Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/98500626-397e-4699-aff1-135d91157630.roa
File:                     98500626-397e-4699-aff1-135d91157630.roa (raw, json)
Hash identifier:          PF68x3A7F0fdyGqh2bLwTRN3NDZ5+kelWjUdVKwdZDs=
Subject key identifier:   79:4A:99:D8:74:9D:C7:73:B2:CA:86:B0:CD:73:88:2B:89:76:47:60
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       30A75F3C892A9527AE365E880F29C33492053D60
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/98500626-397e-4699-aff1-135d91157630.roa
Signing time:             Fri 13 Feb 2026 04:30:12 +0000
ROA not before:           Fri 13 Feb 2026 04:30:12 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2f40::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:a7:5f:3c:89:2a:95:27:ae:36:5e:88:0f:29:c3:34:92:05:3d:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 04:30:12 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=849d732f8740899b9457873fa4180fe20a04b89a0820f0ec9fd8a8818cde5da7, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c0:c8:48:bd:96:c3:3b:5e:e9:b3:c0:32:d1:
                    4f:1d:2c:47:05:40:bb:26:b9:3b:d3:91:0d:3a:99:
                    04:d0:8f:e2:f6:f2:8c:cb:46:63:ed:a4:f3:18:b5:
                    42:d3:27:ab:57:32:80:4b:11:c9:fd:46:4d:9b:b8:
                    aa:15:78:3b:e3:eb:45:f3:62:85:3f:25:2e:27:52:
                    45:53:09:88:8a:83:8b:02:b3:b9:ad:e4:53:f0:75:
                    ca:a7:79:12:77:58:dc:a3:13:a2:3d:5a:5f:06:37:
                    c8:f9:d5:a2:7c:f2:4d:99:1c:fe:ea:76:08:39:bf:
                    ce:63:6b:eb:df:03:30:82:41:bd:b2:7a:ef:a9:0f:
                    4f:cd:8f:bb:90:61:06:9b:e0:d1:e0:68:90:db:f5:
                    64:2b:d8:2b:f3:7d:f7:25:d7:e9:f3:6e:2a:d4:3e:
                    ea:58:9a:2f:82:ea:84:8c:b4:12:34:79:12:7e:e0:
                    2a:f6:ee:b3:70:ce:28:23:37:6e:99:32:9c:c2:59:
                    ac:7a:83:bb:24:b1:09:58:ab:4b:f9:31:bf:f2:73:
                    a6:ed:47:9d:a7:b1:7f:b4:89:ba:93:f3:ac:4a:89:
                    c0:a0:81:29:ef:28:f7:68:31:56:9d:46:83:21:04:
                    e5:4b:9d:6d:2e:7b:88:a5:b9:0c:e7:e6:96:73:9a:
                    b1:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:4A:99:D8:74:9D:C7:73:B2:CA:86:B0:CD:73:88:2B:89:76:47:60
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/98500626-397e-4699-aff1-135d91157630.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2f40::/44

    Signature Algorithm: sha256WithRSAEncryption
         05:84:96:ad:1c:42:a9:96:21:c5:83:99:e0:fc:17:1b:9c:ef:
         b6:dc:51:30:e9:9a:79:09:16:2f:32:f4:a1:18:45:d9:a4:72:
         dd:5f:2d:6f:82:34:38:5a:52:06:96:8e:34:3f:9a:3b:ba:57:
         cc:7b:47:90:db:32:8a:22:e0:09:98:b5:86:68:ee:c0:b5:2d:
         c1:0c:88:b4:d1:bd:d6:fa:ab:37:6b:ea:b4:a8:0c:e8:42:03:
         4c:1a:f4:c5:b9:a3:96:3c:84:f0:b2:77:f2:9f:ee:a5:3b:de:
         d2:80:ba:41:9a:12:a4:81:f3:f8:4c:7a:a5:f9:d2:58:d2:eb:
         1d:73:3f:84:f3:46:50:f8:1d:3e:2c:63:81:ce:23:b2:a4:fd:
         83:cb:74:e3:b8:83:b0:1d:56:6e:a2:56:aa:87:86:de:85:31:
         e6:be:d8:9e:1a:ff:14:aa:de:10:41:2f:33:08:2e:cf:8a:a5:
         b4:12:3a:63:b1:9c:23:5a:1c:58:15:61:65:c1:cf:c8:8c:9e:
         00:be:17:b1:52:5c:ad:ea:f2:9e:db:ad:b0:1d:c9:14:38:73:
         87:c4:fd:87:83:b3:46:0f:85:d8:8c:c9:c8:21:b1:43:56:74:
         a4:8f:24:63:2c:28:0a:57:7f:83:d9:41:08:b8:0c:0a:f6:bb:
         47:e2:09:fb
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:52:03 2026 by rpki-client