Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1067c131-c04c-487f-a27a-80bf21e9a598.roa
File:                     1067c131-c04c-487f-a27a-80bf21e9a598.roa (raw, json)
Hash identifier:          BfORGcoaLJVyhqYRljD2BgDrF22oWaO6AXlOaZRtUdM=
Subject key identifier:   2B:64:C0:FA:C1:65:F8:30:18:68:33:3E:31:97:CF:6C:F0:61:09:5B
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       30DB1820D01267F0EE4FA3A59F11FEB2BA2A4323
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1067c131-c04c-487f-a27a-80bf21e9a598.roa
Signing time:             Thu 10 Sep 2026 00:30:45 +0000
ROA not before:           Thu 10 Sep 2026 00:30:45 +0000
ROA not after:            Wed 09 Dec 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:11cc::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:db:18:20:d0:12:67:f0:ee:4f:a3:a5:9f:11:fe:b2:ba:2a:43:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Sep 10 00:30:45 2026 GMT
            Not After : Dec  9 23:59:59 2026 GMT
        Subject: serialNumber=03c07cdb7c87cae0aca47187452627ba9ba40bb0c61aa0512ac54925ed0b2eca, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:51:fc:0a:9d:52:e7:0f:26:2f:f8:48:f4:e7:
                    46:df:79:15:04:af:54:84:aa:4f:43:ef:fc:28:f7:
                    7f:69:8e:78:29:5a:cd:89:29:d0:3f:a7:7c:42:a4:
                    59:77:58:cd:c7:86:34:70:f9:64:8b:3a:bf:24:e5:
                    78:8c:97:0d:c0:60:8d:49:41:3a:66:70:eb:5d:25:
                    8f:a6:93:45:ed:7c:35:f6:58:4f:ad:99:f1:09:3d:
                    78:fb:32:f7:29:cd:db:5a:db:c8:7c:40:ee:40:ee:
                    bd:a1:77:a4:15:af:29:57:e4:db:fb:cd:52:7a:df:
                    08:7f:1c:13:0a:45:eb:e4:3c:85:94:45:bf:2d:40:
                    69:27:2e:a9:78:27:f3:e9:a5:4e:0e:61:33:ce:5b:
                    bf:2a:02:7c:36:64:e2:99:fe:16:dc:7a:99:72:90:
                    e8:02:6c:db:17:b9:4a:16:29:0d:51:d5:1e:5e:ed:
                    b9:a1:2b:e0:5e:7f:10:db:f1:11:54:6c:a9:e0:23:
                    db:ee:d7:e2:97:8b:5f:5b:7b:1a:4a:0d:cf:51:79:
                    0f:6a:fc:52:63:45:27:e8:05:09:b3:75:d6:4d:6b:
                    f7:9b:4c:25:0e:cc:ce:14:b0:0c:f1:60:c9:fa:52:
                    a8:c5:bb:6e:ff:fd:a2:3f:6f:67:09:e0:66:3d:17:
                    09:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:64:C0:FA:C1:65:F8:30:18:68:33:3E:31:97:CF:6C:F0:61:09:5B
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1067c131-c04c-487f-a27a-80bf21e9a598.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:11cc::/48

    Signature Algorithm: sha256WithRSAEncryption
         bb:f1:dd:96:f5:d5:30:8f:1f:ea:9c:84:74:4e:59:9d:e8:e4:
         89:79:60:4a:0b:83:98:70:bd:d4:92:ec:c2:9e:7d:00:34:8b:
         25:a2:39:b2:aa:15:5e:f1:55:d7:44:1e:98:47:2b:04:48:f3:
         1b:d4:32:f8:23:b4:c2:b8:c9:54:1f:57:db:e8:be:77:93:79:
         cf:17:19:c2:ce:fc:a3:94:31:35:37:93:68:fd:ec:14:b7:08:
         6c:2b:a6:2b:9d:a5:66:91:46:e8:48:65:84:14:ce:21:6a:c0:
         4f:40:89:86:3f:ef:e5:ec:d9:cb:5a:2f:77:3b:d2:7b:23:b9:
         be:d0:f7:aa:c6:c9:60:36:33:cc:0c:cd:22:df:54:73:89:02:
         de:dd:d3:60:a5:dc:59:42:e7:3a:22:6a:7e:12:23:8f:c3:c8:
         45:80:7f:76:be:c6:3d:6f:bb:73:ad:d9:9b:67:07:9a:13:dc:
         e5:9b:c0:7f:12:c8:78:0c:d0:5c:8f:a3:fe:c5:84:23:dd:45:
         68:cc:1d:99:08:0a:d1:59:c3:21:4f:06:7a:dc:b5:eb:20:c3:
         c9:be:62:c3:ad:ed:e0:0a:b4:32:67:53:2f:86:90:9f:b9:c6:
         96:4e:a2:62:74:54:12:55:8f:b2:5b:31:f5:f4:e2:5c:25:82:
         c8:e9:2f:1f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Sep 21 10:24:31 2026 by rpki-client