Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6ff8e833-6f1b-48e8-a559-24ed7f318546.roa
File:                     6ff8e833-6f1b-48e8-a559-24ed7f318546.roa (raw, json)
Hash identifier:          YEm/YaDti2BBPQQXgHR6bIKn+cqa/Y9BKdJyJc9gE0g=
Subject key identifier:   AE:18:35:58:B8:7A:61:22:31:3A:5E:19:FF:D1:75:23:B1:75:FB:7A
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       3908B62F69A3B080CE27757035491205D5B5A60F
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6ff8e833-6f1b-48e8-a559-24ed7f318546.roa
Signing time:             Fri 31 Oct 2025 07:57:39 +0000
ROA not before:           Fri 31 Oct 2025 07:57:39 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:f800::/37 maxlen: 37
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 19 Nov 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:08:b6:2f:69:a3:b0:80:ce:27:75:70:35:49:12:05:d5:b5:a6:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 07:57:39 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=556d5a41748eb5064d7021d3dc89ede916ec0809641bbdf395c4741978e6be6c, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:09:5c:af:a7:02:47:5e:ba:ce:3f:80:dc:60:
                    c3:d2:59:11:88:eb:93:d5:93:98:7c:e3:a5:9b:55:
                    a0:ae:3e:a2:b8:f9:9b:40:fe:07:4e:d6:8e:c0:da:
                    e6:6d:eb:e1:1f:92:a0:99:a8:ab:51:33:5d:9a:97:
                    d9:23:5d:d9:99:f7:74:6c:dd:ea:82:67:d6:19:80:
                    dc:b7:b6:28:d7:c3:03:f2:7e:5c:10:ce:2b:7a:19:
                    e6:e8:3f:ac:55:3a:f2:20:9f:87:84:50:e1:6f:ff:
                    bf:e2:31:ab:e6:1d:13:50:7f:5a:3a:53:e0:31:46:
                    6d:04:3a:67:bf:ff:8a:51:d2:88:3c:3f:10:3a:07:
                    cd:0a:e5:fd:86:1c:da:15:48:a0:1c:57:29:dd:cf:
                    79:c0:59:1c:cc:19:27:64:4f:ef:0f:50:08:e6:e7:
                    86:5c:01:68:25:dd:7f:d2:b4:e5:fb:dc:c5:08:61:
                    88:e2:15:88:71:95:07:a4:d0:14:b7:4c:e0:af:41:
                    d9:f7:c4:1f:9c:9b:22:98:73:2b:7e:e6:5f:64:8f:
                    3c:01:68:c5:70:06:61:13:3a:ae:dc:92:84:13:cf:
                    57:2c:1c:38:79:5a:dc:29:7b:d1:8f:ac:4c:9c:7c:
                    97:86:37:9e:c7:82:12:6c:5d:ff:cb:63:51:b5:9f:
                    46:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:18:35:58:B8:7A:61:22:31:3A:5E:19:FF:D1:75:23:B1:75:FB:7A
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6ff8e833-6f1b-48e8-a559-24ed7f318546.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:f800::/37

    Signature Algorithm: sha256WithRSAEncryption
         18:ec:02:f9:3f:0e:9a:71:94:34:72:70:82:ce:43:cd:ea:9b:
         50:d6:75:7a:e4:d6:82:f5:e3:38:a7:3a:ee:75:28:73:3b:17:
         fa:27:55:72:46:d9:54:6f:c5:d7:39:67:8d:6a:8b:86:f9:ea:
         87:dc:4f:12:5e:e6:c6:c0:26:34:bc:35:70:29:07:8d:36:92:
         4f:af:a8:0b:67:b9:6d:22:04:f3:66:bf:4b:6a:8b:18:b4:b1:
         27:4b:1e:cc:69:c2:61:2b:13:19:71:f6:6c:94:b9:42:02:e5:
         03:6c:73:6e:14:43:07:ee:5d:81:d5:85:1a:fc:c2:22:ec:38:
         4e:3d:4f:55:75:42:30:09:e7:2c:4d:0b:f4:45:22:cd:56:ec:
         e9:83:60:10:76:7c:05:16:d6:e4:4f:0c:de:f0:d7:9a:a3:c9:
         f8:cb:7e:5f:5c:19:98:13:a1:5e:2f:8d:49:97:c2:3e:c2:0e:
         4f:16:e6:ad:3c:0b:95:f6:56:8e:e6:a9:a1:ac:e2:b5:7c:2a:
         4a:59:1a:15:10:1a:ec:72:bd:36:05:e4:a6:8d:7a:15:7f:b8:
         4f:c0:63:75:24:8d:47:66:8f:a7:fd:c7:f9:f3:b6:d2:99:98:
         33:3b:9f:80:c2:11:6f:e8:79:2a:fb:48:b7:91:57:ea:46:4e:
         e6:47:fd:13
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Nov 18 08:24:33 2025 by rpki-client