Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7756513f-4fd9-4337-9702-90d5277dd482.roa
File:                     7756513f-4fd9-4337-9702-90d5277dd482.roa (raw, json)
Hash identifier:          mHEohQYdHyAFrFYEvTp/6yE+6c91cjvb3oX0LaPrP/w=
Subject key identifier:   F4:F1:9B:42:91:E0:6F:E0:6C:B8:53:74:43:FB:74:8A:C5:20:1C:53
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       741503D0C698C3931D20333CA5637906AB1CBC7A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7756513f-4fd9-4337-9702-90d5277dd482.roa
Signing time:             Tue 12 May 2026 01:40:03 +0000
ROA not before:           Tue 12 May 2026 01:40:03 +0000
ROA not after:            Mon 10 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        130.176.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:15:03:d0:c6:98:c3:93:1d:20:33:3c:a5:63:79:06:ab:1c:bc:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 12 01:40:03 2026 GMT
            Not After : Aug 10 23:59:59 2026 GMT
        Subject: serialNumber=d4384aaf4422ebb0b18d2598c33f88e03c4367fa3887caac0582df68dc0fa001, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:81:77:3d:99:0a:87:c9:a4:ca:c3:6e:8a:ca:
                    b7:b7:e0:69:f5:92:b1:e7:ab:60:6f:05:bd:3b:09:
                    18:05:7d:b3:f5:c3:e7:7d:ac:ed:94:e7:3a:55:e3:
                    0b:12:45:1d:99:5f:40:27:54:48:3b:3d:5c:1f:b9:
                    e4:2f:99:9b:d2:a0:75:f1:0c:34:da:58:4e:1f:94:
                    4b:72:03:6b:4b:da:1e:c1:03:3f:9b:e6:22:ab:6b:
                    fe:79:5b:53:57:49:b0:ea:ef:33:fd:e5:d5:6b:f2:
                    a1:9c:a6:13:67:74:d7:7e:f1:8f:bb:f9:72:76:45:
                    8f:9e:5b:ff:db:5f:fd:a9:e8:43:f1:d3:ff:21:0f:
                    bd:da:c5:cf:f8:da:83:ee:f7:70:ab:b6:c3:56:c7:
                    ef:eb:ba:2b:a0:87:bb:0a:c4:37:1e:ff:05:10:f3:
                    a7:6f:49:21:28:17:d1:44:5b:2a:01:72:95:c6:24:
                    c1:c7:2f:f6:7a:3a:31:18:3d:2f:b3:ed:af:97:80:
                    9a:39:db:dc:de:61:99:7f:9a:aa:c2:ff:0f:32:14:
                    21:c0:cc:05:e7:45:a6:37:8c:85:44:f8:f4:ae:16:
                    62:85:3e:24:20:68:4d:ed:4a:fd:28:44:83:cd:10:
                    ab:bb:88:c6:0b:1d:bb:4c:f7:3c:9f:3d:93:4d:35:
                    5a:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:F1:9B:42:91:E0:6F:E0:6C:B8:53:74:43:FB:74:8A:C5:20:1C:53
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7756513f-4fd9-4337-9702-90d5277dd482.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.176.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bc:11:de:d6:af:76:b4:1f:62:28:9b:3b:8f:1a:e0:11:b4:56:
         2b:72:65:ed:db:54:31:f1:e7:f9:ee:1d:92:42:67:2e:b5:6d:
         34:24:cb:34:2d:e3:ff:4c:87:7f:c5:c8:64:36:fc:99:02:72:
         f9:ff:de:4c:3e:ac:4e:46:ef:fc:c9:19:ed:1b:9b:f2:86:bd:
         32:86:1a:db:51:e5:aa:c7:7a:ac:33:56:c8:5c:33:1d:7e:70:
         19:55:5a:dd:e5:dd:26:ca:bd:5b:2d:ac:16:a8:73:ea:5d:38:
         ed:01:45:0f:13:16:b5:93:68:b7:f9:91:c0:fe:2e:c3:f0:8d:
         2a:33:9b:38:48:06:e7:35:32:a2:c7:60:2b:6d:ef:74:68:6d:
         01:60:28:4b:4e:9a:d3:b0:ce:32:87:54:1c:64:35:2e:24:9d:
         22:8f:b3:ea:0b:5c:37:33:03:79:b9:db:11:23:df:42:f0:c7:
         e7:ed:2f:2a:1b:36:bd:15:79:00:9e:0e:67:f6:b7:79:63:09:
         a9:0c:8e:a5:a7:c3:5e:8b:25:84:8d:74:8e:a5:15:0c:c0:ea:
         a2:18:85:04:b4:3d:f2:99:dd:24:86:bb:ba:ed:1a:54:18:21:
         36:7f:8b:3f:97:59:20:93:68:2b:b8:a2:f4:6b:1c:2c:6a:7d:
         4a:d3:68:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:43:48 2026 by rpki-client