Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/77e7ac3e-0443-426d-aa31-e15acdeba010.roa
File:                     77e7ac3e-0443-426d-aa31-e15acdeba010.roa (raw, json)
Hash identifier:          slAPL1C+kIFTy4JkeUBf6w5agwBX0UXlZGsbHTCgrWY=
Subject key identifier:   7F:CD:9B:A8:47:AF:7B:CF:8A:B4:FA:9D:B1:05:CD:81:A6:FD:B4:E7
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       418E1810AFDD5E35678CB31855ADAB731C32832A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/77e7ac3e-0443-426d-aa31-e15acdeba010.roa
Signing time:             Tue 12 May 2026 00:30:49 +0000
ROA not before:           Tue 12 May 2026 00:30:49 +0000
ROA not after:            Mon 10 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        130.176.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:8e:18:10:af:dd:5e:35:67:8c:b3:18:55:ad:ab:73:1c:32:83:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 12 00:30:49 2026 GMT
            Not After : Aug 10 23:59:59 2026 GMT
        Subject: serialNumber=c227aad71f3c5bfd9a6e684c7f1d47af02713984c4ef356e02cefa4678afd367, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c9:09:2a:0a:b0:12:27:f7:a3:45:fe:c7:4e:
                    bb:1d:d7:cf:9e:9d:cb:25:dc:67:60:bd:25:ab:76:
                    2c:82:fb:67:e8:72:42:21:0a:22:bc:c3:59:72:62:
                    8f:14:e3:b5:4e:a7:c5:72:22:47:f7:ff:f9:ca:1c:
                    58:6c:62:cb:70:76:60:ad:89:35:36:ae:eb:02:46:
                    54:7d:00:61:17:c4:90:87:79:42:e5:1b:7d:9b:21:
                    83:a1:c3:af:a6:fd:32:2d:fd:e3:2c:b0:26:db:4f:
                    fc:60:b7:96:ee:63:97:4d:be:80:56:cc:4b:ab:0d:
                    2c:3a:c1:c9:09:72:08:42:6c:b7:f8:36:98:e7:c9:
                    75:e1:d0:19:fc:e7:9e:75:2d:37:4b:d0:5c:f2:b4:
                    94:69:53:64:f9:8e:9a:a5:76:92:2b:b3:19:33:78:
                    49:60:cf:9b:98:98:7d:b7:89:5a:3b:3a:7f:4d:1e:
                    9f:5d:63:f4:2e:93:dd:25:a3:ac:91:24:fe:f9:13:
                    17:46:f8:ee:85:d6:b6:fc:c7:4d:69:da:3f:ca:4a:
                    8f:a3:7e:e9:75:0a:79:d9:13:98:7f:0a:74:42:ea:
                    2c:ca:6a:fb:38:8a:6a:f8:1a:f0:10:45:16:7f:f6:
                    98:13:bf:de:aa:23:cd:3f:9f:6a:13:89:c5:4b:16:
                    f6:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:CD:9B:A8:47:AF:7B:CF:8A:B4:FA:9D:B1:05:CD:81:A6:FD:B4:E7
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/77e7ac3e-0443-426d-aa31-e15acdeba010.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.176.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:79:b4:11:91:19:0b:c5:d8:f2:f9:9f:68:10:89:82:d4:65:
         10:ba:4d:28:84:29:ba:77:6a:27:a9:02:9d:48:1e:8f:a9:69:
         7d:49:3e:02:0f:fb:67:a0:d5:90:96:06:80:a1:df:0a:fd:bd:
         65:22:21:e1:aa:86:4e:c6:f0:a0:c7:ce:24:17:8c:83:a1:0d:
         4e:bc:46:d4:a0:e9:24:bf:89:a0:09:34:f9:f9:a9:c8:f2:65:
         3b:59:e4:c0:0b:07:31:b0:cf:dc:7f:8d:a1:28:34:b2:82:00:
         95:22:8c:c7:49:0a:dd:da:aa:8d:40:e8:12:40:3c:ef:5a:3e:
         d7:f0:01:0a:18:d0:72:38:14:be:11:f9:ed:21:4c:e3:0e:bb:
         f9:64:8c:fa:3c:f0:b0:b2:ac:08:11:3c:0e:f3:a6:c1:27:bd:
         e7:e0:9a:ca:5f:e2:1d:24:10:b8:5e:c0:a1:bc:55:41:96:c4:
         a3:fd:68:b7:a4:5e:55:2c:35:cc:98:50:67:a0:20:de:09:a8:
         e0:b7:32:17:6e:5e:cd:ec:6d:fa:a1:20:cd:6e:14:d1:1b:17:
         85:ef:1e:cb:ae:32:2b:36:04:2f:ca:bc:88:a7:36:6e:8d:ce:
         6f:40:86:84:8c:e2:af:36:70:89:9a:35:db:52:9b:d3:c5:8d:
         e6:be:2d:66
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUQY4YEK/dXjVnjLMYVa2rcxwygyowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTEyMDAzMDQ5WhcNMjYwODEwMjM1OTU5
WjB6MUkwRwYDVQQFE0BjMjI3YWFkNzFmM2M1YmZkOWE2ZTY4NGM3ZjFkNDdhZjAy
NzEzOTg0YzRlZjM1NmUwMmNlZmE0Njc4YWZkMzY3MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCoyQkqCrASJ/ejRf7HTrsd18+encsl3GdgvSWrdiyC+2fo
ckIhCiK8w1lyYo8U47VOp8VyIkf3//nKHFhsYstwdmCtiTU2rusCRlR9AGEXxJCH
eULlG32bIYOhw6+m/TIt/eMssCbbT/xgt5buY5dNvoBWzEurDSw6wckJcghCbLf4
NpjnyXXh0Bn85551LTdL0FzytJRpU2T5jpqldpIrsxkzeElgz5uYmH23iVo7On9N
Hp9dY/Quk90lo6yRJP75ExdG+O6F1rb8x01p2j/KSo+jful1CnnZE5h/CnRC6izK
avs4imr4GvAQRRZ/9pgTv96qI80/n2oTicVLFvbfAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUf82bqEeve8+KtPqdsQXNgab9tOcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzc3ZTdhYzNlLTA0NDMtNDI2ZC1hYTMxLWUxNWFjZGViYTAxMC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBACCsPUwDQYJKoZIhvcNAQELBQADggEBAJd5tBGRGQvF2PL5n2gQiYLUZRC6
TSiEKbp3aiepAp1IHo+paX1JPgIP+2eg1ZCWBoCh3wr9vWUiIeGqhk7G8KDHziQX
jIOhDU68RtSg6SS/iaAJNPn5qcjyZTtZ5MALBzGwz9x/jaEoNLKCAJUijMdJCt3a
qo1A6BJAPO9aPtfwAQoY0HI4FL4R+e0hTOMOu/lkjPo88LCyrAgRPA7zpsEnvefg
mspf4h0kELhewKG8VUGWxKP9aLekXlUsNcyYUGegIN4JqOC3MhduXs3sbfqhIM1u
FNEbF4XvHsuuMis2BC/KvIinNm6Nzm9AhoSM4q82cImaNdtSm9PFjea+LWY=
-----END CERTIFICATE-----
Generated at Tue May 12 21:40:00 2026 by rpki-client