Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/33e7b450-b1f2-4312-8bee-eee7aae83c2b.roa
File:                     33e7b450-b1f2-4312-8bee-eee7aae83c2b.roa (raw, json)
Hash identifier:          WZw2unqC9YJlW7B5g1WcAvotsdB6qyoWpSukp2Rr+yA=
Subject key identifier:   01:E4:FC:3F:95:76:A3:3B:93:EF:26:B6:4F:69:3F:5D:F5:9D:34:FF
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       627746938845CBC895A7764427D4B5B3F278343D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/33e7b450-b1f2-4312-8bee-eee7aae83c2b.roa
Signing time:             Sat 21 Feb 2026 01:21:06 +0000
ROA not before:           Sat 21 Feb 2026 01:21:06 +0000
ROA not after:            Fri 22 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        130.176.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:77:46:93:88:45:cb:c8:95:a7:76:44:27:d4:b5:b3:f2:78:34:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 21 01:21:06 2026 GMT
            Not After : May 22 23:59:59 2026 GMT
        Subject: serialNumber=c645a9e509d0401f594a1d2109c99395eef775f19f08b8d6c957b4cb8c46a6be, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f2:30:86:b3:4e:0b:62:7d:55:5d:9a:ce:6d:
                    8a:d4:97:cc:64:91:9c:f0:72:bf:9e:09:0e:52:22:
                    09:d8:c9:e3:eb:66:bd:e7:fd:b2:29:81:87:fd:3a:
                    ff:1b:9b:fb:59:d7:16:4e:ab:95:36:ef:5e:1f:99:
                    af:c6:17:e2:86:0f:01:1e:56:39:0a:0a:4a:fd:d1:
                    4e:6c:fd:6f:5b:05:9c:21:2d:ff:6f:49:db:11:e1:
                    24:fc:dc:ec:c3:b7:34:67:d5:67:44:0c:24:a0:0c:
                    e2:39:3c:d3:d1:9f:7d:fb:d9:1c:d0:bb:57:6a:4b:
                    a2:7e:f0:8e:f4:97:6c:d2:d7:16:d9:19:37:a9:4f:
                    d0:c8:2a:2a:75:5f:b6:34:b3:f1:5c:08:e4:45:bb:
                    7c:98:84:2e:05:56:1d:55:68:68:e6:b2:bf:f1:06:
                    84:53:1a:b0:2d:50:aa:b8:9c:c6:c3:95:7b:96:b1:
                    98:80:75:43:61:5d:c6:d9:97:8b:45:e1:62:0a:a1:
                    3b:2a:49:63:0a:eb:89:11:03:71:28:80:bd:8f:8f:
                    c6:69:45:1d:ad:c9:8d:79:1d:26:8b:74:17:9d:90:
                    c1:5a:c7:12:2a:b7:0f:72:49:c0:d2:6b:56:05:41:
                    ad:e0:d4:c3:db:6b:65:20:e9:0f:f2:4a:1a:b9:84:
                    b3:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:E4:FC:3F:95:76:A3:3B:93:EF:26:B6:4F:69:3F:5D:F5:9D:34:FF
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/33e7b450-b1f2-4312-8bee-eee7aae83c2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.176.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:eb:cd:28:e1:3d:27:b3:6a:11:31:b5:6d:12:7d:63:11:3d:
         39:d8:c6:bd:12:cd:49:5c:99:5f:47:31:ae:60:ef:a8:c2:9a:
         26:6a:7f:2a:25:9d:a1:de:b4:b7:a3:eb:57:b0:1c:ad:31:02:
         20:9a:fb:c5:4c:be:9e:a1:2c:7c:d5:ce:99:98:ea:41:57:c3:
         c6:01:4a:df:b5:be:ff:69:ee:b4:3d:9c:a1:70:6c:8f:f5:6a:
         59:23:1c:9c:0f:90:c8:92:1a:7e:9d:f6:39:6d:cc:3b:01:76:
         40:40:a1:7d:d3:20:da:40:00:46:63:e0:6d:aa:fd:e0:73:e3:
         5d:2f:a7:6c:e5:6b:3d:df:43:f5:ef:1e:b8:1a:eb:bf:0c:f7:
         04:5a:cd:5b:49:dc:38:a7:9f:e5:ae:85:92:fb:a6:4d:5a:17:
         70:b9:45:3f:d7:fe:44:f8:14:8c:eb:b2:be:95:61:25:e5:b5:
         55:fa:b8:42:d8:e2:33:a9:17:c0:a0:d2:e8:f6:d6:8a:f3:2b:
         b6:02:59:63:2a:3a:a3:df:c5:e7:12:05:79:7a:8f:00:f9:4b:
         a9:92:dd:e7:d8:89:a4:6d:fa:44:de:30:0a:b1:3f:1a:fa:94:
         f6:f8:cc:b1:d4:8f:9d:b9:b6:f3:44:8c:8c:f0:37:3f:26:7c:
         46:22:8a:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:11:56 2026 by rpki-client