Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/25a33a14-90b6-4e22-af69-59595eae4596.roa
File:                     25a33a14-90b6-4e22-af69-59595eae4596.roa (raw, json)
Hash identifier:          iJsDEw057stbrmY2VmJU2TK4qrzMi8yi1taO9YYVtaY=
Subject key identifier:   7B:DD:9A:62:34:15:30:54:12:C2:0B:9B:37:DC:B1:48:19:2E:CB:3B
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       0B606700B70951C1D378499BA434CBB6FC17BF45
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/25a33a14-90b6-4e22-af69-59595eae4596.roa
Signing time:             Thu 10 Sep 2026 01:01:25 +0000
ROA not before:           Thu 10 Sep 2026 01:01:25 +0000
ROA not after:            Wed 09 Dec 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:102c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:60:67:00:b7:09:51:c1:d3:78:49:9b:a4:34:cb:b6:fc:17:bf:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Sep 10 01:01:25 2026 GMT
            Not After : Dec  9 23:59:59 2026 GMT
        Subject: serialNumber=787678364850d42d732f8f71b226ce07ce858603d57da29f211d4dd098ac419b, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:d7:0a:61:ab:d0:5f:67:6e:06:55:8e:c8:db:
                    57:50:f8:d5:0e:56:12:87:e1:87:47:4a:fa:eb:4d:
                    33:09:44:df:52:8e:c6:cc:4b:ae:30:95:be:f9:9a:
                    b1:8a:b3:5f:d7:8b:91:e6:e9:82:6b:4e:a8:2c:56:
                    7f:9d:e2:a4:e7:51:74:9c:37:46:31:ce:b0:95:3c:
                    17:ae:fc:1a:62:9f:a5:14:f5:c7:ed:15:0a:b2:7d:
                    0c:99:0e:23:d6:45:cd:9d:70:82:72:5d:5d:3f:e6:
                    21:58:f0:bf:25:c0:a3:96:08:1b:08:8b:3a:f2:f0:
                    41:4c:4d:07:0d:1c:bf:1d:0f:73:4b:7f:58:2e:72:
                    ba:15:64:f9:03:97:55:45:74:00:db:eb:e9:65:16:
                    6e:78:c2:ff:24:a6:e6:2d:f9:ce:b5:24:2c:49:cb:
                    b2:d5:90:73:5b:f5:05:d3:44:32:48:e1:3e:9f:af:
                    f2:d5:aa:5f:ed:4b:8e:47:56:7b:24:12:78:7e:08:
                    a1:57:eb:75:25:63:fa:d2:3b:7a:52:7e:7f:a5:83:
                    f6:c4:ab:aa:e0:53:d0:12:97:50:a8:85:bd:8a:bb:
                    b0:df:fe:c5:25:40:85:f9:b1:59:4e:a0:0c:6f:be:
                    fa:1e:8d:15:e9:89:43:1d:69:57:4b:7c:05:49:ac:
                    ba:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:DD:9A:62:34:15:30:54:12:C2:0B:9B:37:DC:B1:48:19:2E:CB:3B
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/25a33a14-90b6-4e22-af69-59595eae4596.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:102c::/48

    Signature Algorithm: sha256WithRSAEncryption
         c3:40:63:e9:43:42:82:98:06:9c:d4:93:1d:d2:41:82:82:43:
         66:b1:04:3a:f8:02:14:b5:78:83:df:cd:fe:c3:44:b1:77:ff:
         e8:94:3c:bf:b7:a4:c8:25:b8:c4:d0:7c:72:20:a8:89:44:ba:
         7f:5e:a8:36:8d:0d:01:cf:df:7c:3f:fa:f3:6e:6d:d8:f1:17:
         5f:2b:8d:93:e4:94:b9:02:37:08:a0:eb:b6:f8:4f:ee:51:11:
         52:43:73:53:f8:37:46:f8:38:6e:f4:73:6a:bb:75:06:09:1a:
         4f:b1:93:9b:bc:66:33:da:63:24:b8:3d:7a:b7:6e:9e:b3:a6:
         73:36:2a:01:9f:a3:07:eb:6a:7a:66:4a:a4:17:3d:6c:3d:b5:
         31:46:c5:16:4c:d7:8f:2c:97:c7:bb:df:8a:73:83:30:ef:51:
         81:06:e5:7d:fd:83:91:af:4b:b1:9e:6c:f5:a1:83:27:8a:88:
         57:e8:db:4d:f1:57:49:0d:d7:08:a4:af:f1:7c:c5:ad:0f:e7:
         8c:af:37:73:09:ef:0c:f1:d1:57:24:d8:03:d8:dc:d2:75:4d:
         68:ce:f7:29:3c:b1:2c:14:36:c2:79:c4:ab:f6:e4:65:9a:9b:
         ae:30:5c:c6:26:a0:53:f4:63:8c:fc:ed:3d:ef:10:47:b1:12:
         51:27:05:da
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUC2BnALcJUcHTeEmbpDTLtvwXv0UwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwOTEwMDEwMTI1WhcNMjYxMjA5MjM1OTU5
WjB6MUkwRwYDVQQFE0A3ODc2NzgzNjQ4NTBkNDJkNzMyZjhmNzFiMjI2Y2UwN2Nl
ODU4NjAzZDU3ZGEyOWYyMTFkNGRkMDk4YWM0MTliMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCS1wphq9BfZ24GVY7I21dQ+NUOVhKH4YdHSvrrTTMJRN9S
jsbMS64wlb75mrGKs1/Xi5Hm6YJrTqgsVn+d4qTnUXScN0YxzrCVPBeu/Bpin6UU
9cftFQqyfQyZDiPWRc2dcIJyXV0/5iFY8L8lwKOWCBsIizry8EFMTQcNHL8dD3NL
f1gucroVZPkDl1VFdADb6+llFm54wv8kpuYt+c61JCxJy7LVkHNb9QXTRDJI4T6f
r/LVql/tS45HVnskEnh+CKFX63UlY/rSO3pSfn+lg/bEq6rgU9ASl1Cohb2Ku7Df
/sUlQIX5sVlOoAxvvvoejRXpiUMdaVdLfAVJrLqdAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUe92aYjQVMFQSwgubN9yxSBkuyzswHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzI1YTMzYTE0LTkwYjYtNGUyMi1hZjY5LTU5NTk1ZWFlNDU5Ni5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAJAAECwwDQYJKoZIhvcNAQELBQADggEBAMNAY+lDQoKYBpzUkx3SQYKC
Q2axBDr4AhS1eIPfzf7DRLF3/+iUPL+3pMgluMTQfHIgqIlEun9eqDaNDQHP33w/
+vNubdjxF18rjZPklLkCNwig67b4T+5REVJDc1P4N0b4OG70c2q7dQYJGk+xk5u8
ZjPaYyS4PXq3bp6zpnM2KgGfowfranpmSqQXPWw9tTFGxRZM148sl8e734pzgzDv
UYEG5X39g5GvS7GebPWhgyeKiFfo203xV0kN1wikr/F8xa0P54yvN3MJ7wzx0Vck
2APY3NJ1TWjO9yk8sSwUNsJ5xKv25GWam64wXMYmoFP0Y4z87T3vEEexElEnBdo=
-----END CERTIFICATE-----
Generated at Tue Sep 22 02:48:43 2026 by rpki-client