Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4110e3a3-0f8c-4c51-83a7-e327c7d32a91.roa
File:                     4110e3a3-0f8c-4c51-83a7-e327c7d32a91.roa (raw, json)
Hash identifier:          XZ0A0oQY2QvU2gk0+UAJWw2T3hc5WWGZ1F8ZNkMxhfc=
Subject key identifier:   7E:6F:0C:95:DF:21:38:47:CF:D8:A8:24:9C:7F:72:D3:06:9E:EA:33
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       081CA77BBDEFEFA43F2EAAE39FD90B40017BEEC0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4110e3a3-0f8c-4c51-83a7-e327c7d32a91.roa
Signing time:             Tue 10 Feb 2026 00:41:39 +0000
ROA not before:           Tue 10 Feb 2026 00:41:39 +0000
ROA not after:            Mon 11 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        98.69.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:1c:a7:7b:bd:ef:ef:a4:3f:2e:aa:e3:9f:d9:0b:40:01:7b:ee:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 10 00:41:39 2026 GMT
            Not After : May 11 23:59:59 2026 GMT
        Subject: serialNumber=de03ebc80b02f1002f40ce7b373bc4a6730bfcb0ab230f750ec3ef2fcca8732d, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:a0:ab:e1:af:10:51:73:4b:60:18:d7:1b:52:
                    aa:23:de:4e:e4:c4:d8:40:90:9e:36:a8:62:f3:15:
                    32:c2:b1:de:50:85:e5:b3:f6:9f:f6:9a:d4:40:8b:
                    70:c8:7c:50:44:95:34:b8:4f:13:52:81:25:39:80:
                    f9:d9:5d:76:8c:8a:71:f8:60:f1:c3:14:cc:39:d0:
                    1f:98:eb:c6:67:89:ad:8c:8b:e0:41:ad:04:5a:fd:
                    47:9f:6e:28:b7:31:2e:2c:fa:ed:06:fc:19:21:0f:
                    b3:a9:1c:4c:93:de:9f:bf:7e:af:65:17:bd:0b:ea:
                    d9:19:b2:b4:59:a6:3a:50:6b:d9:21:87:0c:4f:4a:
                    c9:d7:d8:f4:86:a1:ec:36:4f:74:de:b8:eb:40:bf:
                    62:84:04:f6:db:f9:f9:48:53:24:f8:fd:f5:8e:ff:
                    6a:6c:dc:67:d3:64:96:82:e1:32:0a:17:bf:bb:c8:
                    61:dc:b4:a0:3f:db:04:8b:8d:17:08:ca:33:a0:3c:
                    51:8a:b9:83:4b:a8:bd:32:8d:71:7d:26:b3:e1:eb:
                    41:e5:86:9d:9c:57:f5:36:32:95:f7:54:6f:f0:1f:
                    15:16:14:ec:c4:66:f7:c8:e9:4f:6c:25:aa:92:b3:
                    60:02:d9:ed:bc:8b:b1:f0:7e:73:63:8d:38:30:08:
                    25:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:6F:0C:95:DF:21:38:47:CF:D8:A8:24:9C:7F:72:D3:06:9E:EA:33
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4110e3a3-0f8c-4c51-83a7-e327c7d32a91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.69.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         0c:7e:e1:46:66:5d:02:de:ff:33:ae:62:68:ea:30:f1:89:fa:
         a0:0f:ae:c1:24:cc:c0:bd:d3:f5:00:d0:9a:2e:16:70:94:ff:
         ec:15:6b:e5:d7:76:07:08:d8:b6:87:81:fa:14:73:90:2f:17:
         00:e6:5e:b3:da:16:20:fd:2d:5e:22:7c:3e:22:fc:4b:ee:0c:
         48:26:d0:9a:cc:b7:05:06:8e:9e:7f:9c:59:27:4a:c9:10:ec:
         50:58:46:ab:c1:56:a9:83:28:5c:9f:8c:34:48:91:a1:ad:01:
         bf:09:7e:3c:33:33:1f:e9:d0:26:ba:d1:f3:a6:b3:e9:41:de:
         64:d6:79:84:ef:13:cc:63:c3:5e:35:a4:0a:db:f3:95:f2:c2:
         58:7e:82:a3:82:3f:35:95:bc:01:21:cf:4b:45:74:c7:eb:07:
         47:26:6a:8d:de:e3:e5:4b:d8:81:05:de:82:e4:76:c3:0f:67:
         bb:e9:c0:2f:10:54:00:3d:11:7c:bd:58:a8:f1:3b:92:8e:24:
         2b:8f:fc:ad:d6:9a:2f:8d:f5:fd:28:ac:52:a4:89:79:54:5b:
         9b:8d:aa:5b:84:2d:84:5e:a3:55:01:ab:66:e0:4a:68:9a:ae:
         4e:e2:b8:df:f4:2b:40:56:c8:58:91:61:83:8e:29:a0:77:ce:
         1b:21:04:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:06:37 2026 by rpki-client