Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/bf5dedac-cab8-4b1a-9ff9-fb29a0a3d6da.roa
File:                     bf5dedac-cab8-4b1a-9ff9-fb29a0a3d6da.roa (raw, json)
Hash identifier:          aaiV+/35sMjMxODVlASMbpOD6ZJoGsTICQjebLN65jU=
Subject key identifier:   50:3C:00:1A:C8:53:A2:CE:8C:1A:23:20:D6:5D:AC:77:ED:57:CB:D6
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       5F488E78951A0EEC1C4A817E46C4EABFE3C49277
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/bf5dedac-cab8-4b1a-9ff9-fb29a0a3d6da.roa
Signing time:             Thu 10 Sep 2026 01:00:38 +0000
ROA not before:           Thu 10 Sep 2026 01:00:38 +0000
ROA not after:            Wed 09 Dec 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:10d6::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:48:8e:78:95:1a:0e:ec:1c:4a:81:7e:46:c4:ea:bf:e3:c4:92:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Sep 10 01:00:38 2026 GMT
            Not After : Dec  9 23:59:59 2026 GMT
        Subject: serialNumber=6af7420e9d3ea25ae0f15d5cfa431917934bb2fbe37586dcdfd98f4d44ff9e5e, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:5b:53:cc:fe:0e:8c:04:07:d5:09:4d:48:48:
                    ea:89:f7:82:f9:e8:11:a9:93:6f:3a:c5:69:73:26:
                    4f:27:eb:51:ea:14:de:20:06:18:1d:39:49:fb:a3:
                    7a:7e:a1:ec:2b:70:fe:77:38:05:9e:3a:e0:d7:cb:
                    da:e8:02:ec:57:0b:1e:88:be:57:54:2b:20:f8:db:
                    30:f2:52:04:a6:23:f6:75:4c:07:e8:22:8d:90:47:
                    08:e1:ba:22:01:2f:12:13:4e:73:26:7a:31:78:32:
                    30:b9:30:ff:d1:8a:b0:ba:cb:5d:3e:35:a8:f0:07:
                    7c:3d:8c:bd:de:5a:3e:bd:20:d4:89:d4:d7:09:60:
                    cd:50:58:4f:fe:64:f0:0c:77:ee:ce:c7:7c:19:01:
                    d0:7f:e9:94:c0:9c:b9:d9:ef:f0:0c:d5:0f:bf:f1:
                    d4:46:80:0e:ff:9c:24:de:59:d3:35:10:20:9a:b0:
                    36:61:11:03:44:57:32:1c:9f:7d:e0:a8:db:5d:bf:
                    20:a0:1e:27:79:8e:8d:d6:e7:c4:ed:8f:17:ab:b7:
                    2c:bb:4f:18:91:76:27:d7:27:09:b9:64:dc:13:01:
                    6a:a1:d8:ca:7e:81:10:9e:b8:ce:d5:a6:06:e9:b7:
                    d5:d9:1e:31:db:17:28:68:ae:b5:e5:1e:ae:ad:b5:
                    0a:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:3C:00:1A:C8:53:A2:CE:8C:1A:23:20:D6:5D:AC:77:ED:57:CB:D6
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/bf5dedac-cab8-4b1a-9ff9-fb29a0a3d6da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:10d6::/48

    Signature Algorithm: sha256WithRSAEncryption
         20:35:76:7b:01:4a:54:3c:08:2a:ba:df:fe:fb:5a:04:3f:88:
         ce:39:b5:3a:64:db:9f:f0:ab:a1:eb:ad:7c:15:de:2b:a3:8b:
         a8:69:4e:3c:99:b6:ba:8a:ee:29:3c:be:ec:92:12:42:8a:02:
         c5:fd:9d:44:5f:a6:be:c8:f7:2a:a5:4c:21:d5:80:cf:ee:a6:
         22:e4:0a:ec:fa:18:70:46:f2:35:b7:c6:90:01:39:56:66:88:
         b8:a1:aa:8e:cb:a4:42:ce:dd:84:d3:6d:a9:77:0b:c9:a4:60:
         27:50:5b:d0:fc:8f:8b:91:cb:72:dd:26:4c:4e:1d:d6:8f:05:
         f6:79:0e:3e:38:a4:42:fb:e6:a3:92:8c:dd:a3:3e:1c:cb:b9:
         8f:cc:da:24:01:77:d1:68:ae:75:96:00:59:ab:3c:da:9b:de:
         dd:96:94:a3:44:3b:27:96:26:f0:3d:75:a6:d2:e3:99:1d:2d:
         55:2f:bf:a8:1e:bf:e8:0b:08:8b:85:a8:4e:82:27:5d:bf:36:
         f9:41:da:3f:61:1d:3f:2d:de:33:3b:bd:62:dd:ac:11:18:cb:
         b0:6c:45:44:a4:60:2f:14:69:d0:b8:7b:5f:68:d7:a7:cf:49:
         83:7b:a8:b1:b0:fb:f1:5d:5d:11:d2:20:4d:cd:33:4f:c2:2f:
         6f:a3:27:9a
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUX0iOeJUaDuwcSoF+RsTqv+PEkncwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwOTEwMDEwMDM4WhcNMjYxMjA5MjM1OTU5
WjB6MUkwRwYDVQQFE0A2YWY3NDIwZTlkM2VhMjVhZTBmMTVkNWNmYTQzMTkxNzkz
NGJiMmZiZTM3NTg2ZGNkZmQ5OGY0ZDQ0ZmY5ZTVlMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDxW1PM/g6MBAfVCU1ISOqJ94L56BGpk286xWlzJk8n61Hq
FN4gBhgdOUn7o3p+oewrcP53OAWeOuDXy9roAuxXCx6IvldUKyD42zDyUgSmI/Z1
TAfoIo2QRwjhuiIBLxITTnMmejF4MjC5MP/RirC6y10+NajwB3w9jL3eWj69INSJ
1NcJYM1QWE/+ZPAMd+7Ox3wZAdB/6ZTAnLnZ7/AM1Q+/8dRGgA7/nCTeWdM1ECCa
sDZhEQNEVzIcn33gqNtdvyCgHid5jo3W58Ttjxertyy7TxiRdifXJwm5ZNwTAWqh
2Mp+gRCeuM7Vpgbpt9XZHjHbFyhorrXlHq6ttQqrAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUUDwAGshTos6MGiMg1l2sd+1Xy9YwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1L2JmNWRlZGFjLWNhYjgtNGIxYS05ZmY5LWZiMjlhMGEzZDZkYS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAJAAENYwDQYJKoZIhvcNAQELBQADggEBACA1dnsBSlQ8CCq63/77WgQ/
iM45tTpk25/wq6HrrXwV3iuji6hpTjyZtrqK7ik8vuySEkKKAsX9nURfpr7I9yql
TCHVgM/upiLkCuz6GHBG8jW3xpABOVZmiLihqo7LpELO3YTTbal3C8mkYCdQW9D8
j4uRy3LdJkxOHdaPBfZ5Dj44pEL75qOSjN2jPhzLuY/M2iQBd9FornWWAFmrPNqb
3t2WlKNEOyeWJvA9dabS45kdLVUvv6gev+gLCIuFqE6CJ12/NvlB2j9hHT8t3jM7
vWLdrBEYy7BsRUSkYC8UadC4e19o16fPSYN7qLGw+/FdXRHSIE3NM0/CL2+jJ5o=
-----END CERTIFICATE-----
Generated at Wed Sep 23 04:56:30 2026 by rpki-client