Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9b364cb3-bce3-4458-a4f1-4cdc7039ae21.roa
File:                     9b364cb3-bce3-4458-a4f1-4cdc7039ae21.roa (raw, json)
Hash identifier:          aWgaIZ6o72dXzdUiGXQt9v9W6mHCLvDc++XSiy775hg=
Subject key identifier:   C2:55:2E:09:BC:09:09:49:1E:9D:CF:E6:CA:D2:77:40:F9:63:5D:C6
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       06041E394C0ACE4BE1FF5AEDCADEB28280CEB2ED
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9b364cb3-bce3-4458-a4f1-4cdc7039ae21.roa
Signing time:             Thu 10 Sep 2026 00:31:15 +0000
ROA not before:           Thu 10 Sep 2026 00:31:15 +0000
ROA not after:            Wed 09 Dec 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:104b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:04:1e:39:4c:0a:ce:4b:e1:ff:5a:ed:ca:de:b2:82:80:ce:b2:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Sep 10 00:31:15 2026 GMT
            Not After : Dec  9 23:59:59 2026 GMT
        Subject: serialNumber=ce7e8320f5c903d2f16945b8b6ca6c0a549f0318ca6efefd9217e11c92fb1dda, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:fa:02:a2:3d:b3:6c:52:88:7c:36:c6:ff:54:
                    61:55:6e:cf:a1:70:bc:47:53:f0:05:5b:ca:3a:1f:
                    85:c2:99:e8:fd:41:dd:d6:28:f1:a5:cc:d7:ee:aa:
                    80:5f:a0:db:e7:eb:ad:82:b3:ae:81:49:4f:e7:54:
                    3c:82:c4:aa:de:ff:54:c3:5e:90:7c:36:01:ba:f2:
                    9f:51:82:30:5d:b2:df:04:75:0c:a8:80:f9:f4:ab:
                    83:6e:79:8a:f8:a3:70:04:ab:c3:0e:2f:7c:15:7a:
                    d9:0d:96:01:a3:dc:79:ca:c4:10:04:59:33:9b:5c:
                    f2:da:a2:6b:d8:2f:8e:cb:e4:8e:73:c7:fc:10:81:
                    37:23:80:15:c3:dd:f7:e7:49:ab:61:d5:b4:67:81:
                    90:ff:23:b0:1d:1c:8a:e0:20:ee:0f:e2:81:9e:7c:
                    55:2c:29:d0:bf:3a:03:c2:e6:c6:0b:1d:5b:bf:0e:
                    e9:07:52:d7:8c:cc:ec:a8:fd:b6:bf:fe:9a:89:ff:
                    cc:96:ee:92:9c:0c:bb:3b:e6:bc:af:e4:ec:00:10:
                    2b:27:ae:ce:63:fb:80:b8:da:78:9f:9e:b9:c6:54:
                    8a:19:56:68:0e:8b:5c:05:79:c1:e3:bf:21:ac:43:
                    e4:d1:5a:4c:a6:62:49:86:3a:85:41:8f:81:5e:5d:
                    6f:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:55:2E:09:BC:09:09:49:1E:9D:CF:E6:CA:D2:77:40:F9:63:5D:C6
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9b364cb3-bce3-4458-a4f1-4cdc7039ae21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:104b::/48

    Signature Algorithm: sha256WithRSAEncryption
         41:2b:92:f7:fe:67:79:ec:e2:28:01:cf:2a:82:f0:9d:1c:0c:
         e2:2d:d2:d5:6d:78:48:4a:58:5d:ec:42:24:d6:09:5e:c0:4a:
         5b:11:79:c8:8e:ee:29:c0:33:fc:8b:bc:db:81:ff:68:09:18:
         5b:ef:c8:ac:a1:a7:99:27:77:8b:f0:e6:a0:b3:d9:c2:70:0e:
         c3:fb:f7:2e:f4:1f:85:a8:d6:24:e1:ca:20:5b:95:eb:49:6c:
         f1:44:13:85:a2:2e:eb:10:c8:c5:57:e7:15:74:db:22:47:90:
         51:c9:d3:9b:4a:8b:5d:50:e1:5f:52:b5:38:52:81:ae:20:98:
         fe:c8:a9:94:e0:be:c1:3f:0b:11:eb:d3:aa:92:28:bc:76:58:
         57:4d:4f:c0:c2:c1:b6:87:68:b3:d3:fc:e1:51:11:6d:5b:92:
         af:da:06:40:28:00:7c:86:2d:05:65:4c:87:75:37:95:37:a4:
         bc:6c:cf:68:44:16:7c:0c:af:45:ce:ac:d3:c8:9e:78:13:c8:
         98:d8:68:bb:fa:4a:d0:0b:3f:a0:37:9f:d0:9a:08:cf:d1:a6:
         e3:99:83:4e:da:55:e4:5f:b2:73:ef:37:aa:05:08:6e:dd:18:
         28:1d:fc:aa:76:7e:a0:37:40:96:36:66:ba:15:4b:7e:b6:b8:
         e8:b6:07:6a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Sep 21 09:52:02 2026 by rpki-client