Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/16c34a5e-d7a7-442d-a6ab-c3180014e5f9.roa
File:                     16c34a5e-d7a7-442d-a6ab-c3180014e5f9.roa (raw, json)
Hash identifier:          sRst6MdhduWRbxACozsWq8JhJTwd/H/dFHXrLHhWTYs=
Subject key identifier:   5A:2E:82:D0:7B:2A:46:74:2C:58:3D:8E:C9:95:98:03:D9:02:0B:D5
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       0B671842C8C05977F423D69216B372842313480A
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/16c34a5e-d7a7-442d-a6ab-c3180014e5f9.roa
Signing time:             Thu 10 Sep 2026 00:30:11 +0000
ROA not before:           Thu 10 Sep 2026 00:30:11 +0000
ROA not after:            Wed 09 Dec 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:120b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:67:18:42:c8:c0:59:77:f4:23:d6:92:16:b3:72:84:23:13:48:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Sep 10 00:30:11 2026 GMT
            Not After : Dec  9 23:59:59 2026 GMT
        Subject: serialNumber=d4eabcbfa9b667866cef9813da8bf703de40f79275e284e2babaed6f81c4c539, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b7:14:09:63:07:3e:78:b8:07:16:31:d7:f2:
                    ea:98:a0:a1:1e:4d:d3:f6:89:8c:e0:80:56:e7:ac:
                    e3:c7:e4:31:0c:fb:03:8d:89:f4:85:fc:08:a2:08:
                    30:83:f8:a3:61:ba:a3:63:72:1f:5a:f7:8c:9f:61:
                    a1:af:9b:0a:d3:4c:5e:05:f4:04:82:75:27:34:cb:
                    cf:ca:85:29:19:4d:b5:79:56:64:95:18:31:cb:52:
                    81:34:85:7a:58:90:c9:fa:45:b9:69:02:e6:86:f5:
                    6b:78:68:85:43:f3:7b:3a:94:d2:7b:10:ed:41:09:
                    b0:0f:92:fb:1c:6e:e1:9a:14:78:71:05:7f:36:69:
                    85:7e:bc:41:cf:5e:08:50:5e:a5:0d:4b:0f:7f:3d:
                    40:6c:52:3a:3a:81:89:8d:8c:b9:d3:cb:9a:ce:96:
                    df:e3:d1:7b:23:fe:35:a3:17:8f:19:47:e6:7c:3c:
                    61:f5:56:e9:ef:5c:ff:15:f3:0c:d5:b2:f9:e4:7a:
                    1e:ca:cd:a2:dd:f9:6f:f0:7b:06:e0:e7:bf:93:ba:
                    73:e3:74:55:0b:6e:4c:6f:1a:90:99:df:67:a2:7b:
                    f7:3b:1b:a9:4f:89:7d:5a:3b:af:a5:90:5f:1f:cd:
                    1f:2a:cb:bd:8b:cf:f5:4b:f2:4f:6e:85:7a:69:3e:
                    29:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:2E:82:D0:7B:2A:46:74:2C:58:3D:8E:C9:95:98:03:D9:02:0B:D5
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/16c34a5e-d7a7-442d-a6ab-c3180014e5f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:120b::/48

    Signature Algorithm: sha256WithRSAEncryption
         c2:34:67:37:91:7b:38:09:ff:13:41:d1:9a:c1:ef:46:91:6f:
         63:36:50:39:6f:0a:91:37:75:62:74:e2:3a:67:cb:cc:78:14:
         a2:5d:7e:ed:89:3b:d9:58:f3:53:09:6f:ec:ec:94:28:ad:3a:
         96:be:fd:59:84:cf:80:c8:e1:9f:68:bc:d1:64:77:0b:ba:0f:
         84:e6:17:0a:ed:73:7c:62:98:04:7a:d0:db:80:30:b5:c0:5e:
         a4:fb:4d:18:a1:df:70:30:58:a6:d4:4e:48:34:81:f7:06:13:
         a6:f0:69:a8:9a:52:24:59:23:dd:17:27:b0:5e:9c:fa:45:9c:
         36:2d:42:4a:3c:2a:b7:0a:b9:9b:90:03:98:9f:09:75:f9:91:
         4a:4d:f1:29:8d:25:ef:e6:2b:d5:7c:27:7c:6e:e0:1f:ee:6e:
         a5:24:4c:bb:9d:dd:f1:00:ee:82:81:e3:79:63:ff:af:7a:4f:
         fe:e0:08:3e:d2:1b:51:b7:6a:9f:cc:27:df:b2:aa:08:c3:c0:
         a5:fb:29:bd:11:5f:2b:c8:aa:08:71:db:3f:87:25:87:c1:60:
         4b:7a:98:e4:a0:e1:ad:f6:8f:90:5d:c5:65:98:b6:12:b4:b6:
         7f:50:dd:5e:9e:23:5a:3c:67:b8:25:a9:7f:d2:dc:da:d9:26:
         6f:63:e7:a1
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Sep 21 09:04:38 2026 by rpki-client