Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/92c5de90-6d64-4956-af84-869b4436f2d0.roa
File:                     92c5de90-6d64-4956-af84-869b4436f2d0.roa (raw, json)
Hash identifier:          mLf0dMdwZKy6OhlVMLOWcAtCK6dpH6j2HVrbeVWJAqc=
Subject key identifier:   B3:11:6B:0D:C2:1C:D5:FB:EC:B7:85:2B:86:F4:05:8C:E2:E9:90:79
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       15256AC1A0D961C383AB04164348C6132EAEF7F0
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/92c5de90-6d64-4956-af84-869b4436f2d0.roa
Signing time:             Thu 10 Sep 2026 00:41:38 +0000
ROA not before:           Thu 10 Sep 2026 00:41:38 +0000
ROA not after:            Wed 09 Dec 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:109c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:25:6a:c1:a0:d9:61:c3:83:ab:04:16:43:48:c6:13:2e:ae:f7:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Sep 10 00:41:38 2026 GMT
            Not After : Dec  9 23:59:59 2026 GMT
        Subject: serialNumber=f29bd4d770ceadbe9dffaeaddc4d53026273f3c02b2ecd2215514451f345c91c, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:91:d1:25:dd:f0:14:72:3e:7d:a7:e6:43:cf:
                    3e:66:6b:5d:46:06:ef:df:9f:6b:b4:ed:fb:12:43:
                    2b:31:a9:db:fa:53:a4:36:d5:38:17:fc:c9:b0:50:
                    7f:3d:fd:f9:af:e1:2a:06:8e:f3:26:ad:70:34:0d:
                    5b:c1:82:c2:98:e9:e1:25:64:d8:7f:1e:55:a7:6b:
                    37:c7:48:0c:93:c2:5f:0a:66:14:eb:33:9e:50:0d:
                    2a:1d:ad:c9:05:99:e9:56:48:c8:8f:84:03:24:b1:
                    11:43:39:cb:9c:bf:0d:8b:83:0b:7d:b1:33:36:b0:
                    be:5b:32:24:88:d5:c0:bd:1b:29:06:ad:e4:c3:9b:
                    30:34:85:11:f3:bd:ed:b6:ce:f7:41:0e:38:60:59:
                    a9:d2:76:58:8c:a3:82:c7:8d:b2:80:f8:94:d6:0d:
                    d4:ca:da:02:62:09:36:93:e6:a2:56:a2:fe:0f:60:
                    95:fd:e6:d7:91:91:21:38:ec:7f:f9:13:88:90:65:
                    04:09:b8:69:b2:6b:79:80:e6:45:72:bd:65:b6:a5:
                    81:8f:1e:50:7f:bd:82:9c:73:95:ea:37:61:d0:87:
                    4a:e4:d6:73:d3:70:56:19:28:fe:03:9a:8a:ad:64:
                    9a:a4:36:e0:73:91:c4:ca:a1:23:72:3d:43:1d:1d:
                    b0:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:11:6B:0D:C2:1C:D5:FB:EC:B7:85:2B:86:F4:05:8C:E2:E9:90:79
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/92c5de90-6d64-4956-af84-869b4436f2d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:109c::/48

    Signature Algorithm: sha256WithRSAEncryption
         29:5a:68:c4:53:66:1f:fb:9a:48:bf:ae:94:b5:1c:ef:27:ca:
         ea:ab:fc:4e:50:a5:4b:58:49:02:e8:6e:60:54:cb:9c:fb:b7:
         a2:61:2a:aa:3f:95:6c:3c:78:5c:14:4a:de:58:08:da:a6:a0:
         2d:3b:04:69:b5:67:f6:f8:e5:4a:6b:98:44:44:8f:d5:7f:cb:
         c5:ea:c0:ce:ae:2e:ad:c5:91:22:43:6f:12:2c:db:97:cf:f0:
         59:b5:17:4a:ad:78:34:f6:da:60:80:52:ce:b7:03:a9:65:14:
         ab:33:3a:47:a0:06:f4:67:41:84:69:a1:af:fa:94:43:a4:84:
         ab:76:c2:3a:72:a0:7f:84:db:50:ae:8b:79:00:30:23:7b:a9:
         16:b9:b6:e0:20:6e:79:e9:9b:6f:4f:33:19:61:5e:ba:99:d2:
         a3:ac:ef:d6:fb:d9:ff:78:a8:ac:f3:87:fc:1e:86:8a:d6:b0:
         0c:f0:d7:c3:80:31:58:61:f3:bb:41:6d:87:49:a8:e5:77:78:
         2b:86:fb:3f:ad:9c:bb:b9:7a:e6:26:e4:7d:5f:7e:0d:41:ac:
         d8:5b:6b:85:94:00:03:83:a3:0a:5d:9a:8c:5d:15:27:ac:00:
         48:6e:69:f6:97:48:68:bf:a9:d8:a5:d8:08:19:42:76:e4:e2:
         5d:20:8c:b0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Sep 21 10:40:31 2026 by rpki-client