Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/17ee9a5a-6991-4353-a26d-aa94f10405df.roa
File:                     17ee9a5a-6991-4353-a26d-aa94f10405df.roa (raw, json)
Hash identifier:          uxYLzoUqIuPUbHr7iS0czPZXLXIFlk/R/3zuFFE6xgw=
Subject key identifier:   78:13:67:27:C6:F7:07:A5:E5:06:DC:C6:05:2D:4A:73:7D:48:85:7F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       311638A2E18C182E903CBAC19C02C13C6C7A57B5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/17ee9a5a-6991-4353-a26d-aa94f10405df.roa
Signing time:             Tue 12 May 2026 01:21:26 +0000
ROA not before:           Tue 12 May 2026 01:21:26 +0000
ROA not after:            Mon 10 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        130.176.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:16:38:a2:e1:8c:18:2e:90:3c:ba:c1:9c:02:c1:3c:6c:7a:57:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 12 01:21:26 2026 GMT
            Not After : Aug 10 23:59:59 2026 GMT
        Subject: serialNumber=b2753084c5d1198a97904cfa574a7b8cc6360ce869b80c7542a4d02d302c32eb, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:a6:98:52:af:d7:1f:4d:51:52:df:18:2e:d0:
                    f6:f3:0e:2d:38:82:6e:fa:47:25:30:e3:b7:e2:5a:
                    fd:29:d1:f7:02:2d:89:ed:a5:3c:ae:eb:b6:07:a0:
                    20:20:b4:f2:2b:f2:f4:db:60:4c:e4:92:50:86:57:
                    ef:65:6e:cd:2b:30:a2:38:0f:e8:b5:00:52:06:a1:
                    be:8a:98:ae:16:eb:f1:6c:20:20:bb:f5:36:6f:ac:
                    64:42:39:07:4e:6d:5b:24:36:5c:3f:fb:78:c5:ec:
                    32:ea:ee:bb:1d:10:b8:8e:6b:df:ca:af:b6:b2:91:
                    b7:1e:a3:35:90:36:a9:19:e2:ca:45:02:3f:77:ef:
                    a5:88:ea:b5:1f:a6:0b:ed:fb:f7:05:ea:75:5e:f5:
                    ca:a3:b3:f7:76:b5:31:85:05:69:8f:ef:33:c7:e8:
                    a1:ba:10:5a:8f:c5:17:28:e3:ab:68:da:45:fb:06:
                    bc:84:6d:60:3d:27:cc:89:80:78:cb:13:70:68:ad:
                    8a:14:51:15:a4:2e:2d:97:d2:5c:c6:03:3c:12:f2:
                    22:10:48:01:36:cb:d3:8a:95:7c:bb:d4:25:bb:4e:
                    40:08:d4:ae:59:ec:67:eb:14:a4:78:9c:4f:9a:aa:
                    8f:aa:0f:d4:c7:f6:31:0a:9b:b5:ad:8f:04:c6:9a:
                    40:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:13:67:27:C6:F7:07:A5:E5:06:DC:C6:05:2D:4A:73:7D:48:85:7F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/17ee9a5a-6991-4353-a26d-aa94f10405df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.176.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:b4:cd:c1:58:64:b1:4c:fa:9f:31:88:f1:d8:5a:a4:46:5f:
         0f:3a:f1:3f:4b:e6:de:90:b7:41:f1:fa:90:d6:27:e9:b4:ce:
         b6:70:9a:f1:5b:82:91:c1:a9:5b:92:25:b3:7f:8b:56:b9:5d:
         ea:cd:a2:5c:41:90:03:15:b8:23:70:d2:e1:90:14:d1:51:a8:
         54:98:1b:ae:c4:16:ab:eb:0f:33:27:2b:43:ae:43:81:e1:90:
         ec:e7:ea:37:c7:6e:79:57:d0:78:c9:e5:9d:fd:7e:90:7f:36:
         30:b8:10:54:a0:fc:18:3b:3f:43:54:88:f2:11:da:2f:59:81:
         d6:47:6a:3f:79:76:9c:85:6e:74:c4:d7:a9:74:45:af:aa:01:
         88:11:d3:6e:de:b2:d1:21:93:bb:b6:bd:67:1c:7e:bf:a5:21:
         cc:31:1d:fe:d6:08:37:4e:7f:6e:09:54:7f:12:08:93:5f:cf:
         f8:41:06:ba:62:b4:a6:27:93:f4:be:4f:77:07:47:85:e7:d1:
         a0:30:04:6d:5c:2d:e3:f8:45:82:8e:b9:dd:e8:0d:7e:0c:4e:
         8a:cc:ec:28:11:ec:3d:24:e2:4f:98:f5:cb:1b:63:f7:8e:15:
         8e:25:77:ec:58:3f:af:84:f7:34:1c:d5:67:aa:f6:39:c4:7f:
         1e:d0:20:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:43:32 2026 by rpki-client