Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/36d1581a-44bb-4305-9fb5-41aecaebec5f.roa
File:                     36d1581a-44bb-4305-9fb5-41aecaebec5f.roa (raw, json)
Hash identifier:          oj6raZlz9+zO19Wa+BTO3gH2hnropMe7B8duJj1QYis=
Subject key identifier:   AE:C5:6A:81:9C:84:66:94:21:4E:3B:19:DD:6F:4B:06:2E:8A:0B:47
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       6FDA65220DC548609421243FE60C62AB0A6E05DF
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/36d1581a-44bb-4305-9fb5-41aecaebec5f.roa
Signing time:             Thu 10 Sep 2026 02:10:10 +0000
ROA not before:           Thu 10 Sep 2026 02:10:10 +0000
ROA not after:            Wed 09 Dec 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1e46::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:da:65:22:0d:c5:48:60:94:21:24:3f:e6:0c:62:ab:0a:6e:05:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Sep 10 02:10:10 2026 GMT
            Not After : Dec  9 23:59:59 2026 GMT
        Subject: serialNumber=ee601104f9fb9dcbe909bf47cf1c5759734dde89b866517793f71aaf886cacfd, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:03:bc:60:16:e3:13:f1:bd:4e:46:ff:92:6c:
                    b8:71:f6:fe:07:39:70:fe:04:c0:b1:37:20:0f:6c:
                    c3:e9:1f:7f:2d:a9:dd:56:b9:82:b8:65:86:2e:2e:
                    ff:15:ca:a7:1d:80:26:ff:06:26:a8:6f:75:67:74:
                    aa:ef:e3:44:c6:0d:e4:8e:61:1e:32:52:1a:eb:75:
                    fc:d9:a2:d0:72:06:df:34:2b:66:62:1e:34:1e:1c:
                    58:c6:65:a2:75:3a:00:b7:72:8c:70:e7:ed:a4:03:
                    d8:72:0e:8e:8d:ad:6d:76:0e:49:82:6d:8a:c9:43:
                    a0:64:95:e6:81:5c:67:45:1c:ec:f8:ac:12:45:80:
                    b3:21:19:9a:93:ca:c2:4e:ba:99:42:fc:b2:74:a4:
                    b9:f7:b2:8c:e9:ba:a7:9a:2a:a4:c4:12:bd:65:5c:
                    45:70:1a:25:b9:b9:40:4c:0f:81:fa:97:2f:44:ea:
                    68:5d:d6:f6:fc:6f:29:fe:ec:16:e2:8f:5f:f8:1d:
                    d9:50:6f:e8:eb:b5:b5:f7:b0:21:d8:87:88:d4:05:
                    eb:e2:25:6f:38:55:40:91:ff:7e:1e:b4:69:58:c5:
                    30:19:17:b7:b8:e2:4a:7b:89:cc:e3:e3:93:c8:f0:
                    1e:65:26:fc:2f:b8:4c:fb:e0:5c:10:db:9c:83:be:
                    c8:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:C5:6A:81:9C:84:66:94:21:4E:3B:19:DD:6F:4B:06:2E:8A:0B:47
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/36d1581a-44bb-4305-9fb5-41aecaebec5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1e46::/48

    Signature Algorithm: sha256WithRSAEncryption
         af:af:dc:34:c0:66:df:9e:79:f1:9f:99:3f:a3:ac:96:9f:3a:
         3d:c0:f9:0d:ca:bb:b8:06:3a:a2:c0:ed:36:b6:cb:57:9c:80:
         31:9d:89:d1:06:9d:00:4a:e9:d6:a4:1e:5f:45:73:5a:ee:5a:
         65:2f:c4:4f:b1:5b:05:5c:f3:6b:93:df:5d:22:17:b7:9d:7c:
         e8:6c:9c:26:48:1f:03:ce:4a:18:0b:5f:37:59:9d:31:34:b7:
         1e:0b:d9:95:82:b1:94:20:32:65:a1:75:b4:49:9b:f0:6f:b3:
         53:a2:75:5d:a6:c3:6c:2f:3d:42:3f:33:51:5c:9a:bc:5b:71:
         18:d5:1c:0e:8e:0e:98:c9:d6:e8:66:03:ee:97:32:76:7e:6e:
         03:a2:c2:5a:60:c1:94:66:ea:28:28:1b:cf:97:9d:d5:b4:b8:
         e2:4e:2b:a9:82:ff:b4:55:6d:ad:00:14:6c:87:70:0e:41:f2:
         2c:46:d8:9a:c9:08:fe:14:0d:6f:f5:27:f6:35:db:ae:85:2c:
         bb:13:c0:43:a9:ed:2c:15:62:57:91:51:7c:ad:73:66:79:6a:
         25:7d:05:bd:98:aa:6d:31:ad:33:6f:17:46:b4:1b:23:f6:70:
         79:ba:e2:b3:5f:b8:f7:2f:da:9e:02:97:94:3a:3d:c6:c6:b7:
         ef:0e:50:5c
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUb9plIg3FSGCUISQ/5gxiqwpuBd8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwOTEwMDIxMDEwWhcNMjYxMjA5MjM1OTU5
WjB6MUkwRwYDVQQFE0BlZTYwMTEwNGY5ZmI5ZGNiZTkwOWJmNDdjZjFjNTc1OTcz
NGRkZTg5Yjg2NjUxNzc5M2Y3MWFhZjg4NmNhY2ZkMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCiA7xgFuMT8b1ORv+SbLhx9v4HOXD+BMCxNyAPbMPpH38t
qd1WuYK4ZYYuLv8VyqcdgCb/Biaob3VndKrv40TGDeSOYR4yUhrrdfzZotByBt80
K2ZiHjQeHFjGZaJ1OgC3coxw5+2kA9hyDo6NrW12DkmCbYrJQ6BkleaBXGdFHOz4
rBJFgLMhGZqTysJOuplC/LJ0pLn3sozpuqeaKqTEEr1lXEVwGiW5uUBMD4H6ly9E
6mhd1vb8byn+7Bbij1/4HdlQb+jrtbX3sCHYh4jUBeviJW84VUCR/34etGlYxTAZ
F7e44kp7iczj45PI8B5lJvwvuEz74FwQ25yDvshLAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUrsVqgZyEZpQhTjsZ3W9LBi6KC0cwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzM2ZDE1ODFhLTQ0YmItNDMwNS05ZmI1LTQxYWVjYWViZWM1Zi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAJAAHkYwDQYJKoZIhvcNAQELBQADggEBAK+v3DTAZt+eefGfmT+jrJaf
Oj3A+Q3Ku7gGOqLA7Ta2y1ecgDGdidEGnQBK6dakHl9Fc1ruWmUvxE+xWwVc82uT
310iF7edfOhsnCZIHwPOShgLXzdZnTE0tx4L2ZWCsZQgMmWhdbRJm/Bvs1OidV2m
w2wvPUI/M1FcmrxbcRjVHA6ODpjJ1uhmA+6XMnZ+bgOiwlpgwZRm6igoG8+XndW0
uOJOK6mC/7RVba0AFGyHcA5B8ixG2JrJCP4UDW/1J/Y1266FLLsTwEOp7SwVYleR
UXytc2Z5aiV9Bb2Yqm0xrTNvF0a0GyP2cHm64rNfuPcv2p4Cl5Q6PcbGt+8OUFw=
-----END CERTIFICATE-----
Generated at Mon Sep 21 16:20:19 2026 by rpki-client