Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2d5d929f-09ed-43cc-8a5b-786fac2e8a51.roa
File:                     2d5d929f-09ed-43cc-8a5b-786fac2e8a51.roa (raw, json)
Hash identifier:          0BsgZVlakb6CHQXbeeBD9wscqQ8mKp4ErzT6FGoEsHo=
Subject key identifier:   15:BC:8C:74:D6:7F:88:C7:A0:8B:4B:4E:A2:85:53:F9:2A:DB:5C:E7
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       122CA231B4989B1AFE8E58CC4EE3FEC400EB6594
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2d5d929f-09ed-43cc-8a5b-786fac2e8a51.roa
Signing time:             Thu 10 Sep 2026 02:31:00 +0000
ROA not before:           Thu 10 Sep 2026 02:31:00 +0000
ROA not after:            Wed 09 Dec 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:10c1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:2c:a2:31:b4:98:9b:1a:fe:8e:58:cc:4e:e3:fe:c4:00:eb:65:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Sep 10 02:31:00 2026 GMT
            Not After : Dec  9 23:59:59 2026 GMT
        Subject: serialNumber=7198bc6cdea948c07b44e61ecb3c00f3fd37f65d6ed00a0f19f8f379ca31416c, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:28:64:a6:cc:3f:e7:e9:ad:1b:b0:69:ea:40:
                    6a:7a:52:70:db:24:0e:21:9f:3a:cb:b5:8d:b0:27:
                    f3:0d:6f:2e:5c:40:94:64:fd:8a:93:9b:e4:b6:b5:
                    e9:ca:87:75:8e:80:ee:26:f3:a8:e0:d8:f4:ae:c7:
                    b7:f0:70:b0:91:f7:c8:33:00:54:47:8a:6f:cd:3a:
                    9e:73:84:0a:58:82:29:41:10:75:ab:9f:72:58:7f:
                    36:32:13:b7:5f:e9:c1:61:59:46:7f:c6:6f:cf:7c:
                    d1:79:2f:1d:82:06:55:ea:e1:6e:5c:9c:be:39:25:
                    2b:21:7d:5c:4e:17:a7:bd:cd:48:e3:65:7b:e5:97:
                    5b:0e:ae:32:5a:19:93:51:1a:63:53:76:69:18:48:
                    dc:86:7b:07:04:fa:f1:30:e4:ba:19:26:bc:4f:b0:
                    8d:97:48:36:41:5f:52:b2:ba:be:0f:82:77:40:79:
                    2b:40:55:d2:40:8b:54:1d:13:18:42:de:ef:c8:d6:
                    e2:94:06:fa:91:f6:bd:88:b0:27:48:cb:14:04:52:
                    a3:f4:f6:87:1c:6c:ba:8b:01:eb:9e:c5:d9:03:58:
                    78:0f:9a:81:b0:9f:d8:0a:e6:7b:2d:7e:f1:3e:65:
                    d6:63:ac:56:ee:27:cc:f6:8a:49:fd:1e:b2:36:f8:
                    c1:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:BC:8C:74:D6:7F:88:C7:A0:8B:4B:4E:A2:85:53:F9:2A:DB:5C:E7
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2d5d929f-09ed-43cc-8a5b-786fac2e8a51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:10c1::/48

    Signature Algorithm: sha256WithRSAEncryption
         01:48:33:04:ec:f1:38:1b:5b:4f:ec:6a:99:67:e0:fd:09:31:
         8c:09:75:e0:6c:4a:03:d0:f2:a6:0c:33:1c:1e:10:8d:1c:74:
         e8:cd:a1:45:df:03:9b:42:61:b7:48:63:46:34:56:4c:7c:15:
         76:19:a3:f1:45:14:87:7d:8d:2e:24:d2:64:18:b9:6a:71:fb:
         05:66:6c:b6:c4:cf:33:1c:0e:28:26:dc:58:d9:4b:b5:c9:87:
         a1:71:fe:6d:53:ba:e3:aa:a6:2d:23:d7:b2:4a:fb:a6:70:64:
         64:04:6d:06:05:3b:d3:60:e9:01:60:2c:12:f0:7f:14:01:a2:
         92:25:4d:5a:ed:f9:70:e6:7c:26:93:12:bf:d3:ee:4d:bd:b1:
         95:09:af:b1:5f:c4:c4:b8:ce:ea:61:78:df:88:88:cd:b7:e8:
         a8:a5:57:57:03:b1:5f:ec:ef:e9:c4:77:99:77:4d:27:97:a7:
         28:13:e2:4a:93:64:3f:ba:aa:65:54:86:97:e3:11:b2:a6:65:
         61:8c:57:53:f4:9a:26:a8:65:4c:66:dd:72:8d:08:69:75:40:
         06:39:0e:52:f6:2d:7c:41:6e:d7:3a:fd:28:d9:0d:c8:d4:89:
         e5:2a:85:14:c7:ee:08:64:84:0a:9c:1a:c2:e3:0f:1b:0f:94:
         48:5b:12:98
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Sep 21 10:19:27 2026 by rpki-client