Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1ed85c13-c1cc-41c0-90f9-bdf1dab4f6b6.roa
File:                     1ed85c13-c1cc-41c0-90f9-bdf1dab4f6b6.roa (raw, json)
Hash identifier:          CyrM4zVVmMQBkbpQd5OszJvF8mPOWeev7qWtrk4iZvg=
Subject key identifier:   32:D3:D9:3D:5E:6B:C3:6F:65:FE:3F:72:52:7D:FD:5B:97:32:7A:ED
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7276772505368E047802D3D9EA24A5C3DF8FB5ED
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1ed85c13-c1cc-41c0-90f9-bdf1dab4f6b6.roa
Signing time:             Sat 21 Feb 2026 00:41:27 +0000
ROA not before:           Sat 21 Feb 2026 00:41:27 +0000
ROA not after:            Fri 22 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        130.176.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:76:77:25:05:36:8e:04:78:02:d3:d9:ea:24:a5:c3:df:8f:b5:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 21 00:41:27 2026 GMT
            Not After : May 22 23:59:59 2026 GMT
        Subject: serialNumber=30aac204972480c6751b4422ed837d03be314432b1de674a578bd2b3afe4e276, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:14:9f:6c:f4:d3:ae:e4:8d:f1:c1:4b:64:05:
                    b2:b3:38:5a:6d:80:71:51:e7:b4:50:f6:8d:4f:30:
                    a8:c8:df:a7:81:96:f5:27:40:60:2b:56:e6:b9:5d:
                    44:d5:9a:d9:bd:60:77:13:b1:73:68:3e:44:85:24:
                    3a:44:a9:23:55:bf:8f:0d:cd:06:cd:4c:1e:6a:10:
                    70:9b:f0:06:a2:47:a6:5a:c0:94:b9:3c:c4:dd:01:
                    4c:a6:0d:67:d6:e4:37:12:e1:00:8d:f5:eb:fe:c2:
                    e8:c1:92:69:45:bc:67:99:24:d7:2f:d4:db:6a:cc:
                    b6:1b:92:32:ef:bc:79:8e:b1:9c:16:46:6a:0e:de:
                    66:45:bb:22:86:fc:64:fd:2f:b6:f4:d7:37:0a:bc:
                    69:74:1c:9e:e5:56:1e:d1:f1:08:7b:2b:a6:04:14:
                    49:2f:60:6a:e0:15:15:c4:29:63:fe:e0:51:f9:ec:
                    6d:a0:b8:89:4e:40:4a:e1:51:4b:e7:dc:71:7c:e5:
                    36:d7:ae:cb:aa:ca:b7:4a:23:e8:47:07:29:1d:ed:
                    58:17:4a:f1:fb:b1:ea:f7:b7:42:c4:bd:5a:e9:5f:
                    ae:df:07:6b:fd:0b:52:63:8c:5b:75:3b:19:71:87:
                    bf:98:5d:f2:74:6b:08:14:dc:f4:91:c6:22:bf:d1:
                    f6:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:D3:D9:3D:5E:6B:C3:6F:65:FE:3F:72:52:7D:FD:5B:97:32:7A:ED
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1ed85c13-c1cc-41c0-90f9-bdf1dab4f6b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.176.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         a5:4e:4d:0a:7c:ea:6a:12:61:cc:ac:9b:6b:4f:cf:b4:16:ae:
         07:78:4d:46:a6:15:ff:25:83:fd:dd:4b:2b:cb:21:70:00:ef:
         44:72:5d:af:15:64:7d:25:1e:08:38:95:b6:8a:2d:d5:fb:46:
         31:a8:26:a4:2d:63:f5:89:93:87:a8:58:80:0a:ba:fd:b0:13:
         16:d0:c7:ee:f6:ec:34:ad:a5:25:a0:a7:ef:12:4c:57:42:5d:
         c4:3a:33:3a:70:23:c6:16:a4:f3:8e:89:d3:cd:90:c8:3b:f4:
         8c:dd:9c:06:12:7e:90:3f:06:48:e6:4b:c8:50:1d:90:d4:de:
         63:94:8d:33:85:fc:5d:7d:b1:b2:cc:f9:d6:ed:20:ad:0a:6d:
         a7:a3:2e:9b:aa:e2:fc:eb:ad:06:85:b6:31:17:09:b5:df:46:
         8a:b4:0a:f2:92:32:62:9a:5d:0f:ec:35:e5:c1:b3:65:03:a4:
         34:ee:33:88:d1:f6:3d:86:94:8b:4c:ee:0c:53:87:77:60:b8:
         97:a2:e1:e1:da:20:36:f4:05:33:2e:71:58:fc:7b:33:4f:8a:
         d0:12:45:5f:0b:2e:3b:db:29:a8:7b:d4:d8:a5:12:8a:2c:99:
         16:67:e8:b2:01:a8:f3:35:c9:d8:e8:37:46:94:f6:64:1e:c0:
         c5:7f:09:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:08:41 2026 by rpki-client