Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b3d27018-08cb-4a1c-9991-b1aa4cfd3a79.roa
File:                     b3d27018-08cb-4a1c-9991-b1aa4cfd3a79.roa (raw, json)
Hash identifier:          c9x/Gy2Wc6iOlxy8YGLn/v6vTZ7p5J4rt1fZH7IObsA=
Subject key identifier:   BF:5A:46:CF:CC:6C:55:8F:DA:72:69:61:C5:5E:82:78:0F:59:7F:EB
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       508FD24D81CC74CD4403738DE5DBD373F142EAA6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b3d27018-08cb-4a1c-9991-b1aa4cfd3a79.roa
Signing time:             Sat 28 Feb 2026 00:10:07 +0000
ROA not before:           Sat 28 Feb 2026 00:10:07 +0000
ROA not after:            Fri 29 May 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        98.82.158.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:8f:d2:4d:81:cc:74:cd:44:03:73:8d:e5:db:d3:73:f1:42:ea:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 28 00:10:07 2026 GMT
            Not After : May 29 23:59:59 2026 GMT
        Subject: serialNumber=ec7e89c7cc2a96755518149836deb376c396f4a0a2800c2f49be001dc4d35e10, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:8b:a5:4d:3c:31:b9:f6:3d:4d:a1:01:84:a6:
                    f3:6d:8c:82:de:50:01:00:43:c0:7d:4e:8b:7c:2f:
                    cd:35:dc:af:7f:9f:d0:56:01:9e:32:28:3f:79:a6:
                    cc:ed:76:fa:b9:69:50:42:c3:99:fe:87:79:4b:e4:
                    38:40:65:b6:da:3c:9f:ef:64:6d:4f:ce:23:52:ad:
                    6b:14:eb:1b:d6:93:3f:6e:81:29:ce:6d:d9:71:fe:
                    fb:c4:61:82:7c:1b:3e:a8:e2:05:2e:23:18:f5:d3:
                    e5:b6:91:6e:c5:6c:39:94:b8:c5:2d:9a:a8:02:9c:
                    d1:fe:f4:cc:7f:ff:ff:73:3c:ba:eb:69:29:58:96:
                    9e:ec:18:87:e1:df:e0:e4:d6:96:6f:12:0f:98:b3:
                    7d:18:83:12:8b:f7:e5:18:39:4a:98:ee:b9:86:0b:
                    96:91:c5:76:6c:31:b2:47:3f:73:05:72:98:bf:53:
                    3e:bf:37:30:a4:d6:ef:55:ef:33:3b:77:7a:76:08:
                    9d:14:91:72:cc:29:a7:12:0a:95:1f:66:b5:12:c8:
                    da:85:e9:2f:ae:44:45:3d:a5:45:5a:a1:00:bf:11:
                    68:d1:f2:11:8b:c5:f3:36:75:5a:83:a7:55:0a:d8:
                    00:2e:1f:70:f3:c3:d5:1f:5b:96:03:34:bb:5a:16:
                    06:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:5A:46:CF:CC:6C:55:8F:DA:72:69:61:C5:5E:82:78:0F:59:7F:EB
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b3d27018-08cb-4a1c-9991-b1aa4cfd3a79.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.82.158.0/23

    Signature Algorithm: sha256WithRSAEncryption
         11:72:a1:03:31:2c:40:84:44:16:77:7b:5e:ca:a1:20:5a:c4:
         16:06:67:df:55:49:f2:a3:a0:03:fc:9f:29:bb:fb:5f:ba:b3:
         14:ac:1c:16:b1:6f:fc:b9:85:8a:25:09:eb:31:d2:85:05:dc:
         e0:7e:73:85:f9:b2:74:87:dd:be:7c:48:3a:b7:a4:f1:72:fe:
         76:e6:30:1f:06:e7:ed:a5:ad:f2:22:2d:f0:4b:04:2f:07:bf:
         55:94:b2:ab:df:55:0e:92:fd:11:7e:67:d7:f0:f5:71:c0:de:
         b1:82:d1:9c:3f:7b:08:ab:7c:c7:c2:17:2e:c3:b8:78:02:25:
         96:22:89:36:c8:de:6f:32:14:24:0e:8a:29:b5:79:86:f0:56:
         03:a1:f9:8a:27:23:11:51:93:3f:89:6a:de:2f:a5:2d:ad:a0:
         94:ed:20:67:bb:f8:c3:08:b2:01:c1:0f:6d:8d:b4:be:f5:64:
         49:eb:bb:1e:a0:12:dc:7f:3a:57:68:6b:c1:3a:90:25:d9:c8:
         8d:80:64:b1:6d:eb:ff:31:2a:1e:37:91:a4:57:b9:ec:82:63:
         c1:44:99:b1:a0:31:36:78:9b:0e:e2:f6:67:54:5c:d1:7e:be:
         81:03:82:77:14:05:77:a1:78:82:08:f4:64:1e:fd:e7:ff:24:
         22:c7:a2:7e
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUUI/STYHMdM1EA3ON5dvTc/FC6qYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjI4MDAxMDA3WhcNMjYwNTI5MjM1OTU5
WjB6MUkwRwYDVQQFE0BlYzdlODljN2NjMmE5Njc1NTUxODE0OTgzNmRlYjM3NmMz
OTZmNGEwYTI4MDBjMmY0OWJlMDAxZGM0ZDM1ZTEwMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCVi6VNPDG59j1NoQGEpvNtjILeUAEAQ8B9Tot8L8013K9/
n9BWAZ4yKD95psztdvq5aVBCw5n+h3lL5DhAZbbaPJ/vZG1PziNSrWsU6xvWkz9u
gSnObdlx/vvEYYJ8Gz6o4gUuIxj10+W2kW7FbDmUuMUtmqgCnNH+9Mx///9zPLrr
aSlYlp7sGIfh3+Dk1pZvEg+Ys30YgxKL9+UYOUqY7rmGC5aRxXZsMbJHP3MFcpi/
Uz6/NzCk1u9V7zM7d3p2CJ0UkXLMKacSCpUfZrUSyNqF6S+uREU9pUVaoQC/EWjR
8hGLxfM2dVqDp1UK2AAuH3Dzw9UfW5YDNLtaFgbDAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUv1pGz8xsVY/acmlhxV6CeA9Zf+swHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2IzZDI3MDE4LTA4Y2ItNGExYy05OTkxLWIxYWE0Y2ZkM2E3OS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAFiUp4wDQYJKoZIhvcNAQELBQADggEBABFyoQMxLECERBZ3e17KoSBaxBYG
Z99VSfKjoAP8nym7+1+6sxSsHBaxb/y5hYolCesx0oUF3OB+c4X5snSH3b58SDq3
pPFy/nbmMB8G5+2lrfIiLfBLBC8Hv1WUsqvfVQ6S/RF+Z9fw9XHA3rGC0Zw/ewir
fMfCFy7DuHgCJZYiiTbI3m8yFCQOiim1eYbwVgOh+YonIxFRkz+Jat4vpS2toJTt
IGe7+MMIsgHBD22NtL71ZEnrux6gEtx/Oldoa8E6kCXZyI2AZLFt6/8xKh43kaRX
ueyCY8FEmbGgMTZ4mw7i9mdUXNF+voEDgncUBXeheIII9GQe/ef/JCLHon4=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:18:18 2026 by rpki-client