Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cbd13b89-cc77-4191-ab8d-32ccce05a4ff.roa
File:                     cbd13b89-cc77-4191-ab8d-32ccce05a4ff.roa (raw, json)
Hash identifier:          WthL6HVoQeumR17qLnJ4E5U0JpPM1M8fxjvCakRHdIU=
Subject key identifier:   85:EF:F6:8C:10:BC:E4:D0:F7:4F:D9:09:26:5A:70:12:76:5D:F0:AD
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7B070B054004E9DEE5D6A7814B20FD4948FA2249
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cbd13b89-cc77-4191-ab8d-32ccce05a4ff.roa
Signing time:             Sun 19 Jul 2026 00:00:08 +0000
ROA not before:           Sun 19 Jul 2026 00:00:08 +0000
ROA not after:            Sat 17 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        130.176.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:07:0b:05:40:04:e9:de:e5:d6:a7:81:4b:20:fd:49:48:fa:22:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 19 00:00:08 2026 GMT
            Not After : Oct 17 23:59:59 2026 GMT
        Subject: serialNumber=0253820a391092689dc12d4813ff61e4978e138eea26a18a4e04e369dda9f77c, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:0d:c0:fd:19:31:27:a6:9a:f1:4d:f6:79:04:
                    b8:b5:ad:7c:c4:b7:1f:f3:59:cb:43:ff:3c:14:a7:
                    27:ef:aa:ae:e7:63:92:ec:1d:09:bf:fa:fd:c7:2f:
                    ab:e1:4e:cd:d5:53:98:7f:79:a5:bc:c4:58:2c:89:
                    a3:cc:33:6f:88:ba:71:93:81:dd:99:0e:41:e4:d3:
                    61:30:d7:e9:0b:eb:59:d4:0b:cd:08:f8:28:94:bb:
                    5a:72:04:51:f1:0f:a6:02:8a:11:b2:47:41:68:c3:
                    22:b1:76:d0:96:32:62:cf:e0:61:09:4b:df:f3:19:
                    40:f8:97:f5:18:72:06:a2:d0:2a:23:43:3d:2f:84:
                    35:35:93:ac:81:e9:da:7b:b1:a1:7e:6c:d3:15:e6:
                    09:b7:80:83:6f:4c:68:d0:b3:8b:35:f6:52:fe:12:
                    25:99:1d:70:a4:8e:a8:48:0d:08:d5:f0:1b:1f:31:
                    78:36:c1:e6:c6:37:79:b9:54:6a:c6:7a:31:cd:29:
                    db:70:6c:da:ac:e2:97:57:55:9d:4b:f8:ec:d3:02:
                    a0:de:30:f4:ff:8c:d3:e3:af:65:54:0c:1d:b8:98:
                    f2:91:09:aa:f0:a1:9d:42:78:96:31:75:c1:90:55:
                    76:3a:67:b7:76:30:a0:6e:22:4e:5a:9a:75:de:39:
                    eb:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:EF:F6:8C:10:BC:E4:D0:F7:4F:D9:09:26:5A:70:12:76:5D:F0:AD
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cbd13b89-cc77-4191-ab8d-32ccce05a4ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.176.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:bf:e5:95:cf:7d:9f:29:60:8f:fe:d2:81:ed:ce:7b:cf:73:
         63:5a:40:6b:c5:8c:04:eb:c0:d0:40:7f:c2:19:34:5f:66:0c:
         7b:e1:e2:d8:ee:24:b7:62:cb:44:cd:67:a8:7e:02:a1:13:ca:
         97:b6:5d:56:55:cb:cb:27:a4:98:71:61:8a:93:97:65:17:c3:
         0a:92:67:fb:b6:27:bc:9e:eb:05:e0:5d:f2:42:36:8d:e9:a2:
         53:70:68:5a:7f:6e:81:96:01:50:0e:69:46:07:5b:b4:f3:9c:
         87:bf:62:ce:13:3c:e6:24:0c:1f:fc:ef:dc:0f:71:d5:16:2d:
         b6:d0:f6:80:a4:5f:a1:7e:25:11:c9:24:9b:53:1a:c7:e9:8d:
         bf:71:7c:36:1d:91:ea:cc:90:c2:ae:9f:d0:1a:cd:ef:81:28:
         79:9d:e5:f3:2c:e5:5f:3b:da:f6:f1:2e:3d:2f:e3:c5:df:36:
         00:b3:9d:8a:2e:8b:57:67:2c:47:3e:dc:47:cb:b8:0a:1c:69:
         32:ce:67:5c:2d:7f:6b:23:8c:91:f4:e4:4c:af:a9:d3:f2:fb:
         35:a2:5e:3a:65:c1:2c:27:7e:0d:1b:fc:96:05:28:22:f8:7d:
         59:56:22:d1:94:fe:c5:bf:81:55:93:02:cb:bd:dc:99:f3:e6:
         f2:7f:61:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:35:21 2026 by rpki-client