Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9b0bbbf7-74c2-4538-a223-73b2562d74e2.roa
File:                     9b0bbbf7-74c2-4538-a223-73b2562d74e2.roa (raw, json)
Hash identifier:          A82pZXdGAunEmuLwYfuOaCSOQmpVjgrkkuYwlgV3Sp0=
Subject key identifier:   5F:60:F9:88:71:A0:A3:5F:82:1C:A3:FA:D5:94:7F:70:F5:F0:83:9C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3DF3789972CE12E75E8F26B8B729F176B31531FC
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9b0bbbf7-74c2-4538-a223-73b2562d74e2.roa
Signing time:             Tue 12 May 2026 01:30:14 +0000
ROA not before:           Tue 12 May 2026 01:30:14 +0000
ROA not after:            Mon 10 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        130.176.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:f3:78:99:72:ce:12:e7:5e:8f:26:b8:b7:29:f1:76:b3:15:31:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 12 01:30:14 2026 GMT
            Not After : Aug 10 23:59:59 2026 GMT
        Subject: serialNumber=94f88a7a34b712c3e30e4323cc773749ee5671ec04d8db33e8f76112928e5e09, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d0:f5:2f:71:b9:ba:ef:46:29:12:42:21:21:
                    3b:44:4a:c6:6b:6b:ee:e8:42:e9:08:c2:a3:a3:82:
                    15:02:99:ab:63:a4:b5:14:9a:f7:a1:d5:9f:3d:8e:
                    1e:3a:70:1d:3a:6e:67:7b:d2:f1:b1:34:cf:a9:93:
                    2b:e9:09:9e:f0:bb:5d:71:a9:e0:9c:32:1a:94:ba:
                    dd:ac:22:99:c8:a0:78:0b:46:90:18:eb:5b:08:a4:
                    73:18:28:1a:0e:36:bd:ee:8a:fe:d8:0e:12:8c:83:
                    a1:ef:fc:c2:f3:9d:01:92:9b:ed:d5:6c:3b:5a:3a:
                    f0:e8:05:74:65:06:24:ff:b7:76:42:31:5a:08:f3:
                    be:e7:0c:da:b5:d0:d9:53:ec:a4:30:ef:af:0d:17:
                    e1:3b:2e:6c:95:1a:be:70:be:10:68:26:2f:c9:35:
                    e9:c1:1e:c4:bc:f6:ca:85:7c:63:59:b2:31:94:bd:
                    ed:b9:c1:f9:06:3b:cf:47:f6:2f:eb:9f:cd:0a:e0:
                    f1:c5:c3:17:ec:af:82:b1:ab:9e:fd:5a:aa:ee:cb:
                    d3:7e:5c:43:75:87:3a:46:87:f2:84:12:dd:b1:2c:
                    95:e6:40:db:91:a2:14:91:40:61:ae:c8:3e:92:6a:
                    f6:14:a3:eb:c9:b7:61:f0:22:b6:b9:2c:23:17:ce:
                    a3:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:60:F9:88:71:A0:A3:5F:82:1C:A3:FA:D5:94:7F:70:F5:F0:83:9C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9b0bbbf7-74c2-4538-a223-73b2562d74e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.176.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:b0:36:8c:40:c8:35:5c:3e:46:ca:c9:ee:de:8e:26:ae:9f:
         e7:a7:39:54:e3:0f:2a:a0:92:25:5c:be:ed:57:03:dd:2c:f0:
         b7:c0:19:14:08:b5:26:76:b5:67:ac:3c:7a:ba:cc:18:b0:ab:
         5d:a4:45:c6:f3:79:74:80:f6:98:1f:64:36:33:4d:b5:d2:fc:
         5b:2e:1d:a7:a8:2c:7b:08:84:55:a9:25:ca:60:d7:ec:49:17:
         91:e4:70:bd:9b:7d:09:82:96:2f:2b:ad:83:ce:f9:7c:31:f2:
         9c:06:fb:db:a2:4c:e6:8e:f0:71:54:af:34:33:87:6d:97:5d:
         7e:f9:e9:d9:fd:e3:e1:85:47:ee:cd:35:8c:d4:b8:06:47:94:
         05:b2:58:4a:fc:24:ea:a3:aa:0a:ed:50:33:c7:76:6b:aa:04:
         cc:5e:bb:6d:be:52:f7:87:62:88:2e:d3:3e:25:68:82:66:08:
         f3:82:07:63:f6:23:85:56:16:24:1f:64:65:82:17:cb:56:ff:
         3a:2c:e9:94:02:cb:74:35:e2:11:94:35:6c:51:7c:4e:a4:a1:
         e4:7d:6d:73:55:cd:76:dd:f4:ee:bb:6a:20:95:90:c2:f5:d0:
         72:9c:2d:f8:2f:e7:37:8a:23:72:34:c1:0f:e7:8b:f5:be:1a:
         92:5e:b6:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:57:02 2026 by rpki-client