Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9f926f17-75e0-4bf7-b679-f08c7f6f5956.roa
File:                     9f926f17-75e0-4bf7-b679-f08c7f6f5956.roa (raw, json)
Hash identifier:          oRi21Gi/1vH+mjVRKlEfFIh6YbxjnAX8MmP2A9NKpQE=
Subject key identifier:   C0:7B:C9:DB:04:C4:07:C6:D8:6D:03:2E:97:C7:50:20:3D:4A:1E:23
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       245F0D8B3A3A2A7036682815E40D0B2E529A2FAC
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9f926f17-75e0-4bf7-b679-f08c7f6f5956.roa
Signing time:             Thu 10 Sep 2026 01:11:18 +0000
ROA not before:           Thu 10 Sep 2026 01:11:18 +0000
ROA not after:            Wed 09 Dec 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:103a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:5f:0d:8b:3a:3a:2a:70:36:68:28:15:e4:0d:0b:2e:52:9a:2f:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Sep 10 01:11:18 2026 GMT
            Not After : Dec  9 23:59:59 2026 GMT
        Subject: serialNumber=3ecf3bf885df223d57ed987bceaa08e4f94b7bb2d2f4ddf5009ce748422619bd, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:6f:c4:de:c1:1e:77:a9:6a:fd:21:64:aa:c6:
                    e7:71:c4:bb:06:78:c5:89:a2:6d:7b:67:ab:2c:06:
                    62:c9:a8:b7:02:95:aa:60:f6:6f:9d:6e:04:a6:60:
                    4e:27:0d:8f:6f:b6:e4:44:7e:7c:8e:54:89:f0:a1:
                    1e:0b:3a:b5:78:39:bd:ea:ec:1d:0b:fd:c3:b5:de:
                    6b:9d:da:cb:ff:87:2b:80:b6:a0:2f:eb:12:83:05:
                    57:0f:61:ca:88:b5:91:f6:49:45:3e:2c:24:01:56:
                    62:08:19:3b:3c:00:dc:8f:61:4b:ae:07:a9:3f:6f:
                    f6:59:02:02:23:ce:7e:37:c9:81:8e:3c:c8:d6:f1:
                    f0:7f:25:cb:e2:56:4f:68:0f:e1:10:c4:5a:e9:ed:
                    8a:85:a1:a1:e0:56:a6:52:4b:0a:38:85:03:d0:7b:
                    46:4a:2a:a9:13:09:ac:5f:d3:12:af:7f:fd:af:d0:
                    ae:2f:a3:de:45:f5:88:79:09:27:b7:47:c7:e8:7e:
                    83:81:88:4f:11:a7:cf:51:96:be:3c:29:6d:0c:12:
                    fe:3a:ec:95:b6:e8:ee:42:a4:41:6f:23:44:4f:9e:
                    82:e3:85:63:ae:f3:77:6a:f1:e3:c1:15:b1:02:6e:
                    02:1b:f0:6a:1a:94:0a:f7:dd:8b:98:72:0e:03:6e:
                    da:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:7B:C9:DB:04:C4:07:C6:D8:6D:03:2E:97:C7:50:20:3D:4A:1E:23
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9f926f17-75e0-4bf7-b679-f08c7f6f5956.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:103a::/48

    Signature Algorithm: sha256WithRSAEncryption
         7a:7e:cf:17:ff:9c:c8:c0:e0:8e:6a:9f:23:80:08:24:8d:b3:
         72:2c:e6:d0:e1:2b:e1:cd:7e:77:90:50:a0:7c:20:6f:4e:4b:
         dd:eb:4e:33:cc:58:fe:88:61:2c:3f:67:35:df:ea:65:d5:01:
         9a:14:54:b1:75:97:b4:74:29:6c:bc:dc:0a:a3:e0:83:33:61:
         3d:32:8e:79:f0:05:be:31:39:11:6b:19:c4:40:3e:42:d1:a1:
         e5:69:8b:cf:ea:ef:1c:4c:31:a6:64:24:cd:e0:7f:68:fe:e7:
         8e:f4:af:9f:58:ed:3d:f1:83:89:b8:f6:08:b7:89:fe:a0:e8:
         34:81:ca:5b:1c:1e:ea:3b:b3:99:d0:65:8a:fc:4e:df:6c:aa:
         59:0f:cd:48:31:86:45:09:6e:d6:21:1e:25:3b:eb:09:69:bb:
         87:a7:cd:26:33:06:e1:f9:00:fb:f3:6b:56:4c:8e:42:e5:37:
         78:f4:c1:98:21:79:6c:92:6e:a6:51:e1:f0:6c:3b:6a:84:cb:
         46:19:28:96:69:96:20:5b:e5:7c:32:73:28:5d:e6:0a:ce:f0:
         fb:35:35:4c:89:32:30:69:22:a1:07:91:0a:c7:36:c5:bb:09:
         92:7c:13:94:a8:25:0c:3a:01:a8:77:9b:cb:76:4a:fe:14:15:
         9f:73:a4:3e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Sep 22 00:28:06 2026 by rpki-client