Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5b30c813-6ee9-4d86-a03e-63af7eafa022.roa
File:                     5b30c813-6ee9-4d86-a03e-63af7eafa022.roa (raw, json)
Hash identifier:          o57uMToRgiCUdmpGT2tCgzmE2VfOiwf96WjGrQ0Lkd8=
Subject key identifier:   06:EA:53:0A:71:2D:14:C4:18:25:4B:2A:9B:E3:A4:24:2D:F5:0F:E2
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       156C274C81CFC5D483D2C8AAAB7E842395D9F54E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5b30c813-6ee9-4d86-a03e-63af7eafa022.roa
Signing time:             Sat 21 Feb 2026 01:12:06 +0000
ROA not before:           Sat 21 Feb 2026 01:12:06 +0000
ROA not after:            Fri 22 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        130.176.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:6c:27:4c:81:cf:c5:d4:83:d2:c8:aa:ab:7e:84:23:95:d9:f5:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 21 01:12:06 2026 GMT
            Not After : May 22 23:59:59 2026 GMT
        Subject: serialNumber=7b6a1296110c1502cf89d83b1f62683f803e81c6d78977bebfb9a7955f4df1d0, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:35:c2:c8:f3:b8:68:d1:a8:98:31:3a:24:6c:
                    dc:4b:50:0c:eb:d7:64:c0:3c:23:ac:77:04:e0:45:
                    ac:b4:7c:9f:d6:46:86:7e:09:d6:85:c6:4c:44:76:
                    b3:15:ea:ef:02:f1:5f:7c:0c:33:b0:35:94:61:4e:
                    01:96:57:b6:f9:c9:e3:33:1c:b2:a2:22:f4:f0:94:
                    14:e0:59:98:e1:b9:b4:0a:f8:59:50:11:f5:36:c0:
                    e5:f9:d2:ed:1f:25:c3:97:11:70:93:2f:09:38:4a:
                    58:e3:64:57:c8:2b:47:92:a2:d0:d8:40:44:5e:cb:
                    ef:68:a2:62:b9:60:61:10:bc:47:c9:36:e1:be:c0:
                    1b:79:2c:44:a1:74:86:16:f1:0a:b4:db:b4:81:10:
                    44:a9:e5:7d:30:4d:82:81:d2:b7:7f:e8:17:cf:7b:
                    5b:ef:93:73:74:65:86:61:ae:ec:ee:97:a1:b0:bc:
                    4a:e5:2c:ed:9b:07:97:bb:fa:8a:63:5c:6c:a7:e6:
                    62:46:89:c9:6f:93:3b:9a:a6:ea:02:5a:30:c1:b0:
                    82:eb:76:f2:36:94:b0:20:2f:48:34:43:d0:f0:6d:
                    e1:04:67:a7:06:39:6c:97:08:a7:59:62:fc:58:2b:
                    1f:20:92:93:83:7f:c4:14:cc:46:b2:a4:ba:b2:66:
                    1c:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:EA:53:0A:71:2D:14:C4:18:25:4B:2A:9B:E3:A4:24:2D:F5:0F:E2
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5b30c813-6ee9-4d86-a03e-63af7eafa022.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.176.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:12:0c:d9:0d:c9:2a:99:8e:7b:d5:36:b2:1f:fe:27:f5:09:
         f6:4f:1b:5f:38:78:e2:71:18:e6:1a:10:cc:04:86:c1:55:22:
         d0:9c:f9:fd:dc:46:3a:60:ee:de:4f:8e:3a:88:15:3f:3c:16:
         25:d8:41:73:d1:43:43:f7:86:01:30:d9:02:5e:af:62:0b:13:
         04:26:3e:5d:16:8c:ca:df:eb:28:bc:6b:8a:68:7e:e0:c5:fd:
         98:46:82:a9:e0:0f:89:70:30:08:c9:49:2b:b2:18:16:b1:12:
         99:5c:b3:27:59:cb:47:51:8e:f5:66:85:c5:94:36:8d:48:41:
         82:e5:69:ae:22:4e:bc:13:3f:9a:3b:2c:db:09:94:15:5c:a9:
         4f:84:72:26:f0:e8:0c:e9:15:2a:91:37:8b:ca:23:1e:dc:22:
         36:a6:65:95:2e:ee:50:a7:0f:09:cb:36:30:58:f0:e7:b9:a7:
         91:9b:c5:66:25:b2:44:09:49:36:52:7b:69:8a:1f:98:a5:60:
         1d:28:09:41:8e:49:40:b7:36:6f:86:66:23:de:f3:b1:51:38:
         e1:84:f8:b4:fa:85:93:19:e5:96:0f:e6:77:18:7f:92:e6:7e:
         e7:fc:1c:f1:d9:94:70:7d:3b:bd:6b:48:9d:97:55:2f:19:71:
         ab:65:dd:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:14:18 2026 by rpki-client