Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1b086a8c-75d8-4650-9233-d61774976671.roa
File:                     1b086a8c-75d8-4650-9233-d61774976671.roa (raw, json)
Hash identifier:          jfUaq4NFq/daqOZo3KaH+lppFyQSZUlMdytAaGVBImA=
Subject key identifier:   85:3A:98:F5:31:15:48:53:F6:AF:4D:52:8D:D1:A9:33:7D:5E:E0:4F
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       175127DA12208DACDD76C3ED2FE98AADA3AAC31E
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1b086a8c-75d8-4650-9233-d61774976671.roa
Signing time:             Thu 10 Sep 2026 01:50:33 +0000
ROA not before:           Thu 10 Sep 2026 01:50:33 +0000
ROA not after:            Wed 09 Dec 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1e28::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:51:27:da:12:20:8d:ac:dd:76:c3:ed:2f:e9:8a:ad:a3:aa:c3:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Sep 10 01:50:33 2026 GMT
            Not After : Dec  9 23:59:59 2026 GMT
        Subject: serialNumber=4d5a4878b881701c2c6e62690eca2ff1eb29168ac4f399e827e9d106064c37d4, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d4:71:0c:eb:3e:c5:01:39:00:6f:61:c0:af:
                    3f:7c:e2:c9:8f:e1:c2:9c:e6:7d:41:1d:f7:96:44:
                    72:4a:12:14:0b:9e:e6:c2:43:ea:42:48:52:a0:f3:
                    24:80:39:74:4d:d8:51:1d:f7:25:bd:01:a5:a2:17:
                    f4:b2:38:eb:88:ab:52:1c:87:47:90:d5:01:6e:95:
                    bd:e7:91:ad:10:66:b9:70:e3:af:9c:c1:f4:c1:b4:
                    c0:08:26:da:cd:84:34:f9:67:80:43:82:69:50:bf:
                    09:66:56:b5:78:f9:88:39:5d:89:cb:86:b4:4b:48:
                    d4:5b:3f:96:4b:db:47:e5:92:86:fa:a8:62:c7:a0:
                    ee:f9:01:b8:91:fa:c6:b0:f2:78:24:4e:1d:1c:c6:
                    0b:15:cf:b7:bf:1b:18:78:6e:f9:a1:05:ee:f9:47:
                    d9:12:22:59:ae:ae:d6:1c:92:0a:d4:39:70:a5:70:
                    bb:bf:79:3a:ef:02:92:93:39:90:39:c1:f2:15:b9:
                    4c:0d:d0:26:ff:0a:dd:43:b9:88:de:d5:cf:be:93:
                    49:18:19:f6:fb:e9:5c:1a:73:ba:16:06:05:5b:f6:
                    ad:90:d9:40:55:67:3c:9b:b0:eb:fb:9a:11:9b:af:
                    9d:8d:75:44:e5:df:5c:10:d6:3d:bb:72:46:34:8f:
                    f7:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:3A:98:F5:31:15:48:53:F6:AF:4D:52:8D:D1:A9:33:7D:5E:E0:4F
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1b086a8c-75d8-4650-9233-d61774976671.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1e28::/48

    Signature Algorithm: sha256WithRSAEncryption
         b0:18:6f:e5:ed:11:41:6a:09:6f:67:d3:35:3a:38:5d:ee:f4:
         18:d8:2a:d4:82:56:47:7e:ab:04:61:da:f5:1c:20:38:45:b4:
         e9:fd:cc:e3:b4:1e:fb:06:b2:64:ce:dd:48:38:93:9b:7d:5c:
         1c:c8:b5:3f:b2:9a:1c:69:c6:2e:42:fe:bf:e5:d0:d3:83:b9:
         86:a4:3f:17:15:86:1b:ac:0e:0f:96:10:c5:48:81:fa:6a:0e:
         7f:f3:55:09:cb:84:dd:fd:6e:87:de:8f:83:fd:30:a4:47:7b:
         5a:ae:f0:6c:d2:be:5c:a5:be:93:64:8c:22:db:3d:cf:8d:a7:
         80:a0:93:f7:d3:7d:fa:d0:37:35:d7:67:a1:a4:1e:bf:34:56:
         82:c1:89:c4:26:99:00:09:23:e4:00:e5:fd:cb:24:55:f1:18:
         dc:5f:89:86:9c:9d:62:8d:f9:23:6d:e2:16:3a:95:c1:fa:25:
         ba:71:e0:f8:53:55:e4:b3:12:23:ce:d5:19:56:dc:1b:02:8b:
         f3:18:ab:b4:ea:73:54:81:e8:19:24:33:8b:3f:16:fb:0d:56:
         46:51:de:2f:1a:1e:91:67:5f:dd:4e:63:b3:44:ee:83:c9:85:
         63:09:dd:bb:67:b5:11:2c:03:b3:33:a5:1f:da:96:5a:8a:42:
         40:be:ce:1d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Sep 21 17:45:43 2026 by rpki-client