Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0c977a53-fd4c-4c42-afd7-265a3e4fcffc.roa
File:                     0c977a53-fd4c-4c42-afd7-265a3e4fcffc.roa (raw, json)
Hash identifier:          D9G01qvD27HbSbWV7bU5xvG3NYEY9qmW7idaRJ1USfQ=
Subject key identifier:   43:C1:B3:82:D5:E7:A4:90:6E:59:34:56:6C:50:A0:2C:95:EC:1F:C4
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       2655A5A7602743335CCA7FE6A4E477B91D77A3A0
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0c977a53-fd4c-4c42-afd7-265a3e4fcffc.roa
Signing time:             Thu 10 Sep 2026 01:11:51 +0000
ROA not before:           Thu 10 Sep 2026 01:11:51 +0000
ROA not after:            Wed 09 Dec 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:11d4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:55:a5:a7:60:27:43:33:5c:ca:7f:e6:a4:e4:77:b9:1d:77:a3:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Sep 10 01:11:51 2026 GMT
            Not After : Dec  9 23:59:59 2026 GMT
        Subject: serialNumber=b609187d32e1febf3b24616d524d98de9eb7864bedb9cb66fd6ce569ffe0189b, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:a8:41:2f:0f:bd:f8:59:2f:9f:af:35:3a:d1:
                    7f:99:6b:5f:d5:75:c1:01:3b:b7:4d:66:cd:98:6e:
                    8d:8c:d0:db:05:a6:e8:cd:64:5c:32:c5:47:ea:ef:
                    e7:7c:ac:67:7d:e4:dd:63:97:95:90:13:93:97:e2:
                    4c:2c:d8:28:40:ab:ca:e8:15:a2:37:27:59:a6:d7:
                    d4:86:90:32:82:1f:6b:93:11:3a:a3:39:68:7b:74:
                    4b:83:8f:35:b6:c1:41:57:85:e1:cb:c1:96:5e:1f:
                    c2:3d:e2:28:d3:ee:fe:c7:18:67:97:29:aa:ca:0c:
                    de:24:d1:24:fa:ee:ce:71:08:85:7f:c0:a8:5e:a2:
                    0e:63:6c:5d:46:3e:83:c0:61:f2:fb:0c:01:7b:7d:
                    09:b3:25:b0:76:4f:ae:0d:ae:ae:b5:2b:98:b1:59:
                    1b:20:d6:2b:66:d8:6d:89:52:ca:ed:f5:c6:83:d8:
                    51:2a:d0:80:ee:cd:75:ab:36:ef:ae:c4:e5:8c:1d:
                    a2:9d:92:32:03:93:ec:1b:33:f7:42:47:7e:2f:67:
                    ef:5c:b5:b1:bf:e5:b0:bb:a1:c5:b5:73:55:6d:d0:
                    62:c5:37:af:d4:ff:45:ed:5c:2c:71:3a:8e:d4:76:
                    4f:f8:23:98:f9:75:2b:db:00:9b:65:62:4c:99:55:
                    d6:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:C1:B3:82:D5:E7:A4:90:6E:59:34:56:6C:50:A0:2C:95:EC:1F:C4
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0c977a53-fd4c-4c42-afd7-265a3e4fcffc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:11d4::/48

    Signature Algorithm: sha256WithRSAEncryption
         41:38:9d:64:18:46:ba:e8:22:48:43:f7:c4:ea:cf:78:86:19:
         f5:00:69:7a:a9:35:12:ea:56:7a:00:e5:3f:6e:f4:c6:42:f8:
         4e:1f:20:39:55:7d:09:fd:61:70:5b:db:87:a2:4e:f8:0a:2f:
         95:ce:02:20:ed:66:ce:f0:1d:f3:50:82:0c:f6:b6:37:c4:73:
         71:96:2b:0f:7a:4d:51:87:ed:06:26:6f:75:4b:70:10:40:e5:
         b5:ee:6f:c2:a8:a5:24:78:a1:ae:b5:70:6f:df:99:f9:4d:16:
         13:53:fb:0f:2c:b1:7f:f6:90:13:66:85:65:81:36:5b:d5:60:
         56:45:1f:03:a5:4b:02:b6:5e:83:3f:c2:28:51:d6:1a:7f:c1:
         23:89:db:21:c3:68:f7:7a:20:6d:5c:75:8c:ac:ae:61:d5:43:
         cf:42:2c:6a:37:03:05:6a:93:82:76:81:31:09:50:9c:dc:2f:
         30:c3:47:5d:0f:68:07:e5:33:1b:7b:6f:8b:1a:38:2c:84:85:
         9d:f3:d3:ae:30:2a:d4:bb:6a:1a:77:24:33:0e:fc:53:95:61:
         5e:61:71:6f:01:b3:e5:bf:d3:9c:4e:0a:ff:4b:1c:dd:12:fb:
         7b:2d:e6:14:02:98:3a:f1:b4:dd:39:22:ff:72:5d:c1:0e:2e:
         d3:4a:89:d9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Sep 21 02:48:47 2026 by rpki-client