Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5b30c813-6ee9-4d86-a03e-63af7eafa022.roa
File:                     5b30c813-6ee9-4d86-a03e-63af7eafa022.roa (raw, json)
Hash identifier:          2f1817iJy3Ii/G/oDGpzweZh+VHN4DscrPKiRd1AlKU=
Subject key identifier:   E7:F3:05:13:06:53:D3:0D:D7:D4:A6:EF:CD:4F:F9:CC:D3:EC:5E:16
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5E5D782C47C87C67BEF294FE6689F85642264007
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5b30c813-6ee9-4d86-a03e-63af7eafa022.roa
Signing time:             Tue 12 May 2026 01:11:47 +0000
ROA not before:           Tue 12 May 2026 01:11:47 +0000
ROA not after:            Mon 10 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        130.176.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:5d:78:2c:47:c8:7c:67:be:f2:94:fe:66:89:f8:56:42:26:40:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 12 01:11:47 2026 GMT
            Not After : Aug 10 23:59:59 2026 GMT
        Subject: serialNumber=b552f5616d8249b02bcc1a5e92aed2c0c37b2219b26370c007647a05cb57d221, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:5d:06:93:94:eb:cf:45:ec:6a:25:a0:ec:bc:
                    59:f8:50:53:82:b5:79:3e:f6:cf:89:75:fd:d0:2a:
                    ef:3e:36:ad:94:aa:67:4e:ed:39:1a:17:04:d2:6d:
                    21:7c:36:c2:e2:b7:bd:03:f1:b6:e9:1b:16:ed:04:
                    06:d0:ef:70:b8:01:4b:8f:b9:10:2e:31:e7:e7:a7:
                    01:17:64:2a:4d:e2:7e:e3:b2:5c:83:2c:c9:f8:56:
                    fc:bb:83:df:58:cf:2b:e3:a6:32:c6:fb:c4:d1:b7:
                    ff:94:64:87:51:fc:d8:22:22:56:35:a7:06:b1:0d:
                    e6:ba:55:f6:5d:2e:ca:15:8f:f6:aa:5d:db:25:69:
                    1d:5a:6d:b7:e9:88:1d:3b:de:1e:90:1c:9d:9c:94:
                    3a:29:5d:12:ef:f6:a4:3c:af:43:e1:c8:dd:2e:74:
                    c7:e1:ca:1e:ba:cb:1e:3a:0f:ff:cf:86:6e:5b:8c:
                    f0:72:34:78:eb:02:5d:6f:69:a6:ab:b5:9f:6e:41:
                    2d:a5:eb:81:d9:2b:df:8c:01:31:b9:52:5a:2d:7a:
                    7e:51:98:ef:ef:14:9e:a7:b1:18:7c:f0:1b:ab:8f:
                    9b:df:6b:e9:ee:bc:81:67:8d:ca:4c:3b:88:5c:2b:
                    5e:02:cc:a3:e1:52:4f:6f:22:ad:1d:dd:68:6b:7b:
                    44:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:F3:05:13:06:53:D3:0D:D7:D4:A6:EF:CD:4F:F9:CC:D3:EC:5E:16
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5b30c813-6ee9-4d86-a03e-63af7eafa022.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.176.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:fc:14:48:74:19:68:e1:3f:e7:c9:ff:ee:96:09:30:7d:e6:
         27:af:48:a4:14:90:72:94:7a:d9:41:02:77:53:96:1d:5c:55:
         8e:d7:51:9a:d7:6b:6e:e3:32:d4:69:10:a5:36:41:6d:26:f2:
         68:ff:cf:24:4e:b7:e3:b9:b1:a6:19:34:f4:92:66:38:ed:96:
         df:5f:ee:62:d4:6e:47:dd:77:9c:be:74:7a:89:b6:62:3a:5b:
         be:11:ac:34:1e:bd:1d:3b:31:96:fd:34:84:4e:1a:40:0b:f0:
         88:17:e2:5e:b3:3a:82:0f:90:85:55:44:2f:39:c5:8c:45:e9:
         be:94:49:39:cf:5e:a3:bb:3a:9e:23:71:38:87:19:3d:10:38:
         06:ee:c8:ea:52:89:54:0d:1f:bf:92:27:ee:58:be:53:93:04:
         2f:24:fd:d6:18:da:2e:55:16:ae:ba:78:90:d0:61:dd:56:6c:
         4e:2f:d7:da:46:7c:52:a7:96:e2:0b:43:31:75:fb:a2:79:b9:
         4a:9c:50:57:0f:53:2f:de:5e:b6:0d:93:7d:74:e5:2e:6a:d9:
         d9:31:49:7a:91:20:40:eb:f0:3f:82:7b:16:3f:e2:38:27:21:
         bc:09:7a:fd:96:8f:0c:6e:5f:c9:69:5b:3e:dd:7a:ce:53:a8:
         a2:cd:2c:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:30:37 2026 by rpki-client