Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9a7f7c7d-e15c-4f8c-b566-3ca758699cec.roa
File:                     9a7f7c7d-e15c-4f8c-b566-3ca758699cec.roa (raw, json)
Hash identifier:          f5QdZBE2l46FWeCIB0cC9/yhJx/xEjdCoigFR0VxUK4=
Subject key identifier:   B3:49:7E:9D:E4:4B:FA:CA:3E:AB:FD:AE:62:05:ED:7D:46:68:4D:6A
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       54293A118AABEF47AF58F8758064D0CE6C2155E9
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9a7f7c7d-e15c-4f8c-b566-3ca758699cec.roa
Signing time:             Thu 10 Sep 2026 00:41:09 +0000
ROA not before:           Thu 10 Sep 2026 00:41:09 +0000
ROA not after:            Wed 09 Dec 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1007::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:29:3a:11:8a:ab:ef:47:af:58:f8:75:80:64:d0:ce:6c:21:55:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Sep 10 00:41:09 2026 GMT
            Not After : Dec  9 23:59:59 2026 GMT
        Subject: serialNumber=62ed188e0d0e2a93dc7042d8fd6116f43377563089f6b77eebe6cfd08d883e5d, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:0f:17:f1:16:b8:ff:61:be:a2:9a:d4:45:f2:
                    c6:dc:bf:fb:99:e0:bf:e6:44:b0:14:b4:20:dc:5f:
                    60:98:38:da:c2:43:73:6b:50:fb:ff:72:e4:c0:c5:
                    23:42:bb:19:c8:70:31:64:35:f7:56:c2:fd:b6:8d:
                    4a:c9:01:42:11:35:4e:be:8c:98:14:16:6c:09:d2:
                    b0:63:4c:73:fb:71:05:96:e4:26:a7:44:32:83:be:
                    e2:d3:84:0e:c4:0a:47:7f:f5:5c:0f:d7:2b:6a:26:
                    56:38:17:33:48:6b:b0:7c:21:dd:70:9f:6e:7b:c2:
                    13:57:7c:1a:86:12:bf:ca:76:45:56:37:f7:27:2b:
                    31:96:9f:d4:f6:91:93:8a:c6:fa:dc:a5:1f:3b:b6:
                    55:2a:d1:7e:36:5c:a9:14:25:1a:5e:04:9f:79:f2:
                    44:62:e0:9e:ec:20:44:29:71:c9:29:29:30:7b:78:
                    0d:70:96:e2:99:46:58:c1:9d:8b:84:63:4a:4d:bf:
                    f7:1a:d4:d8:fa:42:58:99:0c:c4:5b:a9:b5:fc:77:
                    32:7f:86:10:4d:57:29:0d:8b:b7:fd:d9:14:8a:c3:
                    46:46:5c:b8:b8:34:71:1c:41:e7:b6:d1:d5:69:9c:
                    ba:fb:28:a2:87:b7:6a:8f:6d:9a:32:d3:85:09:2b:
                    ea:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:49:7E:9D:E4:4B:FA:CA:3E:AB:FD:AE:62:05:ED:7D:46:68:4D:6A
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9a7f7c7d-e15c-4f8c-b566-3ca758699cec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1007::/48

    Signature Algorithm: sha256WithRSAEncryption
         32:2e:fa:3d:c6:8f:91:22:b3:40:10:f9:88:03:8f:32:49:bd:
         8c:20:17:18:a6:45:52:44:94:44:ac:c8:56:f0:db:1d:fd:ff:
         d5:6b:9f:01:3b:13:9b:5b:08:e3:7e:0b:da:cf:e9:72:00:c9:
         bb:ce:26:af:5a:c0:48:c3:fc:da:59:6c:31:d6:b3:f3:00:90:
         ba:44:03:dd:a5:72:42:4c:1c:ba:bf:46:6e:db:fd:27:f3:e1:
         66:03:ac:b6:8e:96:78:56:d5:98:43:fb:81:fa:6d:5e:f4:7d:
         33:27:66:aa:5c:60:e9:9e:f1:44:6a:d7:57:c4:94:e3:3d:15:
         f7:3a:35:68:60:fb:71:e7:97:35:4a:4f:82:32:8a:40:5a:43:
         99:a3:7d:41:b6:cd:de:4f:e2:4a:0f:5c:0d:24:79:9e:03:1e:
         27:10:e6:c5:92:4e:83:57:3b:d7:d2:cd:29:6c:81:cd:ec:e3:
         bf:f6:53:f4:86:e8:56:14:bf:00:6c:7b:f8:c1:39:dd:77:49:
         59:9e:76:b8:9a:36:6b:a8:cf:55:22:88:5f:9f:a5:19:70:79:
         89:6c:f4:89:dd:7d:d2:84:4f:25:1c:58:d6:a3:ee:e4:e5:64:
         8b:70:25:45:2b:06:61:1d:a6:f6:9f:d7:e9:96:e8:54:85:8a:
         b4:32:f0:9e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Sep 21 02:46:32 2026 by rpki-client