Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/52057d71-5d70-4bf9-9f91-73b8bd0a4176.roa
File:                     52057d71-5d70-4bf9-9f91-73b8bd0a4176.roa (raw, json)
Hash identifier:          ybLvKohNCbPo1++Zplo0rx3i1TDF16fgY950TkdKGFY=
Subject key identifier:   51:5F:34:E9:85:79:EE:C4:99:70:3B:D8:18:07:DF:69:E2:9D:94:91
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       144CBFEEF0C4C9563BB052A93253A32E3ACDDE0F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/52057d71-5d70-4bf9-9f91-73b8bd0a4176.roa
Signing time:             Tue 12 May 2026 01:31:09 +0000
ROA not before:           Tue 12 May 2026 01:31:09 +0000
ROA not after:            Mon 10 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        130.176.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:4c:bf:ee:f0:c4:c9:56:3b:b0:52:a9:32:53:a3:2e:3a:cd:de:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 12 01:31:09 2026 GMT
            Not After : Aug 10 23:59:59 2026 GMT
        Subject: serialNumber=4c94b058bc7bb9284319a0f9872110c8d542d8aeecdcbdb52ed1cca5aeee7f4a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:38:be:2c:26:6d:4c:15:d7:09:b2:69:a9:71:
                    a7:e4:7c:6b:d8:5c:2d:53:8f:33:25:42:6e:cd:a5:
                    07:b9:ae:2c:ff:5c:4d:dc:64:82:c3:76:64:97:e3:
                    f7:1b:4b:cb:1c:61:f6:9e:a9:2f:27:b9:a6:33:b3:
                    13:79:1f:41:6b:af:6b:10:0d:7a:5c:22:a8:3c:da:
                    c4:40:c7:57:45:f1:31:77:ea:4a:f2:cc:50:b7:fe:
                    69:88:4f:50:04:56:3b:2c:40:f2:bc:62:18:af:f7:
                    35:57:71:c5:c9:c0:2c:4d:49:3a:9b:f7:0f:91:e2:
                    c3:0c:aa:d3:5a:20:ea:76:dd:11:72:de:00:db:d0:
                    d4:96:17:f3:5a:73:4d:d6:26:ad:4b:11:69:53:3e:
                    29:85:39:df:92:5b:e0:53:32:53:e8:12:df:99:83:
                    97:90:90:b9:76:24:b0:31:6a:c6:01:4c:95:c4:b0:
                    a7:25:3b:38:50:e1:2b:1f:88:bf:ba:61:c6:ec:7f:
                    5e:8e:a5:95:d1:9a:31:5a:80:96:05:19:c9:07:fd:
                    7c:f6:38:78:21:e5:b5:77:80:eb:92:1a:25:0e:5f:
                    73:9a:b3:55:b0:51:aa:3e:77:25:7f:98:d1:cd:11:
                    6e:d1:8e:e4:a6:a1:f7:ed:aa:2f:2c:76:f6:93:a7:
                    5c:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:5F:34:E9:85:79:EE:C4:99:70:3B:D8:18:07:DF:69:E2:9D:94:91
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/52057d71-5d70-4bf9-9f91-73b8bd0a4176.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.176.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bf:8f:e2:dd:5c:a4:39:10:d5:c6:b5:44:b9:02:10:60:8d:3f:
         63:4b:e0:2d:f3:3a:28:fe:ca:2f:24:f2:8b:93:75:d3:2d:c3:
         ca:b8:29:39:0d:68:99:44:f9:12:41:00:cc:e5:fa:ba:5e:27:
         f7:5b:6c:8c:f9:5c:76:30:32:1e:5a:bd:ef:81:61:d8:2a:4a:
         a1:af:e7:0e:d6:a8:d3:2e:33:d9:b7:9e:25:75:0c:7e:d5:76:
         83:35:09:8a:e5:9f:2a:b8:7d:a5:62:17:4f:65:3d:80:98:10:
         ad:ae:ec:f8:11:12:41:e3:ed:93:7c:a8:f5:80:73:fd:c9:4b:
         56:42:2e:d7:29:b5:d6:5f:60:33:01:e5:87:f7:86:49:60:67:
         66:02:21:4c:19:37:24:f7:71:21:3a:b9:ce:3f:f3:30:c0:ca:
         30:37:fb:22:44:a7:10:4f:72:67:74:03:61:ed:31:26:ac:1c:
         01:f4:ea:a6:1a:6a:3c:f6:03:b8:1d:14:13:d4:4d:0b:1c:ac:
         0e:22:b2:7a:b3:46:7f:a3:31:7c:90:11:38:27:48:02:94:b9:
         af:3c:13:72:fc:72:87:6c:f6:21:d9:3b:6f:8b:48:f0:08:f8:
         9f:f9:8a:50:a0:33:78:9c:c8:75:56:d4:dd:e1:9f:c8:fc:51:
         18:c0:15:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:43:20 2026 by rpki-client