Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9677e1b8-20cb-408d-97fd-616a99e64661.roa
File:                     9677e1b8-20cb-408d-97fd-616a99e64661.roa (raw, json)
Hash identifier:          bKa+oviD6KaDSicyCe3ouhmfCXo6bc3q1lAKFL5Aj3s=
Subject key identifier:   FD:8E:58:51:28:13:E7:A3:77:DE:3E:06:7F:EF:24:0D:CA:F7:34:41
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       28ACD03D4B56A8588F598E236671001A436D950C
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9677e1b8-20cb-408d-97fd-616a99e64661.roa
Signing time:             Thu 10 Sep 2026 01:30:38 +0000
ROA not before:           Thu 10 Sep 2026 01:30:38 +0000
ROA not after:            Wed 09 Dec 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:10f3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:ac:d0:3d:4b:56:a8:58:8f:59:8e:23:66:71:00:1a:43:6d:95:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Sep 10 01:30:38 2026 GMT
            Not After : Dec  9 23:59:59 2026 GMT
        Subject: serialNumber=b9d830ffa3044242b0b5c5cf8e56c55c9384c6f1c5d7547c4aeb42ce65da9ea1, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6b:81:80:f4:94:38:b1:f5:ad:8c:df:8d:3d:
                    4c:22:c2:c0:35:0d:a4:ef:88:9c:25:15:e3:05:54:
                    c4:90:d1:2f:63:f6:fa:30:18:b4:de:be:ce:8f:a9:
                    ba:74:36:56:47:30:4c:1a:51:fa:a0:43:c6:31:99:
                    f7:4b:60:a2:5b:94:26:af:bd:2d:37:e1:39:1f:96:
                    80:3b:07:d2:bc:50:3f:4c:c2:69:f6:13:37:e8:1e:
                    20:a7:63:88:ba:86:e5:57:c4:b8:ee:74:0d:e2:67:
                    55:37:e1:e9:ef:15:e2:c0:cb:1d:7c:fb:88:61:3b:
                    6c:b7:1a:89:c9:34:49:8b:3e:37:83:9e:22:3d:7b:
                    44:1e:46:9a:6c:61:92:5d:7b:f7:7d:c6:60:97:6b:
                    a0:25:63:5d:99:4b:2e:6e:56:95:17:b3:6e:47:e9:
                    8f:5a:2f:36:bf:37:fd:45:46:ca:37:4e:28:bd:ea:
                    d6:c6:97:0f:21:65:cb:be:ac:f3:20:b2:e7:3f:55:
                    99:b1:5b:53:c8:4c:dd:8e:90:4b:40:9d:3e:c4:d4:
                    23:ce:49:76:a6:ab:df:27:11:59:c2:dc:29:3f:2e:
                    d1:f4:06:2f:92:2f:71:0b:5c:28:5c:69:65:28:89:
                    28:65:63:a5:e9:32:b6:a3:de:cb:4b:e7:6d:d9:11:
                    a0:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:8E:58:51:28:13:E7:A3:77:DE:3E:06:7F:EF:24:0D:CA:F7:34:41
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9677e1b8-20cb-408d-97fd-616a99e64661.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:10f3::/48

    Signature Algorithm: sha256WithRSAEncryption
         49:f9:91:29:15:84:63:21:6a:a2:07:83:25:b1:de:f6:c9:37:
         a6:b6:df:6e:e6:ea:51:cf:66:a1:e7:58:bf:9e:2d:b7:3f:6a:
         36:b7:78:0f:a9:b9:31:32:b5:71:11:b8:7b:56:0a:6f:ac:f0:
         ee:b7:39:9d:2c:07:66:41:3f:38:33:05:6c:aa:e9:f3:1d:50:
         33:d3:66:1d:e7:42:98:c7:74:9d:67:de:4e:4a:46:57:82:38:
         4f:da:07:81:4b:04:3b:cd:02:e0:6b:21:c3:db:55:d0:d7:98:
         ab:20:47:d6:ea:da:28:c7:b6:59:4e:4f:84:75:17:48:db:a8:
         d2:a4:e5:ed:9a:22:f3:6f:08:95:59:17:fe:4f:db:68:b9:97:
         c9:a9:39:73:ba:2d:5a:d3:26:84:d1:71:a1:1c:1a:c5:f7:c5:
         3e:46:9e:4b:03:1f:2d:e1:03:48:eb:b0:ba:03:4f:af:de:94:
         9c:a7:4a:c6:4b:16:c1:81:ee:d3:36:95:db:31:cc:1d:82:a5:
         b6:32:1c:7f:67:55:97:e8:20:06:2b:54:5d:1f:9a:17:fc:fd:
         4d:c7:cb:f6:54:bd:64:22:7d:95:ef:2a:29:de:ad:47:95:8e:
         fa:7c:d8:34:a0:58:d7:83:69:f5:a6:ca:f7:09:1a:db:61:07:
         19:31:5d:62
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUKKzQPUtWqFiPWY4jZnEAGkNtlQwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwOTEwMDEzMDM4WhcNMjYxMjA5MjM1OTU5
WjB6MUkwRwYDVQQFE0BiOWQ4MzBmZmEzMDQ0MjQyYjBiNWM1Y2Y4ZTU2YzU1Yzkz
ODRjNmYxYzVkNzU0N2M0YWViNDJjZTY1ZGE5ZWExMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCwa4GA9JQ4sfWtjN+NPUwiwsA1DaTviJwlFeMFVMSQ0S9j
9vowGLTevs6Pqbp0NlZHMEwaUfqgQ8YxmfdLYKJblCavvS034TkfloA7B9K8UD9M
wmn2EzfoHiCnY4i6huVXxLjudA3iZ1U34envFeLAyx18+4hhO2y3GonJNEmLPjeD
niI9e0QeRppsYZJde/d9xmCXa6AlY12ZSy5uVpUXs25H6Y9aLza/N/1FRso3Tii9
6tbGlw8hZcu+rPMgsuc/VZmxW1PITN2OkEtAnT7E1CPOSXamq98nEVnC3Ck/LtH0
Bi+SL3ELXChcaWUoiShlY6XpMraj3stL523ZEaBRAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQU/Y5YUSgT56N33j4Gf+8kDcr3NEEwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1Lzk2NzdlMWI4LTIwY2ItNDA4ZC05N2ZkLTYxNmE5OWU2NDY2MS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAJAAEPMwDQYJKoZIhvcNAQELBQADggEBAEn5kSkVhGMhaqIHgyWx3vbJ
N6a2327m6lHPZqHnWL+eLbc/aja3eA+puTEytXERuHtWCm+s8O63OZ0sB2ZBPzgz
BWyq6fMdUDPTZh3nQpjHdJ1n3k5KRleCOE/aB4FLBDvNAuBrIcPbVdDXmKsgR9bq
2ijHtllOT4R1F0jbqNKk5e2aIvNvCJVZF/5P22i5l8mpOXO6LVrTJoTRcaEcGsX3
xT5GnksDHy3hA0jrsLoDT6/elJynSsZLFsGB7tM2ldsxzB2CpbYyHH9nVZfoIAYr
VF0fmhf8/U3Hy/ZUvWQifZXvKinerUeVjvp82DSgWNeDafWmyvcJGtthBxkxXWI=
-----END CERTIFICATE-----
Generated at Mon Sep 21 17:38:59 2026 by rpki-client