Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1302a6d6-e525-4772-bf98-7fdf96558068.roa
File:                     1302a6d6-e525-4772-bf98-7fdf96558068.roa (raw, json)
Hash identifier:          gU+nMms2XyYmG9lwvnS3jvbthxeSAmsfou/lsLc66Ho=
Subject key identifier:   22:17:C3:21:8E:E5:05:C2:02:46:CA:F5:34:EE:A5:E3:0E:4B:3E:DC
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7E722BC8595934818A3A8240A05A957E988FFF59
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1302a6d6-e525-4772-bf98-7fdf96558068.roa
Signing time:             Sat 21 Feb 2026 00:30:46 +0000
ROA not before:           Sat 21 Feb 2026 00:30:46 +0000
ROA not after:            Fri 22 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        130.176.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:72:2b:c8:59:59:34:81:8a:3a:82:40:a0:5a:95:7e:98:8f:ff:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 21 00:30:46 2026 GMT
            Not After : May 22 23:59:59 2026 GMT
        Subject: serialNumber=afcfea18b51c8e250e393449ee980b79fdafc8cb97e8f01185442b84ba999601, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:15:6f:2d:64:ba:7b:6f:dd:2f:44:87:37:f0:
                    5d:81:db:22:29:65:9e:fe:aa:a5:d1:50:e5:8f:dc:
                    e0:62:d5:b1:0a:0c:f5:99:6f:4e:66:27:ea:af:5b:
                    0e:d6:25:1d:56:9c:b5:38:2e:7e:5f:58:71:ee:23:
                    b7:24:1c:d9:48:22:ca:9a:0b:c1:15:2a:66:f2:6b:
                    17:27:2d:65:99:14:34:e9:c8:83:2c:ab:ff:bf:9d:
                    78:7d:f6:05:d7:7e:90:31:12:48:7b:4a:1b:31:b9:
                    88:c7:08:41:a4:ac:ec:8a:05:74:25:d6:f0:7d:d0:
                    80:94:9d:0d:5f:b6:2e:0f:25:78:81:45:f9:52:c9:
                    52:bf:1f:93:28:b5:cf:d8:94:6e:32:fd:c5:88:29:
                    66:c1:de:44:3c:8d:36:c8:d2:fe:c4:ab:b5:7f:6e:
                    5b:5e:a8:4c:78:7a:1a:dc:7f:0f:96:c9:71:b3:5d:
                    1a:fc:92:31:b3:14:af:1c:e5:57:b6:ae:e8:bd:e8:
                    04:84:7e:79:7e:db:31:7d:12:5e:e2:fe:86:d9:38:
                    f3:4e:61:0b:fb:ed:6f:05:71:58:5e:0d:0f:71:17:
                    d7:90:f0:01:f4:97:4a:f5:bd:e9:38:41:0e:88:31:
                    c5:53:94:1d:26:49:f0:5a:b1:56:22:46:a7:80:4a:
                    a7:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:17:C3:21:8E:E5:05:C2:02:46:CA:F5:34:EE:A5:E3:0E:4B:3E:DC
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1302a6d6-e525-4772-bf98-7fdf96558068.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.176.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:99:83:5a:46:f1:9c:26:71:ef:e2:23:ee:73:39:b6:ae:0f:
         94:7e:99:e0:ce:d4:1e:f4:ca:02:58:b5:8c:1c:0a:8d:0b:35:
         ff:1f:73:0e:70:36:9d:08:58:67:d4:47:ae:52:86:a9:ac:1a:
         12:1e:7d:7f:69:08:58:68:26:de:84:63:c7:85:08:f5:5d:04:
         cb:4e:07:d4:99:5a:db:ee:85:00:67:98:c7:61:58:40:11:94:
         05:f9:1b:08:f4:db:d4:fb:93:54:dc:40:53:31:fa:89:51:80:
         44:40:15:e3:d0:ea:d6:15:7f:de:ee:9e:b9:fe:30:f9:9c:05:
         79:c8:23:23:6d:cf:74:32:5f:88:31:d9:8a:9b:52:0b:7b:85:
         25:07:84:a3:f5:f0:c6:7e:4c:4b:af:f9:53:e3:78:f8:5e:00:
         4a:47:d9:0b:72:24:5e:ee:8c:8e:69:1e:6d:59:12:23:74:6c:
         5a:5d:fe:04:1f:e9:fb:1d:a6:46:22:6c:a2:1b:d7:7c:68:4c:
         c2:3f:b5:74:c6:30:7b:4b:df:cb:f0:3f:30:1b:fe:4c:bd:c4:
         74:ae:97:5e:a8:72:34:80:ad:1b:67:df:90:72:1a:b6:8b:74:
         10:8b:80:36:80:29:74:be:af:b2:eb:c5:6b:55:93:ee:bd:19:
         00:16:aa:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:55:03 2026 by rpki-client