Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a40f572e-4646-4bf1-a700-88041af8c01b.roa
File:                     a40f572e-4646-4bf1-a700-88041af8c01b.roa (raw, json)
Hash identifier:          eUoYajbAtXIfxmgyex0EcMdK95Oo4guxqbs32Zg3ebU=
Subject key identifier:   3A:6F:94:74:64:87:C5:A6:78:74:58:7E:F2:6B:0A:EE:E2:9D:96:F7
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       7388476E86C8277BBDB943941560B240359E8E4D
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a40f572e-4646-4bf1-a700-88041af8c01b.roa
Signing time:             Thu 10 Sep 2026 02:10:30 +0000
ROA not before:           Thu 10 Sep 2026 02:10:30 +0000
ROA not after:            Wed 09 Dec 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1e92::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:88:47:6e:86:c8:27:7b:bd:b9:43:94:15:60:b2:40:35:9e:8e:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Sep 10 02:10:30 2026 GMT
            Not After : Dec  9 23:59:59 2026 GMT
        Subject: serialNumber=bf32e001ca89e4eece3446fd81d8c86d1c65f6508f9668b7b1c22aed2307ef0c, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:33:d5:7d:2e:75:c2:e5:63:22:b3:78:b2:26:
                    91:56:ce:a6:52:0b:f4:94:d6:28:5e:04:bd:19:f9:
                    b8:69:3b:75:38:94:1f:de:b6:af:9c:d6:9a:8d:76:
                    3b:23:ef:77:4e:79:74:a0:0e:2d:4a:96:01:8c:8a:
                    66:af:da:8d:e2:a1:a8:b3:cc:65:32:75:0f:7a:81:
                    97:16:07:0d:02:09:b0:1c:8d:db:b6:b0:0a:1d:c7:
                    c5:01:e7:ab:8c:78:81:48:91:74:df:8e:b1:f9:4a:
                    f8:ec:94:92:27:dd:14:9f:51:98:54:f4:9c:39:25:
                    ac:d2:bd:75:15:bc:64:38:53:06:2e:72:8c:ae:67:
                    92:e5:72:b7:46:29:19:87:2a:e4:cc:25:c2:3f:fa:
                    a0:cb:e0:c9:69:9e:0a:c6:56:f8:10:4a:46:40:3d:
                    81:7b:9d:9f:0f:af:90:73:2b:85:3a:47:fe:72:ee:
                    01:42:22:79:88:0e:d2:0b:ba:f7:f8:b8:30:7e:6c:
                    4e:9c:01:e5:14:50:af:df:1a:37:9f:63:4b:23:1c:
                    61:46:8b:51:fc:30:e3:5c:02:ae:c0:37:b7:3e:65:
                    89:a2:ad:d2:a7:1d:5f:e1:51:6e:30:4e:7c:21:e1:
                    a3:7f:26:af:32:af:a5:8b:89:13:37:b9:c5:dc:57:
                    5a:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:6F:94:74:64:87:C5:A6:78:74:58:7E:F2:6B:0A:EE:E2:9D:96:F7
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a40f572e-4646-4bf1-a700-88041af8c01b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1e92::/48

    Signature Algorithm: sha256WithRSAEncryption
         79:96:e1:e3:f6:bd:c0:0d:3a:75:1b:07:f0:ae:34:d0:7a:38:
         e7:99:bc:89:14:25:85:00:21:68:53:ac:57:c7:a2:25:7e:7a:
         4c:56:70:42:b2:34:67:76:68:b0:d2:bc:73:b0:2a:0f:fa:e8:
         2c:33:a5:43:9f:c7:8f:d3:50:2f:17:93:20:1a:f5:00:09:bd:
         c8:36:ea:22:ec:96:51:d6:1a:73:fe:ea:9d:e6:b1:20:f1:c8:
         d8:96:54:3e:c3:45:6d:9f:f5:8d:3f:bb:fb:30:eb:3c:f6:bb:
         45:96:0b:ff:fb:aa:72:40:a9:4c:91:cc:4c:e3:9f:4d:9c:7c:
         94:18:1e:ef:da:b7:77:10:8a:3b:1b:de:d9:0b:bd:92:3b:21:
         0b:36:77:df:4f:a0:25:8a:f6:82:58:d1:83:2c:e3:b7:36:6f:
         9c:1d:94:db:8f:d4:49:b5:2a:a2:a8:22:50:91:7a:5d:0e:dd:
         35:4a:a4:26:25:6d:e8:90:bb:cd:de:ee:40:05:c0:84:74:df:
         8a:07:37:e7:cb:3f:80:ba:9e:81:e9:b9:f6:d3:e6:64:fc:89:
         8e:71:1b:6c:cc:90:cf:41:86:a5:67:23:b5:86:3f:96:9c:ff:
         f0:cb:3a:0a:39:ba:eb:18:23:12:00:fe:ea:63:a8:ac:6f:2a:
         d0:40:fb:65
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Sep 21 01:51:26 2026 by rpki-client