Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1a10c226-5b73-46bd-80ab-5700942fb218.roa
File:                     1a10c226-5b73-46bd-80ab-5700942fb218.roa (raw, json)
Hash identifier:          o1u0pFST8OCGrr7G37yv4ZqEvUUlSMwy0d/ae5a22hc=
Subject key identifier:   CE:5C:7C:8E:B2:57:6B:C9:79:00:E8:40:47:22:75:FE:CF:36:AE:A4
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       412CD5C9466C5DF9BC4FCE53C1186F43876D0ACC
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1a10c226-5b73-46bd-80ab-5700942fb218.roa
Signing time:             Fri 05 Jun 2026 01:47:15 +0000
ROA not before:           Fri 05 Jun 2026 01:47:15 +0000
ROA not after:            Thu 03 Sep 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        130.176.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:2c:d5:c9:46:6c:5d:f9:bc:4f:ce:53:c1:18:6f:43:87:6d:0a:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun  5 01:47:15 2026 GMT
            Not After : Sep  3 23:59:59 2026 GMT
        Subject: serialNumber=34ccd512fb7b7d7143ef1d8c85b9abfe12e2907ab7c7ba22860bca801aea58d6, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:07:2b:a1:76:11:03:b5:da:a6:80:d6:0e:fc:
                    f4:ff:9b:7d:79:94:af:a0:0b:4e:cb:2f:a9:10:a8:
                    04:76:3d:d9:e6:6c:5d:69:f7:50:0a:10:72:9c:49:
                    5e:1f:78:2d:38:fa:7d:54:b0:bc:f3:e0:14:2c:fd:
                    77:e9:de:a6:e3:22:6e:be:50:7f:83:e8:8b:3b:74:
                    05:33:bb:67:71:f5:85:88:27:0f:5e:cb:c2:b7:ee:
                    df:62:50:70:a6:fc:2c:e0:29:03:7b:f4:37:7e:00:
                    25:3b:ca:39:b8:27:e0:6d:af:45:39:9c:91:2a:b2:
                    e2:0e:18:98:32:11:27:c4:b2:00:82:9e:9d:af:9d:
                    8e:65:d3:75:49:24:24:7d:15:fb:30:3c:3a:07:26:
                    2a:0d:40:3f:45:1d:fe:50:36:14:bd:8c:9d:50:b8:
                    7f:14:f2:3c:6a:6b:3d:64:39:81:5c:bd:bb:1c:06:
                    2f:2b:1b:02:06:86:47:68:65:1b:35:9a:44:55:04:
                    43:f5:14:4e:2e:d5:3e:6e:bf:f7:71:d7:e7:1a:a9:
                    6f:17:11:51:00:bf:82:66:36:ed:15:fa:ee:b6:ec:
                    4e:b3:b7:8b:67:fa:c0:a4:45:c9:72:d5:e4:42:1b:
                    17:f5:ad:92:57:4d:36:f4:0f:9b:b7:60:7f:26:7c:
                    e5:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:5C:7C:8E:B2:57:6B:C9:79:00:E8:40:47:22:75:FE:CF:36:AE:A4
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1a10c226-5b73-46bd-80ab-5700942fb218.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.176.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:ac:8a:f3:34:1a:11:52:4b:ea:74:80:00:12:52:8d:5e:8f:
         52:0c:90:23:ef:e7:f9:36:19:23:25:7f:b6:b2:ec:72:43:0d:
         03:98:42:41:f6:a0:aa:e6:3c:c0:a5:8b:45:ca:cb:8f:14:2f:
         d8:51:ff:33:8c:6d:26:1f:85:cd:32:d0:17:5c:01:25:69:c3:
         97:28:5f:b6:32:3d:ea:cd:b2:02:45:c8:1f:8d:ac:15:68:f1:
         94:26:fe:a6:17:5e:0e:4e:1c:18:c2:bc:b8:09:d0:60:41:64:
         89:4d:e3:32:b9:8e:d0:b3:10:19:fb:f6:cf:82:52:03:6e:43:
         30:79:5d:37:d0:10:93:c8:55:46:14:2d:86:9f:51:37:d2:e6:
         fa:7f:81:a6:18:c7:44:12:c1:b6:e1:47:a3:d3:a7:38:6e:9a:
         e7:58:9a:4b:d8:5d:d2:4b:5d:59:08:f7:e1:32:2c:cc:ba:2e:
         4a:48:44:37:7a:81:d9:f8:e9:f0:5d:1e:5e:4c:a9:c8:55:cc:
         59:d2:06:b9:37:3c:31:3a:19:b5:33:ed:39:d9:e4:6b:33:23:
         82:5e:44:20:8e:d2:16:2a:aa:24:bc:25:25:d6:a8:9d:03:7c:
         1b:5e:bb:1d:d1:19:da:6d:1e:09:ce:02:ac:98:8d:8f:76:e0:
         5e:cb:7b:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:39:50 2026 by rpki-client