Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9f27e7a2-7f0e-4478-a7ef-f81416d1a849.roa
File:                     9f27e7a2-7f0e-4478-a7ef-f81416d1a849.roa (raw, json)
Hash identifier:          w8FdNga537pOIVZ/uGgWGPoG+mFDAkcAAHcq1mVwWS8=
Subject key identifier:   D3:6A:79:73:C1:43:7E:B1:80:7A:BB:3C:0A:1C:E4:94:6C:5C:BE:51
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6515E35A7252F33E032A44EECA346CC4D34FC800
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9f27e7a2-7f0e-4478-a7ef-f81416d1a849.roa
Signing time:             Tue 12 May 2026 01:11:51 +0000
ROA not before:           Tue 12 May 2026 01:11:51 +0000
ROA not after:            Mon 10 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        130.176.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:15:e3:5a:72:52:f3:3e:03:2a:44:ee:ca:34:6c:c4:d3:4f:c8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 12 01:11:51 2026 GMT
            Not After : Aug 10 23:59:59 2026 GMT
        Subject: serialNumber=cf329e001d4b0574845fb74058fb6992b78e488ad4bb82aa5556c7ae854a5713, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:cc:b5:ea:17:92:5e:12:e7:d4:e9:37:8c:b0:
                    17:c9:b2:76:4d:cb:cb:82:5a:c4:2d:d1:c4:e0:9a:
                    65:bc:95:33:5e:46:fe:8b:48:5e:d7:79:d5:3d:06:
                    28:66:f6:fd:e5:d2:0f:85:43:99:2c:08:54:fb:fe:
                    05:a8:1e:f0:bf:0c:1f:40:fd:21:cc:e1:21:71:a5:
                    03:4f:5e:1d:84:3b:86:71:79:35:76:bc:31:08:d5:
                    25:f6:ef:f5:e3:6a:a0:7f:63:fb:37:a9:ae:c4:45:
                    50:85:a1:69:4b:bf:58:7d:01:4d:9c:df:16:ab:16:
                    d4:69:c3:11:49:9e:6e:63:e8:63:df:6b:5c:40:aa:
                    5b:e1:1f:b7:50:aa:0e:39:3b:7f:d4:35:d2:b6:ad:
                    a1:50:9d:ee:c3:b9:bb:89:5a:1d:be:e2:2b:43:3a:
                    a1:1d:11:f3:2e:a7:d4:2f:26:f8:c7:56:7d:5e:d1:
                    f3:25:94:0e:66:92:35:78:1b:92:9f:ab:6d:53:39:
                    b1:2a:d1:9f:24:ef:00:cd:c7:f6:8b:53:e8:02:dd:
                    38:fe:53:77:1c:0e:bb:d6:27:d2:86:ae:62:43:e3:
                    63:40:f0:e8:e3:bb:d8:d9:9c:a1:de:43:05:38:a0:
                    0b:5a:29:64:11:7e:91:4f:57:9e:73:32:96:98:be:
                    99:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:6A:79:73:C1:43:7E:B1:80:7A:BB:3C:0A:1C:E4:94:6C:5C:BE:51
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9f27e7a2-7f0e-4478-a7ef-f81416d1a849.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.176.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:03:b4:b4:37:e3:05:2c:7f:2d:0e:d5:59:5c:a4:42:3d:4d:
         75:54:96:5b:5e:28:d1:88:d6:34:c8:29:44:37:9b:41:a9:0a:
         d2:6d:08:35:dd:7e:9d:56:da:9e:a2:0a:2b:1e:8c:af:a3:d5:
         5d:7d:ac:3a:88:61:6d:c3:d1:31:69:55:7d:ec:8c:e4:53:aa:
         e0:da:bf:49:e3:da:96:ca:14:eb:75:e8:82:58:fe:5f:2d:69:
         54:fd:5f:cc:61:f1:12:ba:ac:09:5e:62:06:5c:41:8b:05:a5:
         65:5e:42:64:98:86:85:e3:8f:a5:57:82:cf:12:12:7e:f8:d0:
         a4:d5:55:45:d4:05:3d:e5:ff:fb:f4:4c:ec:11:37:e1:64:78:
         53:be:fe:07:23:a3:2c:c6:f1:7c:45:e2:17:95:93:07:85:5f:
         a7:3f:fb:7f:20:1b:2d:99:dd:82:36:61:ab:03:ec:26:bd:86:
         28:e3:63:13:20:c5:d0:f5:e4:66:f4:7f:03:37:f3:7c:3d:8e:
         94:e3:ad:b0:0d:7b:ec:f9:4b:b0:02:9d:7c:7d:4a:0a:4a:62:
         64:31:54:df:b5:d0:94:db:35:8c:99:73:56:61:76:00:0e:87:
         3b:87:13:e7:8c:a3:b9:7d:37:dd:8f:0f:68:e6:ff:77:91:29:
         6d:98:6e:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:54:52 2026 by rpki-client