Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b3605182-73be-4b14-a693-b70c018bdd57.roa
File:                     b3605182-73be-4b14-a693-b70c018bdd57.roa (raw, json)
Hash identifier:          4qO/72scl4Ye6TpDXFWyHpzu/JMo7A3dTMxVq9k+QYc=
Subject key identifier:   94:DA:D7:43:BC:31:40:D2:F3:85:2A:0C:81:74:EE:A2:D4:36:53:74
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       77C784593C99832B8D90C4E8EB93D64EC7FAD170
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b3605182-73be-4b14-a693-b70c018bdd57.roa
Signing time:             Sat 18 Jul 2026 00:50:05 +0000
ROA not before:           Sat 18 Jul 2026 00:50:05 +0000
ROA not after:            Fri 16 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        130.171.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:c7:84:59:3c:99:83:2b:8d:90:c4:e8:eb:93:d6:4e:c7:fa:d1:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 18 00:50:05 2026 GMT
            Not After : Oct 16 23:59:59 2026 GMT
        Subject: serialNumber=dc9480f996d5a19e5605625c3e70fca52ffd78fd8c31b01a7651976d955bc371, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ec:fc:dc:da:8c:b8:1f:af:14:d8:3c:e4:32:
                    df:f0:9e:4d:b4:39:22:04:a1:ae:bd:6a:a8:b9:0d:
                    6a:fb:47:da:7b:f0:9e:95:bc:af:19:ae:b8:d5:2b:
                    e5:bc:3a:c8:87:36:fe:38:d6:be:0c:ab:b9:0b:15:
                    cc:a9:f9:47:10:1f:11:9d:a4:84:e8:7d:a3:e6:da:
                    c8:f8:f7:56:11:40:d3:78:de:12:2d:a0:e4:7a:85:
                    cd:c5:b4:85:01:7d:9c:03:cb:17:ce:b6:be:03:4d:
                    ef:9f:be:01:71:a8:81:86:5f:d6:d3:83:4d:83:f8:
                    4f:c2:97:1a:12:d7:c6:77:37:19:5a:3a:0b:ea:5a:
                    24:37:7e:fb:45:e0:98:d4:08:f9:23:b8:76:3d:c8:
                    67:7b:f9:c8:a0:3a:a9:77:8f:97:1d:a0:e5:65:dd:
                    a0:62:1d:e4:72:95:1c:be:0d:ec:57:bc:d3:61:27:
                    cc:50:cf:7e:98:3a:d0:f7:5b:0e:c7:c4:7e:e6:33:
                    9b:cd:4b:9b:2b:44:24:b0:a6:a0:f6:72:b6:67:0c:
                    e9:5d:dd:ba:b6:7f:17:7f:7b:3d:01:e6:ff:52:83:
                    95:4f:bd:58:7f:e0:ed:24:2a:2d:f9:78:2e:a4:e2:
                    d9:d4:91:f7:e8:fe:6b:b1:93:06:fe:d7:f3:30:40:
                    ee:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:DA:D7:43:BC:31:40:D2:F3:85:2A:0C:81:74:EE:A2:D4:36:53:74
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b3605182-73be-4b14-a693-b70c018bdd57.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.171.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a5:88:65:cf:54:97:34:bd:02:98:00:ee:f7:a8:8c:60:79:cb:
         7d:d7:89:bb:90:5e:2b:13:f9:30:62:09:5f:6b:1f:ab:88:ce:
         42:ce:9a:d9:6e:dd:8a:89:12:39:60:65:cc:6a:01:57:bf:b9:
         2c:bf:23:7c:5d:f9:de:06:e0:ce:c9:60:aa:5e:0b:ed:eb:de:
         ee:96:86:60:3c:3a:95:40:50:7f:d2:8b:9f:4a:f4:46:24:4b:
         7c:32:85:e2:8b:86:43:73:ca:b5:c5:87:98:11:39:a1:b9:fe:
         29:93:72:2c:91:0f:82:53:7b:9f:4a:be:bb:0c:61:7d:1e:2c:
         41:cd:6c:35:ad:78:f5:1e:5e:33:f5:a3:09:fb:ca:98:08:fe:
         f5:02:5b:53:3d:c2:2b:9d:91:46:30:9f:d2:60:47:ca:f7:32:
         57:08:18:91:f6:8e:6d:21:fe:81:e4:01:f3:91:88:98:ce:ec:
         94:46:5d:ac:39:6c:0e:0a:f2:87:60:7f:f4:e6:81:b8:d7:d0:
         d1:5f:b5:eb:ad:d5:70:3a:a9:dd:bd:b5:e6:54:46:b3:87:22:
         d9:57:24:1f:e6:55:94:10:fd:d9:19:90:0f:bd:97:72:77:64:
         30:d1:e9:48:96:7d:02:e5:9f:6b:42:43:ea:8d:4e:f3:85:53:
         53:28:2a:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:25:34 2026 by rpki-client