5c:0e:52:61:2d:4f:2b:48:b3:86:
         be:be:90:b8:db:f0:ed:bc:19:53:1e:07:bf:26:5e:3d:ff:cc:
         91:25:16:f1:21:9e:a9:fc:2c:3d:f3:43:e1:27:03:15:ae:19:
         5f:70:75:e3:16:66:53:a4:e5:01:76:0a:77:90:2a:bf:86:7c:
         90:3f:27:c5:e6:2e:ab:56:f8:c4:25:61:42:9d:99:59:aa:f0:
         52:f6:73:52:59:30:57:70:97:0a:ae:6e:35:2d:5e:e0:22:4f:
         17:97:0a:7a:30:d5:1c:9a:2d:2e:8f:ba:fd:19:53:08:e7:d4:
         0a:3c:8e:16:a4:77:b0:0e:e0:b6:37:b0:fb:ed:a2:b5:e6:f9:
         fb:b5:4e:b9:e8:c3:6a:5d:ee:a1:d0:c8:6e:08:77:49:10:85:
         80:4c:ab:ba:9a:ee:e1:17:c5:9c:a2:17:34:1c:dd:3c:39:69:
         d1:c9:8b:7c:49:f0:56:42:12:58:38:ef:26:e7:15:05:2f:91:
         14:77:16:fe
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:29:55 2025 by rpki-client