Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/77ef751d-2e99-46b8-8795-fade0c31cb43.roa
File:                     77ef751d-2e99-46b8-8795-fade0c31cb43.roa (raw, json)
Hash identifier:          qieSRo1uMNscjyQm2/Xt7lYjnjE6jIpHWSyVnoco6dE=
Subject key identifier:   36:68:1C:5C:AC:E4:C5:EC:8B:CA:D1:18:04:28:F2:FB:69:53:08:E6
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3CA1335E6E1C23867282BD020170481ACB3CA562
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/77ef751d-2e99-46b8-8795-fade0c31cb43.roa
Signing time:             Tue 12 May 2026 01:30:48 +0000
ROA not before:           Tue 12 May 2026 01:30:48 +0000
ROA not after:            Mon 10 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        130.176.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:a1:33:5e:6e:1c:23:86:72:82:bd:02:01:70:48:1a:cb:3c:a5:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 12 01:30:48 2026 GMT
            Not After : Aug 10 23:59:59 2026 GMT
        Subject: serialNumber=acd7e54a10a6edf022c459b5efe4924445ea0b7ab63ed1c00b59f22b5f17dbec, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:54:9c:d4:05:58:66:27:36:94:cd:ec:a2:c3:
                    43:67:7c:25:3d:40:c9:cc:30:a4:07:a4:8a:1c:82:
                    06:d6:96:2a:3e:8b:ee:41:28:f0:30:16:a2:03:5a:
                    8d:4a:03:07:dc:6b:1a:74:66:50:31:09:10:a5:d8:
                    65:f1:1d:61:7e:5d:3d:1a:34:1d:8e:e9:00:bb:3f:
                    93:75:7e:f5:9d:81:4e:13:6f:dc:24:d3:54:b1:24:
                    00:7e:e2:d9:59:da:45:14:6d:ac:ad:54:66:67:1a:
                    ad:8a:f2:bc:6c:90:d2:38:90:1f:b3:d8:0b:d2:9c:
                    96:d6:0a:c2:51:4c:9c:21:ee:78:bf:d5:d0:b1:ad:
                    f2:71:8a:40:1d:18:1d:55:15:e7:2d:88:6a:c7:75:
                    78:94:b2:b7:fd:2f:67:0b:d8:1d:12:b9:da:72:69:
                    c9:24:85:10:25:36:2e:18:84:4d:0f:5d:01:af:a4:
                    b9:cb:32:15:71:64:8e:27:b8:fc:5e:0e:89:40:d5:
                    4f:90:1d:e7:a5:51:8d:a9:3e:06:33:c6:b5:c4:48:
                    66:59:2a:d6:d4:e4:81:4d:3d:5c:56:d0:a7:da:65:
                    cb:cb:be:09:89:71:dc:2b:c6:ca:36:d4:a6:f6:e4:
                    82:24:78:d4:b3:cd:5a:0d:04:08:e8:de:c4:69:ae:
                    fb:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:68:1C:5C:AC:E4:C5:EC:8B:CA:D1:18:04:28:F2:FB:69:53:08:E6
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/77ef751d-2e99-46b8-8795-fade0c31cb43.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.176.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:fc:6d:f8:4f:18:f3:d3:6e:a6:61:ea:a0:f0:af:65:bd:1c:
         1b:b5:48:52:a1:45:92:e3:dd:ce:9c:10:60:f0:72:fe:dd:36:
         7c:a8:ba:61:3c:55:3c:31:55:86:fc:13:b4:9f:36:77:30:04:
         80:da:02:86:8c:ec:c0:88:de:df:3c:20:ad:28:d1:05:95:ed:
         52:d8:cb:e5:18:18:f3:47:d4:24:f5:73:36:d3:c5:31:bf:40:
         a0:74:83:1d:95:74:96:dd:06:cd:da:3f:59:e3:36:f1:d4:2e:
         f3:fd:71:a1:a5:5f:b0:09:33:0a:1e:53:11:fe:cc:a1:a9:c0:
         bd:fd:cc:b1:7b:a2:0f:fa:8d:12:cd:4c:79:2d:b9:bf:28:6b:
         12:b6:3f:bf:8b:dd:a1:21:00:80:e5:8e:34:ae:b7:44:93:d5:
         b2:4d:cb:bf:35:83:af:da:a0:83:d1:4e:65:0e:7d:e4:f8:6f:
         1f:88:81:90:ce:44:69:50:90:90:bd:77:e6:cb:37:96:bd:4f:
         39:9a:63:3a:5d:4a:28:52:c3:ff:dd:ae:23:6c:b4:47:ee:25:
         9b:4c:20:3e:0a:7f:0b:35:82:a1:f7:59:13:f5:03:d4:71:db:
         0b:ff:00:ab:26:70:d0:74:f4:f8:8e:dd:27:ae:74:c2:4e:22:
         a5:f6:27:98
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUPKEzXm4cI4Zygr0CAXBIGss8pWIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTEyMDEzMDQ4WhcNMjYwODEwMjM1OTU5
WjB6MUkwRwYDVQQFE0BhY2Q3ZTU0YTEwYTZlZGYwMjJjNDU5YjVlZmU0OTI0NDQ1
ZWEwYjdhYjYzZWQxYzAwYjU5ZjIyYjVmMTdkYmVjMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDOVJzUBVhmJzaUzeyiw0NnfCU9QMnMMKQHpIocggbWlio+
i+5BKPAwFqIDWo1KAwfcaxp0ZlAxCRCl2GXxHWF+XT0aNB2O6QC7P5N1fvWdgU4T
b9wk01SxJAB+4tlZ2kUUbaytVGZnGq2K8rxskNI4kB+z2AvSnJbWCsJRTJwh7ni/
1dCxrfJxikAdGB1VFectiGrHdXiUsrf9L2cL2B0SudpyackkhRAlNi4YhE0PXQGv
pLnLMhVxZI4nuPxeDolA1U+QHeelUY2pPgYzxrXESGZZKtbU5IFNPVxW0KfaZcvL
vgmJcdwrxso21Kb25IIkeNSzzVoNBAjo3sRprvvPAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUNmgcXKzkxeyLytEYBCjy+2lTCOYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzc3ZWY3NTFkLTJlOTktNDZiOC04Nzk1LWZhZGUwYzMxY2I0My5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBACCsEkwDQYJKoZIhvcNAQELBQADggEBADP8bfhPGPPTbqZh6qDwr2W9HBu1
SFKhRZLj3c6cEGDwcv7dNnyoumE8VTwxVYb8E7SfNncwBIDaAoaM7MCI3t88IK0o
0QWV7VLYy+UYGPNH1CT1czbTxTG/QKB0gx2VdJbdBs3aP1njNvHULvP9caGlX7AJ
MwoeUxH+zKGpwL39zLF7og/6jRLNTHktub8oaxK2P7+L3aEhAIDljjSut0ST1bJN
y781g6/aoIPRTmUOfeT4bx+IgZDORGlQkJC9d+bLN5a9TzmaYzpdSihSw//driNs
tEfuJZtMID4Kfws1gqH3WRP1A9Rx2wv/AKsmcNB09PiO3SeudMJOIqX2J5g=
-----END CERTIFICATE-----
Generated at Wed May 13 03:03:55 2026 by rpki-client