Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/73d20e26-7920-4c39-9ec2-f2b4f04c9de7.roa
File:                     73d20e26-7920-4c39-9ec2-f2b4f04c9de7.roa (raw, json)
Hash identifier:          +S7Hp704kIoZVRIII5IoRtkcdaxp6/Q/ZcdjjbEBfyU=
Subject key identifier:   03:1C:73:2A:5F:DA:E7:BF:A9:7E:21:E8:72:04:97:57:D3:5B:0F:61
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2484F4BCA63BB2C6FB044A78B934578393F5FB0C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/73d20e26-7920-4c39-9ec2-f2b4f04c9de7.roa
Signing time:             Tue 12 May 2026 00:40:51 +0000
ROA not before:           Tue 12 May 2026 00:40:51 +0000
ROA not after:            Mon 10 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        130.176.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:84:f4:bc:a6:3b:b2:c6:fb:04:4a:78:b9:34:57:83:93:f5:fb:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 12 00:40:51 2026 GMT
            Not After : Aug 10 23:59:59 2026 GMT
        Subject: serialNumber=f6ed148b71e65667dfaf4cd7bdee7e7cd04a5aa2d8c7922e2b55c283fd25cccd, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:bf:39:d8:24:a4:fe:86:8b:ce:fa:d3:0b:0f:
                    fe:4f:38:b4:02:b0:58:29:98:8d:11:2d:54:b8:55:
                    0d:46:1c:f0:2f:1b:56:d5:cb:3f:d8:2e:75:f9:7d:
                    55:08:9f:d4:de:db:de:6e:af:6a:6c:20:b5:44:bd:
                    3d:d3:f8:5a:c2:7c:50:12:db:05:84:45:73:29:66:
                    56:2a:16:68:e4:b1:9a:94:67:33:f9:ab:78:0c:97:
                    67:1f:ce:d5:c0:29:98:6a:96:db:cc:38:bd:25:60:
                    44:35:04:d6:d7:ff:a7:c8:b8:c6:43:1f:78:ed:c4:
                    5a:49:bb:24:f2:00:83:aa:98:b4:76:c1:6d:c6:2e:
                    7a:28:24:de:8d:c2:e1:b3:bf:7c:7f:fb:00:b2:82:
                    9f:b2:69:d9:df:76:61:cf:fa:69:24:26:67:2e:a3:
                    03:34:22:76:eb:07:dc:1b:87:57:15:2b:57:7f:b7:
                    5f:bb:36:f3:1c:b2:6b:a3:2c:b5:be:8c:ec:db:ab:
                    37:06:3e:94:4b:7b:9d:1e:24:6b:8a:48:27:0f:72:
                    92:6a:89:7d:62:a2:a8:85:b1:25:97:17:18:e7:04:
                    f9:aa:fd:72:63:ed:f8:94:36:08:49:ed:10:49:23:
                    09:89:65:a0:76:c2:f6:47:2b:72:90:57:d4:57:4a:
                    35:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:1C:73:2A:5F:DA:E7:BF:A9:7E:21:E8:72:04:97:57:D3:5B:0F:61
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/73d20e26-7920-4c39-9ec2-f2b4f04c9de7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.176.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:33:3c:10:5f:2f:bd:6f:33:95:ef:b1:7a:3f:c7:40:40:57:
         8d:6c:a8:5c:10:ac:b0:3a:92:b1:6b:87:82:11:39:1d:8e:b1:
         8f:af:21:64:7e:72:d3:ed:87:25:c3:e6:c4:54:59:a3:ed:37:
         fc:e3:05:3b:30:45:63:45:d9:a9:57:21:6f:fb:15:eb:a0:b7:
         c5:11:bb:84:4f:1c:5a:54:7a:b1:00:f2:2c:72:03:42:64:78:
         a7:e3:9f:f0:10:44:87:27:58:02:6d:12:79:95:f1:60:3e:34:
         2e:95:04:25:28:47:99:76:31:32:6e:51:8a:cb:3c:b4:c4:5b:
         4f:13:49:10:66:37:10:fb:10:bf:bf:cd:b2:2e:38:6b:0a:4a:
         54:61:03:81:54:51:c6:8c:c9:16:1a:e4:19:84:a7:7b:63:8c:
         2a:92:b4:32:d3:03:78:cc:70:6a:d7:11:9f:fe:45:1c:01:e2:
         bd:ff:b8:7e:d0:42:01:4d:33:67:6d:0e:84:87:f1:3c:56:08:
         db:95:33:1a:18:b5:88:c3:2d:78:08:60:6f:fd:37:8b:01:e4:
         85:fb:45:19:d7:58:ac:a4:e1:06:eb:91:94:7a:a3:d5:1c:0f:
         ba:9a:d1:93:e3:1e:16:3f:d7:f5:8e:a4:21:ce:06:e8:03:39:
         a6:f8:75:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:27:21 2026 by rpki-client