Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5ce64577-e032-4364-b209-0c4fa179abff.roa
File:                     5ce64577-e032-4364-b209-0c4fa179abff.roa (raw, json)
Hash identifier:          2MJ09cCiE70tM4cFIIYo3ua+hjgmDmbRr+eMp0OpJZc=
Subject key identifier:   1E:AA:93:BF:DE:A2:F2:1D:F6:85:2F:93:E9:A8:8E:F3:11:FD:3A:DB
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       74C7B8E0D1DAD1D60EB91C81BE8EBAD4008D20B1
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5ce64577-e032-4364-b209-0c4fa179abff.roa
Signing time:             Tue 12 May 2026 00:40:09 +0000
ROA not before:           Tue 12 May 2026 00:40:09 +0000
ROA not after:            Mon 10 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        130.176.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:c7:b8:e0:d1:da:d1:d6:0e:b9:1c:81:be:8e:ba:d4:00:8d:20:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 12 00:40:09 2026 GMT
            Not After : Aug 10 23:59:59 2026 GMT
        Subject: serialNumber=f57263ff52da83fd17dd442dc8d5659b8849d982ebe466efcf9ba487b1b5bfc1, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:a9:94:6d:d2:3c:96:f3:bd:70:5f:f7:47:d9:
                    e3:0b:37:90:ab:81:30:5c:6f:7d:2a:cf:c7:9a:29:
                    2b:22:e8:a5:1f:8c:84:55:1e:85:73:6c:da:cc:56:
                    a6:e9:0d:9f:55:25:f6:0c:93:12:69:2a:86:82:4c:
                    06:cf:77:6a:57:81:ec:89:02:5f:a0:53:26:e2:18:
                    7e:c8:db:e3:de:fe:b3:06:09:85:b7:a1:a1:b8:02:
                    f9:76:3c:6f:c1:0a:51:7a:f3:3b:46:8c:fe:11:73:
                    52:f3:65:30:6d:8d:40:9e:cc:cb:7a:76:7e:21:01:
                    0f:fc:b5:b1:a8:24:dc:02:68:91:a3:49:62:91:ed:
                    45:2b:05:d3:1a:64:f1:0a:61:2a:9b:1c:c4:97:a8:
                    f8:65:87:33:58:49:cb:86:ca:51:30:11:9e:9e:69:
                    39:07:ad:65:e0:3a:da:cf:65:58:6a:7f:84:29:69:
                    81:a9:fe:d0:28:6a:fb:8e:1f:79:97:aa:35:b2:8e:
                    95:23:d0:78:05:c5:67:4b:4e:bc:31:a5:48:2d:76:
                    37:52:a2:96:98:3a:c4:17:05:15:c3:29:1e:3e:62:
                    61:17:cd:7f:ff:ae:43:15:72:53:27:cd:57:3c:02:
                    78:05:a1:6c:76:32:67:91:32:67:fd:cd:dc:7a:62:
                    4e:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:AA:93:BF:DE:A2:F2:1D:F6:85:2F:93:E9:A8:8E:F3:11:FD:3A:DB
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5ce64577-e032-4364-b209-0c4fa179abff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.176.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:5b:80:be:13:68:91:07:06:4f:5d:2f:5d:61:40:f4:b8:a3:
         7b:d6:3a:4a:b5:61:e3:a2:9b:a4:5e:c7:28:b9:04:db:7c:97:
         64:8d:42:61:6e:a9:fd:71:bb:d8:3e:58:7d:a5:67:bd:7d:2a:
         3a:fc:b6:0d:30:31:b3:96:6f:ae:5b:63:b5:c6:cb:da:43:75:
         b6:b0:ce:bd:b9:78:e0:ee:77:1e:dd:68:fb:45:7a:99:0a:a2:
         a2:f4:da:7d:89:19:59:95:db:8a:39:2c:19:41:01:4c:7a:40:
         44:0c:1f:e0:03:b0:cf:12:9a:0b:99:15:77:41:53:8e:a4:83:
         50:7b:06:37:85:8a:09:c2:e3:fb:e6:52:6f:b7:17:fb:fa:61:
         67:bb:92:15:0a:d0:d2:65:dd:5f:a1:8d:67:26:de:03:9d:ad:
         a1:fc:57:6b:b6:c0:0d:8f:d8:9a:84:de:dc:19:fe:90:99:17:
         bb:8a:0d:7f:c4:59:1d:2c:11:05:5d:90:79:9b:3e:0c:81:a5:
         84:a8:ad:9d:06:7d:a8:47:f8:15:f6:69:20:b1:5c:d5:60:f2:
         9a:8a:61:82:17:7b:5e:eb:30:05:da:c5:29:6b:1a:db:b0:26:
         34:2c:8e:85:69:94:5e:4b:f2:3e:81:a4:f2:36:5d:b0:ff:e4:
         8f:e3:61:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:40:26 2026 by rpki-client