Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0d4c6126-3837-4c4b-bcdc-9b8a57a8f8d3.roa
File:                     0d4c6126-3837-4c4b-bcdc-9b8a57a8f8d3.roa (raw, json)
Hash identifier:          A2SWgMOkv3R8+oRd8JUh3RnAMRcYeG5y2GFiyJIJ+Cs=
Subject key identifier:   8E:0D:22:6A:34:96:57:DE:2C:DA:36:92:68:E5:2A:7F:0E:04:7D:B1
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3A3642EFCD3BC0998F8BB4D21B38398C69C68BD5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0d4c6126-3837-4c4b-bcdc-9b8a57a8f8d3.roa
Signing time:             Sat 21 Feb 2026 01:21:02 +0000
ROA not before:           Sat 21 Feb 2026 01:21:02 +0000
ROA not after:            Fri 22 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        130.176.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:36:42:ef:cd:3b:c0:99:8f:8b:b4:d2:1b:38:39:8c:69:c6:8b:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 21 01:21:02 2026 GMT
            Not After : May 22 23:59:59 2026 GMT
        Subject: serialNumber=c519763655ac9275c80b971e200948d230d6019563401034e26739b4d476017a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:b8:cf:95:b2:4f:72:f3:41:77:cf:45:58:14:
                    56:c7:0f:90:81:41:59:cd:5f:64:60:02:a6:78:0f:
                    01:73:f8:50:a7:51:8a:3f:72:67:64:8e:69:64:7e:
                    70:45:c6:84:de:df:1a:b0:55:be:30:aa:ca:ba:bf:
                    4d:04:12:a6:f2:4f:d0:26:0b:0c:19:3f:20:65:dc:
                    77:7d:fb:0f:28:f0:b8:90:70:e4:a7:6c:ee:77:3b:
                    15:20:5a:cc:0f:6e:27:1d:f8:29:6f:8d:4e:39:d5:
                    59:65:3b:90:85:2d:08:71:30:f3:de:57:48:7e:7d:
                    00:53:51:0e:c2:76:3c:20:80:86:b4:2f:70:3e:38:
                    39:7e:61:97:13:9d:3c:bf:52:b0:c2:3e:78:f2:9d:
                    0d:cb:51:07:81:c5:13:35:56:5d:f8:96:dc:09:f3:
                    a8:39:81:6d:55:f4:4d:4e:d6:81:9c:8b:a9:68:25:
                    98:56:60:dd:1b:74:a7:54:8f:4f:6e:ba:30:68:48:
                    4f:3a:ed:f6:a7:ab:c1:e3:b6:3f:6b:3a:b5:d8:cc:
                    28:d6:f0:4b:5f:9d:6e:da:12:ba:75:85:22:36:90:
                    15:22:fa:e5:df:97:e6:de:0c:08:f8:c1:87:37:5a:
                    5b:88:cf:52:05:eb:de:69:7a:4c:1d:cb:b7:5a:ca:
                    6b:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:0D:22:6A:34:96:57:DE:2C:DA:36:92:68:E5:2A:7F:0E:04:7D:B1
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0d4c6126-3837-4c4b-bcdc-9b8a57a8f8d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.176.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:9b:aa:24:94:e5:76:a2:a0:7e:f4:40:ea:0d:b6:55:51:2c:
         e0:d2:90:e5:50:21:ad:ea:d8:74:aa:65:c1:22:dd:6d:0a:24:
         73:00:ae:75:4e:5a:11:28:f1:dc:de:95:0b:12:cf:cd:14:e2:
         b1:a7:fb:4e:2f:b6:ea:67:58:89:15:55:46:ce:4a:ff:be:7f:
         63:16:4e:33:d8:75:7f:68:60:27:ee:8b:1b:70:36:8c:9b:c1:
         6a:cd:6e:60:36:7d:5d:48:1c:13:03:e2:7b:c3:17:f0:ce:a2:
         7f:a0:79:a4:ce:7f:87:44:cc:da:22:1c:4f:6a:13:ed:b5:49:
         c8:d1:26:08:20:fc:fc:02:03:02:3e:92:61:a1:5d:fa:69:95:
         2f:fe:58:da:12:2b:c8:72:58:4f:fd:d3:82:c5:a3:60:57:0f:
         9c:66:2a:bc:76:5c:32:5b:ee:db:65:08:1f:f6:e2:e1:03:34:
         10:70:88:83:de:0a:27:17:45:44:90:f1:9c:a7:e3:4c:fa:b3:
         bd:fc:fe:41:b1:8c:d8:ee:f2:80:bc:27:90:ff:92:2e:89:89:
         e2:74:fc:19:b3:1a:e1:99:0e:c5:f7:a9:93:e5:9b:85:e2:16:
         92:66:eb:9f:21:bb:d6:00:40:8c:56:ff:eb:bc:a2:43:2b:c2:
         f6:1d:28:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:15:13 2026 by rpki-client