Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/62002be7-3643-401f-a14c-bda500967f78.roa
File:                     62002be7-3643-401f-a14c-bda500967f78.roa (raw, json)
Hash identifier:          /fmnV1Hd2ucHN/W8N9XMsMlas9feH9Mtci48qgodlew=
Subject key identifier:   93:8A:27:D1:3E:89:D4:2D:95:5E:D5:7F:DF:AE:B5:34:83:A4:28:96
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       076E497806222AE1E959191AF38396E25867BE70
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/62002be7-3643-401f-a14c-bda500967f78.roa
Signing time:             Sat 21 Feb 2026 01:41:10 +0000
ROA not before:           Sat 21 Feb 2026 01:41:10 +0000
ROA not after:            Fri 22 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        130.176.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:6e:49:78:06:22:2a:e1:e9:59:19:1a:f3:83:96:e2:58:67:be:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 21 01:41:10 2026 GMT
            Not After : May 22 23:59:59 2026 GMT
        Subject: serialNumber=b84065294eee9f8d87ecff8c3732ce2673cd2627bdea11986f9712cccd7e56f8, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:85:20:7f:1b:77:61:da:23:e9:20:49:64:00:
                    38:67:af:70:a9:c6:65:a3:c9:95:77:34:41:5b:d4:
                    41:71:b6:86:78:e9:bb:ef:b6:57:2d:b9:d6:f7:07:
                    9a:3c:e9:b7:cf:02:47:0e:67:e7:fb:dd:19:b5:20:
                    42:b2:35:80:7d:c4:7c:62:c3:61:9d:f1:d3:f1:c1:
                    a9:e8:08:0d:5c:f4:0a:3f:24:1f:67:da:57:53:6a:
                    83:12:96:19:b8:c5:b1:5d:d8:1c:a1:f2:ff:f0:f6:
                    8a:73:17:9e:f3:f2:3d:d3:0c:3a:57:56:2a:7e:a2:
                    07:b2:6d:ec:c0:65:6f:62:8e:23:1c:f7:68:90:2b:
                    81:19:db:7a:4e:f6:eb:27:e8:3e:b1:1d:a0:3f:1d:
                    a6:22:47:03:44:b1:d6:95:eb:14:f9:bf:5e:61:f0:
                    17:5f:5e:d6:08:12:8a:c2:68:51:2f:c7:55:21:6c:
                    5d:c1:17:09:09:13:5d:ab:8b:35:71:c4:39:a9:ad:
                    4b:73:db:96:5a:6e:f9:f5:2b:ac:04:8c:96:bb:25:
                    f3:ca:34:ea:a6:27:5d:b7:8c:ba:f2:cd:75:4f:ff:
                    5e:39:b7:0e:15:84:cb:5f:55:0b:7f:90:69:05:6d:
                    8c:5a:95:6b:23:d2:ca:3b:cc:6b:c8:28:2e:7c:ae:
                    32:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:8A:27:D1:3E:89:D4:2D:95:5E:D5:7F:DF:AE:B5:34:83:A4:28:96
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/62002be7-3643-401f-a14c-bda500967f78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.176.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:b4:fe:fc:e0:5d:68:db:5d:0d:c8:f9:98:70:b9:d2:d3:be:
         dc:d8:d6:ce:d3:a5:be:e4:1b:8a:48:22:27:fc:92:c1:81:3e:
         54:45:9d:15:bc:5b:09:98:25:88:84:1e:da:84:bf:c0:11:06:
         f1:23:ee:74:bf:8c:d9:0f:dd:1d:e5:3f:8e:08:04:df:2b:9a:
         a1:f6:f8:4b:c7:a0:45:fb:3e:0f:7b:30:30:f8:48:a2:a9:89:
         c0:3d:bc:89:d3:47:61:6b:44:53:8e:80:80:9a:aa:9b:90:5a:
         dc:93:fd:ab:df:08:40:39:11:26:38:94:48:21:26:b1:b9:70:
         71:39:04:c7:80:c0:64:b5:5b:bf:50:cb:6f:9f:3a:ab:28:b1:
         b2:73:b4:c7:dc:a9:bf:7c:91:c6:a6:ad:1d:b2:d4:c0:ca:9b:
         c4:16:e8:fa:e1:41:6e:8c:e6:62:df:4f:00:fb:c4:e2:53:ab:
         e9:1d:58:99:96:ce:d1:03:da:f8:b3:05:17:6d:06:c2:27:5a:
         53:48:d6:3d:d5:28:3c:d0:67:ac:a1:74:9f:94:54:00:d2:1c:
         b9:a8:a2:4b:64:5f:3b:ff:12:f9:7b:b6:73:bd:a4:f8:40:11:
         20:a8:99:2d:62:33:3d:eb:95:00:3f:14:63:9a:d3:fc:e5:80:
         36:05:91:ed
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUB25JeAYiKuHpWRka84OW4lhnvnAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjIxMDE0MTEwWhcNMjYwNTIyMjM1OTU5
WjB6MUkwRwYDVQQFE0BiODQwNjUyOTRlZWU5ZjhkODdlY2ZmOGMzNzMyY2UyNjcz
Y2QyNjI3YmRlYTExOTg2Zjk3MTJjY2NkN2U1NmY4MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCxhSB/G3dh2iPpIElkADhnr3CpxmWjyZV3NEFb1EFxtoZ4
6bvvtlctudb3B5o86bfPAkcOZ+f73Rm1IEKyNYB9xHxiw2Gd8dPxwanoCA1c9Ao/
JB9n2ldTaoMSlhm4xbFd2Byh8v/w9opzF57z8j3TDDpXVip+ogeybezAZW9ijiMc
92iQK4EZ23pO9usn6D6xHaA/HaYiRwNEsdaV6xT5v15h8BdfXtYIEorCaFEvx1Uh
bF3BFwkJE12rizVxxDmprUtz25Zabvn1K6wEjJa7JfPKNOqmJ123jLryzXVP/145
tw4VhMtfVQt/kGkFbYxalWsj0so7zGvIKC58rjLBAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUk4on0T6J1C2VXtV/3661NIOkKJYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzYyMDAyYmU3LTM2NDMtNDAxZi1hMTRjLWJkYTUwMDk2N2Y3OC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBACCsNMwDQYJKoZIhvcNAQELBQADggEBAFi0/vzgXWjbXQ3I+ZhwudLTvtzY
1s7Tpb7kG4pIIif8ksGBPlRFnRW8WwmYJYiEHtqEv8ARBvEj7nS/jNkP3R3lP44I
BN8rmqH2+EvHoEX7Pg97MDD4SKKpicA9vInTR2FrRFOOgICaqpuQWtyT/avfCEA5
ESY4lEghJrG5cHE5BMeAwGS1W79Qy2+fOqsosbJztMfcqb98kcamrR2y1MDKm8QW
6PrhQW6M5mLfTwD7xOJTq+kdWJmWztED2vizBRdtBsInWlNI1j3VKDzQZ6yhdJ+U
VADSHLmooktkXzv/Evl7tnO9pPhAESComS1iMz3rlQA/FGOa0/zlgDYFke0=
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:15:18 2026 by rpki-client