Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e60c18b6-7b59-44c1-bee6-51171ae499bf.roa
File:                     e60c18b6-7b59-44c1-bee6-51171ae499bf.roa (raw, json)
Hash identifier:          ck18xWFhe/Mkn9plhfYCdy+PRZydXmjBKDGLRmet+mE=
Subject key identifier:   EE:BE:06:46:ED:7A:B9:6C:84:BC:D7:24:D3:8D:C2:5D:94:87:D5:AE
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       017E7FAC6D0C5D3954394C9C0F576624D105A5B8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e60c18b6-7b59-44c1-bee6-51171ae499bf.roa
Signing time:             Mon 22 Jun 2026 02:02:23 +0000
ROA not before:           Mon 22 Jun 2026 02:02:23 +0000
ROA not after:            Sun 20 Sep 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        130.176.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:7e:7f:ac:6d:0c:5d:39:54:39:4c:9c:0f:57:66:24:d1:05:a5:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun 22 02:02:23 2026 GMT
            Not After : Sep 20 23:59:59 2026 GMT
        Subject: serialNumber=c41e3e5325700b60d547fb0d6d6b947e89c8425cc9ffb128d26fa0b5e3c78365, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:53:c5:2a:3e:90:ce:d3:1d:13:a5:bc:7a:7a:
                    57:1e:b7:d0:78:b4:60:ac:23:04:4e:36:d2:77:b9:
                    6d:08:c1:bc:1a:b4:b0:fd:50:58:b3:cd:10:58:be:
                    cb:8b:d0:16:da:f0:6a:7c:33:65:93:0c:0f:83:d3:
                    41:b8:0b:1a:9f:d3:ca:c3:55:a1:08:53:fe:a5:46:
                    04:ae:1c:51:7a:9f:91:f4:db:ac:c6:05:46:49:2c:
                    61:43:37:f2:6d:99:22:a7:18:6e:8d:bc:48:ea:80:
                    97:3a:24:a9:a2:53:ce:66:ba:e8:ab:da:49:97:f1:
                    7f:a4:14:94:f9:1d:0a:63:cc:46:ca:95:00:f0:18:
                    17:79:2a:9d:81:10:af:40:9d:de:3e:c7:62:83:5d:
                    b4:82:7c:51:2a:17:a9:82:32:be:7a:62:22:a8:8d:
                    04:b8:6b:dd:da:5c:7a:80:08:5a:d4:d1:9d:41:71:
                    00:7a:a8:5a:d4:c5:1e:52:30:6f:dd:92:4a:35:70:
                    56:0e:5a:f9:e4:a3:51:f2:6d:80:3e:88:eb:2d:ce:
                    27:03:a9:6a:3f:be:f7:47:8b:06:7f:fb:7c:3d:cb:
                    99:ef:04:32:23:e9:de:0a:55:c6:46:ee:82:bd:b6:
                    68:af:da:51:c3:54:06:ff:53:69:0a:26:3d:1b:06:
                    eb:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:BE:06:46:ED:7A:B9:6C:84:BC:D7:24:D3:8D:C2:5D:94:87:D5:AE
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e60c18b6-7b59-44c1-bee6-51171ae499bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.176.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:4b:a5:ad:aa:d7:98:eb:cd:f5:66:98:a2:cc:82:c9:ff:7a:
         52:18:70:8d:c3:5a:90:fa:24:1c:87:71:8f:2d:da:a7:cd:46:
         68:45:7d:f6:32:54:6d:46:62:f6:58:27:fc:4f:63:ff:1e:15:
         cc:36:cc:64:87:25:af:f2:5e:a0:b1:96:1c:d5:6b:84:96:be:
         dc:e3:63:e7:f4:2c:ce:bf:e2:6f:43:b9:be:55:17:b1:d5:f1:
         56:c1:5b:6e:4f:ae:71:98:3d:29:ad:37:98:55:4d:6e:57:b7:
         cf:96:5d:2b:d7:9c:8a:7f:10:b2:7b:40:c0:af:ef:bc:a2:b1:
         d4:2a:b6:24:bc:17:50:aa:ee:30:cc:e2:b8:06:89:a7:73:cf:
         7c:dc:53:56:e6:59:06:64:6e:a6:cf:c4:17:05:6a:61:ea:24:
         28:bd:d1:64:07:72:ae:94:b6:8d:bd:07:a1:f3:1f:ec:7a:95:
         3c:37:93:dc:7f:3f:54:50:46:b9:c3:8e:91:11:f4:7e:0c:eb:
         77:dd:0d:74:dc:c4:c5:79:6f:fa:58:86:2b:32:af:98:c4:d2:
         1e:10:a0:e5:06:7d:42:b9:b2:f7:ab:61:cd:ca:94:67:4f:60:
         b3:c0:b4:0d:61:07:71:85:7a:54:4f:2a:ad:bf:59:a9:d6:0a:
         79:d1:61:46
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUAX5/rG0MXTlUOUycD1dmJNEFpbgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNjIyMDIwMjIzWhcNMjYwOTIwMjM1OTU5
WjB6MUkwRwYDVQQFE0BjNDFlM2U1MzI1NzAwYjYwZDU0N2ZiMGQ2ZDZiOTQ3ZTg5
Yzg0MjVjYzlmZmIxMjhkMjZmYTBiNWUzYzc4MzY1MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCeU8UqPpDO0x0Tpbx6elcet9B4tGCsIwRONtJ3uW0Iwbwa
tLD9UFizzRBYvsuL0Bba8Gp8M2WTDA+D00G4Cxqf08rDVaEIU/6lRgSuHFF6n5H0
26zGBUZJLGFDN/JtmSKnGG6NvEjqgJc6JKmiU85muuir2kmX8X+kFJT5HQpjzEbK
lQDwGBd5Kp2BEK9And4+x2KDXbSCfFEqF6mCMr56YiKojQS4a93aXHqACFrU0Z1B
cQB6qFrUxR5SMG/dkko1cFYOWvnko1HybYA+iOstzicDqWo/vvdHiwZ/+3w9y5nv
BDIj6d4KVcZG7oK9tmiv2lHDVAb/U2kKJj0bBuuFAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU7r4GRu16uWyEvNck043CXZSH1a4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2U2MGMxOGI2LTdiNTktNDRjMS1iZWU2LTUxMTcxYWU0OTliZi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBACCsCcwDQYJKoZIhvcNAQELBQADggEBADVLpa2q15jrzfVmmKLMgsn/elIY
cI3DWpD6JByHcY8t2qfNRmhFffYyVG1GYvZYJ/xPY/8eFcw2zGSHJa/yXqCxlhzV
a4SWvtzjY+f0LM6/4m9Dub5VF7HV8VbBW25PrnGYPSmtN5hVTW5Xt8+WXSvXnIp/
ELJ7QMCv77yisdQqtiS8F1Cq7jDM4rgGiadzz3zcU1bmWQZkbqbPxBcFamHqJCi9
0WQHcq6Uto29B6HzH+x6lTw3k9x/P1RQRrnDjpER9H4M63fdDXTcxMV5b/pYhisy
r5jE0h4QoOUGfUK5sverYc3KlGdPYLPAtA1hB3GFelRPKq2/WanWCnnRYUY=
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:31:30 2026 by rpki-client