Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/eee842ff-7274-4b3b-98b9-4e0009ea8c69.roa
File:                     eee842ff-7274-4b3b-98b9-4e0009ea8c69.roa (raw, json)
Hash identifier:          JHmZC7w3f/jBikCA6RY8VYCd5shyBYGEwunBe6BD/Cw=
Subject key identifier:   DB:F7:93:75:FE:14:73:D7:B2:62:1C:A8:7D:67:F7:5D:73:6A:7A:27
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       0B068FE3C939FBF06C3DF297FB21DFACF6168D3D
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/eee842ff-7274-4b3b-98b9-4e0009ea8c69.roa
Signing time:             Wed 22 Oct 2025 00:50:12 +0000
ROA not before:           Wed 22 Oct 2025 00:50:12 +0000
ROA not after:            Wed 26 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0fb:f10b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Nov 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:06:8f:e3:c9:39:fb:f0:6c:3d:f2:97:fb:21:df:ac:f6:16:8d:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Oct 22 00:50:12 2025 GMT
            Not After : Nov 26 23:59:59 2025 GMT
        Subject: serialNumber=c11297fd5c4c54b7aec5c2fa006206f406ea256b4d6802718cfdc0ce14d72b0d, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:75:c8:a0:e0:60:e4:04:87:65:42:2b:f0:39:
                    46:11:08:fa:eb:ee:bb:58:18:c2:6e:88:1e:f4:7d:
                    79:4e:26:49:da:17:fb:54:3e:99:f2:23:83:c5:8b:
                    e9:e4:8d:ec:4a:c5:a0:46:f9:03:18:2b:84:f4:17:
                    57:60:c2:24:5f:17:3b:4e:94:82:28:83:e0:d0:f2:
                    0f:31:90:df:2b:55:d7:1a:34:6d:c3:ff:8f:a1:bd:
                    07:6a:aa:15:43:a1:fc:3a:5e:77:a4:de:ae:33:91:
                    22:bc:4e:bf:84:62:b4:1e:1f:5d:ed:2b:b7:47:d2:
                    e2:3c:e1:4b:69:e7:b7:cc:fe:6c:2a:71:6b:2c:e2:
                    60:2a:a6:bd:57:0e:1d:86:0f:96:11:b4:61:ce:d5:
                    0d:8f:f6:72:20:4a:0b:86:fa:7f:4c:34:01:4c:2d:
                    aa:50:61:68:d5:b6:1b:3f:87:a9:5f:cd:1a:e2:66:
                    6e:cd:65:67:b2:f1:fb:30:33:33:7e:ce:bd:c1:5a:
                    7a:92:38:94:4d:88:2d:d2:71:fe:5a:e8:bb:ee:ed:
                    aa:ee:2a:6c:e1:5e:5d:f6:d7:e6:95:e1:2b:62:47:
                    b1:0f:51:89:3e:78:56:28:bd:8a:f5:2c:8a:21:58:
                    3d:7e:4b:52:6a:31:a0:f3:da:df:dd:30:8c:52:36:
                    df:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:F7:93:75:FE:14:73:D7:B2:62:1C:A8:7D:67:F7:5D:73:6A:7A:27
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/eee842ff-7274-4b3b-98b9-4e0009ea8c69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0fb:f10b::/48

    Signature Algorithm: sha256WithRSAEncryption
         15:df:cd:76:29:50:b8:97:4f:8d:94:50:80:7b:8c:00:f5:ac:
         d3:56:d5:de:88:eb:01:77:a2:ce:d3:ab:ff:c3:71:2b:33:73:
         f9:d3:50:a0:c9:f1:2c:72:08:c5:ba:e0:2a:18:32:40:19:aa:
         5f:e9:94:b8:4a:7c:63:78:b6:0c:50:06:f8:21:71:85:f0:b9:
         68:11:0d:f3:1c:bc:c0:1a:0b:d1:3a:4b:6f:1b:a2:92:7a:13:
         52:f1:b6:c9:48:14:fc:37:0e:34:db:d0:07:f1:c5:43:92:0f:
         de:5c:5e:bf:a7:ee:f6:7b:95:cb:21:cd:7d:97:af:24:e9:d4:
         2b:a3:76:ed:1c:2f:66:11:07:9f:8d:c7:99:98:cc:fa:d1:52:
         02:91:67:ab:c1:19:5f:77:94:35:9c:0d:1a:22:42:2f:e0:11:
         e5:69:24:50:72:d3:cb:2f:33:41:08:e4:a6:2d:7a:04:ad:0d:
         d2:58:d2:a5:23:88:c3:33:af:a5:a0:55:5e:01:d4:6b:9c:04:
         52:3a:7b:f2:7c:85:92:81:42:96:f2:10:64:20:32:7b:3c:b7:
         f7:60:d2:5a:e3:d7:9f:94:24:e2:92:3d:75:b1:2d:c6:c6:5c:
         f9:a3:6f:64:cc:4a:84:51:2b:66:54:8a:ad:25:83:74:93:0c:
         aa:b1:3d:ee
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Nov 4 04:42:54 2025 by rpki-client