Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/98f9fa52-d765-478b-b920-b4c7600f5e7b.roa
File:                     98f9fa52-d765-478b-b920-b4c7600f5e7b.roa (raw, json)
Hash identifier:          v8ovw1MTI+CPmExk98VhVRp6+jDnlWECEHGY/vdX8Pw=
Subject key identifier:   CF:9B:DC:3A:DE:A1:C8:68:A0:E6:B2:A0:AC:26:FE:03:E9:2C:89:FD
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       55B06983B64046EF8F8A07D8455F3A5C0E012B9F
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/98f9fa52-d765-478b-b920-b4c7600f5e7b.roa
Signing time:             Fri 13 Feb 2026 13:22:02 +0000
ROA not before:           Fri 13 Feb 2026 13:22:02 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:331e::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:b0:69:83:b6:40:46:ef:8f:8a:07:d8:45:5f:3a:5c:0e:01:2b:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 13:22:02 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=31e5ce29f60b21e2fe846292f7f75e57ad133e71c78143c5fb1732ac736c3a5e, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:52:c0:b7:cd:a3:e3:79:a9:6f:74:1c:3e:6e:
                    33:b9:17:68:3a:6b:05:bc:85:83:36:b7:a0:b4:20:
                    7e:1f:aa:eb:53:92:6a:e3:cd:02:ae:ac:23:e1:24:
                    c9:42:b1:d5:29:6f:75:50:1e:7a:21:fb:a0:ce:cb:
                    28:95:85:f4:8c:89:bf:3c:fd:22:2e:27:f4:93:fd:
                    bf:27:94:de:f3:68:53:57:b4:f6:7d:a6:51:6c:69:
                    e5:b2:88:f4:6c:41:e6:8a:8c:da:39:e5:68:77:87:
                    41:18:45:ea:04:26:cc:2f:78:b0:12:2a:dd:14:58:
                    01:5e:60:d7:88:10:1c:5a:84:5b:26:4e:0b:bc:e2:
                    1e:01:71:8c:d3:42:ee:a9:a3:e3:13:72:e3:b5:13:
                    d5:a7:0b:77:47:69:0d:fa:11:27:19:45:02:12:a6:
                    cf:c8:23:f7:84:ec:3a:6e:2c:ec:ff:91:e6:91:7a:
                    e5:7c:fc:0c:81:a9:c5:8b:ee:ce:26:52:dc:d2:6e:
                    6d:38:b5:2e:d2:49:2a:20:13:c0:32:76:55:12:6a:
                    97:5e:7d:22:dd:44:de:99:ef:67:ae:e8:4b:6e:de:
                    ac:f6:2a:f0:01:2b:6c:52:4c:fd:85:46:00:6f:37:
                    15:55:09:06:ef:f7:5a:a1:f1:c2:bb:89:cc:aa:58:
                    d1:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:9B:DC:3A:DE:A1:C8:68:A0:E6:B2:A0:AC:26:FE:03:E9:2C:89:FD
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/98f9fa52-d765-478b-b920-b4c7600f5e7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:331e::/47

    Signature Algorithm: sha256WithRSAEncryption
         b6:2a:d7:8c:b4:cc:98:99:64:3d:57:bf:b2:5c:59:76:0b:b7:
         5e:fc:c2:f9:3d:e2:1a:a8:32:68:c3:43:64:9f:61:24:58:e1:
         1b:37:32:e2:9c:b0:42:7e:b8:a0:8b:00:00:f0:12:ae:51:7e:
         ff:99:01:bf:15:31:2e:70:9d:08:75:4e:4e:6d:e1:36:42:bf:
         31:77:cc:75:55:01:b9:d1:c7:a0:4a:cc:4e:97:16:03:f1:e0:
         2b:99:4f:19:47:12:c9:89:44:ea:2e:ce:05:21:ea:fc:40:bf:
         3a:7b:b8:14:15:fc:83:6f:ae:97:9e:5b:03:01:ec:58:79:db:
         62:91:4a:6f:7e:44:5e:11:aa:b1:e6:1b:aa:1c:d0:63:72:31:
         69:d4:1b:b7:58:f9:3d:5b:49:49:7a:0e:c4:c5:fa:28:75:bb:
         e1:82:60:c1:06:78:58:e5:c9:71:77:fb:bb:63:72:52:71:01:
         e9:fb:a2:61:b2:6c:0a:6e:6f:60:80:44:07:9f:d9:a6:ff:bc:
         b4:56:bf:e3:4e:47:b2:5f:d2:ac:15:51:a9:ab:a1:b5:e2:b8:
         3d:d2:38:d6:6b:8b:63:46:b6:0f:a4:3b:c0:c9:cf:c7:b5:67:
         64:14:3d:81:fd:dd:9f:0a:40:58:d5:b8:57:05:ca:83:8a:f0:
         e6:99:03:1e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:11:12 2026 by rpki-client