Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/93123874-5e56-4bcb-b9b6-7964a203a830.roa
File:                     93123874-5e56-4bcb-b9b6-7964a203a830.roa (raw, json)
Hash identifier:          Q0Ecq0M6QI3co1fl76Q2Ib1v5sQTPFlbUmAqu1C19cs=
Subject key identifier:   C6:87:1F:A9:FF:C1:32:14:C3:E1:C8:B5:9E:A9:6E:7E:E7:AF:02:EA
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       2ADFA32F6769611206648F5109F121865E8497D4
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/93123874-5e56-4bcb-b9b6-7964a203a830.roa
Signing time:             Fri 31 Oct 2025 07:23:59 +0000
ROA not before:           Fri 31 Oct 2025 07:23:59 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2cc0::/43 maxlen: 43
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 19 Nov 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:df:a3:2f:67:69:61:12:06:64:8f:51:09:f1:21:86:5e:84:97:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 07:23:59 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=7d3a73969546baa79536681f4a34ebd02bcb0b32aec3ca8565f95a6649bd0616, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:ff:d9:4e:70:c9:2e:27:d9:a5:64:e4:bb:42:
                    44:ae:fc:be:a5:6b:9c:54:a4:f7:c8:9d:a1:fd:57:
                    89:7b:c1:d6:2a:b9:59:34:c5:9c:a4:a2:3d:41:eb:
                    de:db:a0:8a:16:68:98:ac:76:80:97:b2:02:1b:89:
                    03:b8:65:fc:33:24:c9:10:a2:86:6f:8b:0d:bc:38:
                    d8:61:61:7c:cd:63:64:1e:43:98:df:07:b5:e8:be:
                    d6:65:ee:25:20:f7:74:d2:33:e0:44:cb:64:1d:df:
                    7e:ed:2c:51:13:81:74:f9:d8:f2:58:a5:cc:ee:2a:
                    a5:fd:ea:8d:ed:f0:60:c4:06:86:07:7b:c6:68:1e:
                    12:e5:cf:50:a0:ba:01:df:da:bc:dc:bf:4b:2e:77:
                    31:41:e5:54:dd:38:fd:d7:5d:17:0b:ba:9a:72:10:
                    55:55:cc:9d:f9:86:c6:e2:4f:70:17:ca:6f:33:97:
                    8a:aa:79:47:26:a2:3a:d4:13:bf:57:34:03:68:c4:
                    70:cf:d9:2e:f1:07:41:e0:a8:ac:df:48:71:53:0e:
                    25:da:c6:08:70:09:54:9d:3f:67:7c:1d:99:51:35:
                    ec:39:5c:e5:9e:2f:7a:e8:00:7b:14:59:ac:6c:f0:
                    41:a2:1e:c3:5a:41:ef:03:e2:87:4f:fe:3c:80:03:
                    65:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:87:1F:A9:FF:C1:32:14:C3:E1:C8:B5:9E:A9:6E:7E:E7:AF:02:EA
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/93123874-5e56-4bcb-b9b6-7964a203a830.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2cc0::/43

    Signature Algorithm: sha256WithRSAEncryption
         09:d9:a4:95:7e:2f:0e:62:6e:b9:d2:a5:f3:2b:a9:59:40:bc:
         5a:42:3b:f3:af:4a:74:6d:46:d7:c0:95:25:f2:92:42:22:f3:
         7f:a7:49:d5:1b:2a:68:e3:d3:f6:f7:e8:71:2b:08:13:33:7f:
         2b:ca:9b:d2:cb:db:85:f3:35:d9:ae:7e:7d:e3:fc:98:58:f5:
         a8:fc:bf:05:8c:1d:22:e7:a0:9f:02:c6:24:3d:27:53:fa:94:
         48:97:31:51:6d:8b:84:fa:51:31:d4:9a:66:c8:3a:0c:d1:4d:
         ea:23:9f:a6:ea:2c:c4:12:4f:a5:a4:34:b9:2e:e0:a1:21:23:
         91:b1:8a:b4:bc:1a:4c:35:18:53:ff:c1:11:0e:be:dd:73:ef:
         82:a7:65:14:03:8f:d3:84:e4:ad:63:58:a9:62:58:72:7e:42:
         f4:e2:fb:20:55:43:91:44:c6:5a:a0:25:cb:14:2a:2a:db:73:
         2c:00:9a:ce:cc:e7:b6:1e:8a:7a:09:f8:a2:d0:8c:87:91:67:
         28:d4:4a:95:86:83:07:a3:b2:e9:a4:02:a5:fd:5e:7b:5e:98:
         2e:1e:c3:bf:3c:84:be:23:33:73:12:e1:41:23:0f:8b:c8:95:
         5a:35:56:50:5b:fb:75:be:e5:40:1d:48:98:4f:61:74:5e:36:
         5c:ea:c0:fb
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Nov 18 05:41:34 2025 by rpki-client