Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/98b2ed50-2e83-4c0e-90c7-a4cb1249105d.roa
File:                     98b2ed50-2e83-4c0e-90c7-a4cb1249105d.roa (raw, json)
Hash identifier:          wvVIpt6xnqfDb81DmDAIjBKhKugLdbzjZy2p3b3cMbQ=
Subject key identifier:   5C:C5:54:7C:4D:90:AD:3C:CA:1A:68:8C:6C:2A:1B:24:39:C3:84:C0
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       22D4BDFF7D2813026EB3640BB66B1A9031B695DB
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/98b2ed50-2e83-4c0e-90c7-a4cb1249105d.roa
Signing time:             Fri 13 Feb 2026 03:30:16 +0000
ROA not before:           Fri 13 Feb 2026 03:30:16 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:29e8::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:d4:bd:ff:7d:28:13:02:6e:b3:64:0b:b6:6b:1a:90:31:b6:95:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 03:30:16 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=c86d8c4efdf94eb7521a0bc79263d4b2906a7707679810f1d6e14baf12c83da0, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:bb:94:0f:1d:b2:79:9d:fa:57:9b:32:5e:28:
                    c9:3d:a4:ff:23:69:ed:95:be:95:71:64:9b:2c:7a:
                    4d:81:99:78:2d:bc:c6:1b:0e:f0:cf:11:29:b9:99:
                    7b:96:e7:94:b6:90:88:ac:d6:d0:01:e8:4e:f8:4c:
                    2d:dc:ff:dd:43:d5:4f:bb:92:a6:ce:25:42:b9:2c:
                    94:62:b3:02:10:83:6d:d6:fe:49:dc:a2:7d:d3:2f:
                    58:12:71:a0:ac:64:7b:3b:cf:55:87:43:80:d5:85:
                    a9:e4:88:f2:da:a6:a8:78:c5:6f:b3:da:cc:b0:ae:
                    3b:0e:15:b1:fa:22:4c:24:48:44:6c:f3:a6:9d:df:
                    9e:43:f2:2b:e0:bb:fd:d2:79:de:77:93:81:c8:0a:
                    81:64:b9:e5:07:9c:e9:fd:ca:5e:a3:72:e5:1a:51:
                    0b:b6:7c:cd:f6:d2:61:51:ff:a0:c0:41:e1:89:60:
                    98:cc:cf:40:8d:fd:da:79:19:c6:48:4d:c4:10:ef:
                    f9:ed:65:5c:f2:8c:2f:c4:ed:a4:37:8a:a7:16:d4:
                    fe:bc:da:53:ab:04:0b:b4:95:78:f4:80:58:ac:92:
                    a4:16:4f:ee:70:eb:69:ea:a5:aa:7d:db:1d:e1:05:
                    42:16:7b:db:e1:62:12:50:98:cc:17:c1:30:ad:60:
                    59:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:C5:54:7C:4D:90:AD:3C:CA:1A:68:8C:6C:2A:1B:24:39:C3:84:C0
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/98b2ed50-2e83-4c0e-90c7-a4cb1249105d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:29e8::/46

    Signature Algorithm: sha256WithRSAEncryption
         82:2e:bd:20:1a:7f:13:bb:cd:c9:3c:2b:ff:f9:4c:93:e8:10:
         70:03:c5:9f:94:6b:6f:90:8b:1f:42:2a:64:19:45:05:d6:de:
         12:01:67:cd:a6:d6:18:d3:66:60:78:b0:6d:00:08:d6:9d:c4:
         c9:d2:63:87:4e:e3:db:82:17:87:d0:06:d9:c2:78:38:e3:67:
         d0:b8:00:fa:2d:7a:64:77:e4:21:7b:5d:5b:41:8d:02:21:2a:
         33:ca:46:05:5c:ce:5d:d7:a9:7b:1f:91:bd:b8:d7:d5:6f:b0:
         1b:06:9e:de:aa:04:a3:33:d6:48:b6:44:0d:f8:7a:b3:3c:9f:
         39:d8:27:b0:6b:1a:b4:7b:fc:89:7c:17:1c:0f:72:a6:fc:79:
         78:14:89:a1:d2:a4:de:6c:1b:4a:15:71:bf:f5:54:d6:ba:fd:
         d6:dd:fb:be:0d:16:37:16:72:ee:df:46:b8:fc:33:35:f6:9a:
         9a:6b:70:00:30:dc:bf:90:a4:a4:3c:ef:90:7a:57:17:80:24:
         49:f2:b7:24:4a:94:87:56:96:31:c0:18:09:49:38:3f:47:93:
         80:4c:e7:5b:76:ae:0f:07:b4:cc:73:86:85:b1:02:03:d1:8f:
         08:29:42:62:46:77:f0:f4:9c:33:c2:25:9e:26:98:6b:1d:8a:
         f4:2d:6f:15
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:10:48 2026 by rpki-client