Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/be0ea913-f7a4-4d47-ba98-29e7f311c68a.roa
File:                     be0ea913-f7a4-4d47-ba98-29e7f311c68a.roa (raw, json)
Hash identifier:          o4mpQJe3UzOpplCnCSGwG6Zip+3566QYbcn+tAxZxws=
Subject key identifier:   BC:04:AA:C5:46:23:32:F7:DE:17:83:11:F0:8E:A4:A2:02:06:94:E6
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       69D98B6AD807C7FBA4C390065580ADDA774EF7DE
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/be0ea913-f7a4-4d47-ba98-29e7f311c68a.roa
Signing time:             Fri 31 Oct 2025 04:56:47 +0000
ROA not before:           Fri 31 Oct 2025 04:56:47 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3ec0::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 19 Nov 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:d9:8b:6a:d8:07:c7:fb:a4:c3:90:06:55:80:ad:da:77:4e:f7:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 04:56:47 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=dd88c20b7e0cb63b082b8996b7a5261ddf1eaa0baf64a6df6f72cd6880bae97f, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:12:21:68:87:97:87:9b:f6:60:f9:4e:b9:87:
                    82:07:0a:f9:31:e3:7b:20:7b:f8:f8:23:33:10:30:
                    d6:65:24:c8:38:77:72:08:ba:42:6b:db:f2:8b:b6:
                    e5:73:8f:4d:a1:a6:a3:4a:50:3c:a1:18:d6:e3:97:
                    82:b6:78:9d:65:72:78:38:0c:59:f2:76:e4:2f:41:
                    aa:12:e1:94:80:fe:1d:0b:3a:1e:2e:be:a1:09:c9:
                    83:63:6a:15:c7:6b:cf:da:f4:78:f3:a4:9c:4a:4a:
                    26:35:5d:8d:f8:13:77:36:36:de:21:a3:88:e9:09:
                    58:76:1d:18:f4:20:3f:d0:65:09:59:91:18:99:6e:
                    08:9a:7b:b5:93:80:22:43:3d:8e:cb:3c:06:01:96:
                    1e:0a:73:98:bd:08:a0:b4:4a:fa:76:d9:7b:8d:80:
                    b3:62:4c:53:1a:d6:7c:9c:ad:29:97:3c:27:fd:1c:
                    9d:d4:4e:f5:12:4b:25:fa:1b:c1:bc:68:ed:95:36:
                    fb:e5:8a:5e:d9:9d:d5:0f:3e:12:58:de:a3:8d:ea:
                    af:a0:76:74:9b:a0:b7:46:ba:45:37:5b:f3:8b:d9:
                    eb:d9:56:9d:89:a9:ee:c5:60:bd:7b:92:ac:3b:10:
                    30:c8:7b:fb:b0:25:e0:4e:6e:43:b4:23:16:58:03:
                    cd:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:04:AA:C5:46:23:32:F7:DE:17:83:11:F0:8E:A4:A2:02:06:94:E6
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/be0ea913-f7a4-4d47-ba98-29e7f311c68a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3ec0::/46

    Signature Algorithm: sha256WithRSAEncryption
         98:6d:73:69:c8:e9:86:66:67:48:25:41:4a:ca:07:a5:79:c4:
         ce:51:3a:79:ad:29:d9:45:1e:24:13:ee:59:ab:d1:21:b1:72:
         d3:14:fe:eb:1a:f2:28:35:4c:1a:77:73:69:39:c8:f5:e2:bc:
         87:af:ce:80:48:fa:1d:15:39:ba:e9:19:ba:7d:38:ff:77:89:
         da:2e:49:c6:2d:10:27:ed:08:00:55:97:b9:fa:f7:f1:58:dd:
         19:db:66:73:d6:3c:b5:fc:11:ad:28:41:c8:35:87:36:c0:b6:
         ad:f0:a6:b6:52:9e:c8:20:f9:ce:68:58:2a:f4:cc:6a:0e:4a:
         4f:c0:16:77:ff:2d:ef:d4:11:b2:77:88:65:72:0d:9e:0d:05:
         fc:c1:83:36:76:41:08:f3:9b:76:f0:bd:28:76:8f:3c:79:b7:
         6e:c8:05:12:a8:f7:96:4c:a6:be:b0:73:25:78:27:74:ee:4f:
         3e:4a:59:7a:b0:75:e5:c9:ef:d7:e1:d4:83:82:20:a7:02:42:
         6a:db:68:a8:cc:1b:fa:22:fc:1e:ad:01:c5:93:94:c2:bf:92:
         57:ba:c6:88:0b:05:29:e9:00:19:c6:3d:3a:d5:e1:95:4e:8c:
         a5:cc:6f:3a:06:84:7c:97:23:df:dd:f0:4e:18:48:9a:31:55:
         d0:57:fc:a0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Nov 18 08:24:35 2025 by rpki-client