Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/42e76422-373a-4997-b758-5f56681cb70a.roa
File:                     42e76422-373a-4997-b758-5f56681cb70a.roa (raw, json)
Hash identifier:          vjOBB/4aAMTzonclh1gGxyHChoSW1lAkhn/AXown7As=
Subject key identifier:   CC:D0:67:04:B7:D7:C9:AC:70:80:C6:1B:39:05:C1:D5:56:60:DE:B6
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       7F70EDB35939E4C9D10D129359C8B89E98AD649D
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/42e76422-373a-4997-b758-5f56681cb70a.roa
Signing time:             Sat 10 Oct 2026 03:40:43 +0000
ROA not before:           Sat 10 Oct 2026 03:40:43 +0000
ROA not after:            Fri 08 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2fc2::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:70:ed:b3:59:39:e4:c9:d1:0d:12:93:59:c8:b8:9e:98:ad:64:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 10 03:40:43 2026 GMT
            Not After : Jan  8 23:59:59 2027 GMT
        Subject: serialNumber=6f80033abd884dcd106201ff91159c4132f1df7d9c348b7acab29f4c1f42e3de, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:62:80:1c:f7:7f:8b:9c:1e:4f:71:00:2e:fa:
                    b2:55:3b:66:b4:31:d8:90:fe:96:b5:57:c7:7b:dd:
                    47:1f:78:a3:d1:08:0c:52:61:51:a8:75:cd:22:c8:
                    60:03:b5:2b:07:bc:c3:64:aa:b9:62:d7:1a:d3:7e:
                    90:81:58:88:47:9c:e2:c7:f8:d0:52:26:83:8f:70:
                    6b:34:67:82:6d:55:75:b1:23:da:3a:56:cb:a1:40:
                    d7:5c:59:e0:84:d5:5c:d0:c0:fb:43:5d:d2:6b:21:
                    98:4f:f2:92:fe:f3:ac:51:4a:5a:e4:7b:ed:ae:d7:
                    85:29:76:2b:c6:b9:1e:71:7d:b6:bf:17:f5:57:87:
                    28:e1:1e:29:f3:09:7b:27:24:65:e1:99:c5:04:1b:
                    cf:0f:60:c0:5e:9b:41:26:6e:7a:f4:cb:4f:ee:27:
                    a3:46:f3:c8:08:1e:60:9f:2c:3b:de:96:15:83:2e:
                    cd:b2:1d:03:a0:ba:06:85:13:b0:c1:8d:1e:73:45:
                    8a:9c:f7:9c:bf:32:c4:d1:1e:5f:e3:07:83:12:ce:
                    a8:22:95:aa:14:e6:92:32:98:db:49:7b:1b:95:bf:
                    d4:1e:9b:21:df:31:aa:39:fb:bf:9b:9f:1f:dc:cc:
                    85:60:8e:c1:f7:e3:d7:19:26:c9:7e:1b:49:36:69:
                    c1:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:D0:67:04:B7:D7:C9:AC:70:80:C6:1B:39:05:C1:D5:56:60:DE:B6
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/42e76422-373a-4997-b758-5f56681cb70a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2fc2::/47

    Signature Algorithm: sha256WithRSAEncryption
         66:44:f0:a1:9c:8b:54:42:3a:26:2f:5b:35:e8:b5:44:7f:97:
         0b:3c:02:ef:d1:cc:ff:d9:f9:3b:b8:40:22:65:c4:65:6e:a3:
         e8:07:cf:6b:37:eb:4d:c9:de:2b:34:3f:50:37:15:03:cd:1f:
         87:8a:71:9e:bb:16:db:a5:d5:af:1a:d9:e8:d4:02:3b:a1:72:
         82:45:23:ad:ac:ab:69:c2:ee:eb:b3:df:2b:f8:ca:86:f2:28:
         08:79:d4:93:53:55:6f:26:88:17:f2:78:5b:96:14:b2:81:20:
         98:f0:4d:4e:b6:c3:2f:d1:d1:f0:a0:53:f1:1b:b5:90:e8:07:
         a3:eb:e0:89:52:78:2f:c8:23:a8:ba:c8:ca:b8:06:f3:18:84:
         68:ec:c3:2b:b8:40:d6:3e:c9:17:d4:25:1f:08:9e:e5:a8:83:
         82:34:37:d2:7f:41:54:b3:14:86:a5:ca:d6:15:23:26:43:51:
         84:ad:f3:bd:65:90:7e:25:c7:f9:db:64:8e:2a:17:75:ed:a1:
         78:76:7a:29:e1:13:e5:64:12:fe:82:da:36:03:a8:f7:4e:15:
         26:61:9d:6b:0d:48:80:b5:a1:04:81:75:4d:16:dd:cb:cd:88:
         03:ce:48:92:61:47:85:7a:f9:58:53:3e:24:7f:41:6d:33:7f:
         34:5a:71:48
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUf3Dts1k55MnRDRKTWci4npitZJ0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYxMDEwMDM0MDQzWhcNMjcwMTA4MjM1OTU5
WjB6MUkwRwYDVQQFE0A2ZjgwMDMzYWJkODg0ZGNkMTA2MjAxZmY5MTE1OWM0MTMy
ZjFkZjdkOWMzNDhiN2FjYWIyOWY0YzFmNDJlM2RlMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCmYoAc93+LnB5PcQAu+rJVO2a0MdiQ/pa1V8d73UcfeKPR
CAxSYVGodc0iyGADtSsHvMNkqrli1xrTfpCBWIhHnOLH+NBSJoOPcGs0Z4JtVXWx
I9o6VsuhQNdcWeCE1VzQwPtDXdJrIZhP8pL+86xRSlrke+2u14UpdivGuR5xfba/
F/VXhyjhHinzCXsnJGXhmcUEG88PYMBem0Embnr0y0/uJ6NG88gIHmCfLDvelhWD
Ls2yHQOgugaFE7DBjR5zRYqc95y/MsTRHl/jB4MSzqgilaoU5pIymNtJexuVv9Qe
myHfMao5+7+bnx/czIVgjsH349cZJsl+G0k2acHNAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUzNBnBLfXyaxwgMYbOQXB1VZg3rYwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzQyZTc2NDIyLTM3M2EtNDk5Ny1iNzU4LTVmNTY2ODFjYjcwYS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwEmAJAAL8IwDQYJKoZIhvcNAQELBQADggEBAGZE8KGci1RCOiYvWzXotUR/
lws8Au/RzP/Z+Tu4QCJlxGVuo+gHz2s3603J3is0P1A3FQPNH4eKcZ67Ftul1a8a
2ejUAjuhcoJFI62sq2nC7uuz3yv4yobyKAh51JNTVW8miBfyeFuWFLKBIJjwTU62
wy/R0fCgU/EbtZDoB6Pr4IlSeC/II6i6yMq4BvMYhGjswyu4QNY+yRfUJR8InuWo
g4I0N9J/QVSzFIalytYVIyZDUYSt871lkH4lx/nbZI4qF3XtoXh2einhE+VkEv6C
2jYDqPdOFSZhnWsNSIC1oQSBdU0W3cvNiAPOSJJhR4V6+VhTPiR/QW0zfzRacUg=
-----END CERTIFICATE-----
Generated at Sun Oct 11 06:11:41 2026 by rpki-client