Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6d68321f-0a06-47ba-8efd-5ee53ef2b9a3.roa
File:                     6d68321f-0a06-47ba-8efd-5ee53ef2b9a3.roa (raw, json)
Hash identifier:          BwQiVYG1jYfezcvNsN8ksiiXu8WExUVTYp6cya55Re4=
Subject key identifier:   A9:1C:EA:EA:55:93:85:C8:6C:7A:D0:07:B7:22:BA:FA:A9:4B:30:3F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       50CCFAC5B2DDA2B1F8A4D81914834B597520AA93
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6d68321f-0a06-47ba-8efd-5ee53ef2b9a3.roa
Signing time:             Sat 21 Feb 2026 01:10:10 +0000
ROA not before:           Sat 21 Feb 2026 01:10:10 +0000
ROA not after:            Fri 22 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        130.176.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:cc:fa:c5:b2:dd:a2:b1:f8:a4:d8:19:14:83:4b:59:75:20:aa:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 21 01:10:10 2026 GMT
            Not After : May 22 23:59:59 2026 GMT
        Subject: serialNumber=ce5446e09c9bfbe13068f5cdb1d6f7b67183352eeecf4f609995db5673263100, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:30:6c:a8:01:2e:cc:aa:d8:35:ef:df:82:15:
                    16:5d:4b:c9:cf:76:3b:38:4b:11:44:d5:d2:13:aa:
                    e0:c2:18:1e:d2:17:b7:5a:ba:37:a8:8e:e8:c9:95:
                    9e:92:af:10:f7:34:37:90:d1:b9:2c:41:e1:16:a4:
                    34:98:5f:f3:d4:71:59:80:ff:42:b8:b5:fe:89:f1:
                    2b:ed:82:f9:15:fe:c5:f0:19:a5:c5:af:64:31:52:
                    86:f8:fc:d2:91:01:f7:97:c7:b0:33:1c:72:1d:e1:
                    65:6c:a6:e1:b7:de:b2:85:34:38:72:9f:3b:fe:6a:
                    b2:ae:43:91:03:c3:9c:8e:47:c9:5f:e4:ae:34:22:
                    cc:6e:d3:69:77:b6:41:73:b7:be:f8:76:bf:40:90:
                    41:23:02:3e:06:58:3c:fd:7b:1d:f0:7d:32:4c:54:
                    c1:6e:c9:83:1c:6b:a7:ae:fa:e1:a5:c3:3e:0a:56:
                    ee:9c:4a:b2:e8:c0:63:15:75:c4:9c:0e:f9:5e:23:
                    72:84:45:b2:01:e7:4b:51:d9:77:0a:a6:c0:ce:43:
                    b0:28:21:c7:00:dd:64:05:e2:70:9e:41:d2:df:a1:
                    9a:6d:e2:11:1c:32:7d:16:62:87:f8:12:9b:b4:05:
                    b7:e5:1f:ce:bd:0b:73:87:09:e7:e1:1e:78:7f:51:
                    36:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:1C:EA:EA:55:93:85:C8:6C:7A:D0:07:B7:22:BA:FA:A9:4B:30:3F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6d68321f-0a06-47ba-8efd-5ee53ef2b9a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.176.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:40:3b:a9:46:22:bf:ab:c0:a5:f4:93:b3:5d:8f:ef:08:ca:
         a3:69:11:01:11:9e:67:99:03:98:ff:e5:65:82:c7:a3:f8:4f:
         47:84:97:09:63:14:9f:50:aa:13:58:46:ea:d8:3f:77:d5:de:
         17:3f:78:9d:79:03:82:7c:34:5b:b9:81:33:c9:f8:a4:77:a5:
         c9:6b:9a:55:5e:c1:5b:d4:f7:90:9f:01:66:0b:63:ab:c3:1d:
         bb:4b:81:47:2c:3a:a5:d9:e1:54:6c:89:56:bf:16:99:c2:82:
         ba:14:c2:32:71:9d:0d:35:10:b9:d7:ba:f2:0e:cb:fc:34:43:
         78:56:94:fc:e6:80:43:db:b3:e4:95:3a:15:e1:da:0c:57:cf:
         f9:25:33:95:af:c2:d7:b2:a9:30:24:aa:6d:a0:50:51:21:4a:
         ee:82:c8:d5:c4:d1:8c:fe:8a:e5:5c:85:fc:2e:1c:90:e9:cc:
         ab:71:5e:d8:aa:f0:4f:6c:c5:15:38:3d:3b:91:d3:86:79:7f:
         61:8e:57:f2:ae:0f:dc:ba:40:69:6c:cd:3f:92:c7:44:4b:9e:
         e1:69:aa:aa:55:77:e3:14:0c:84:aa:a0:61:27:7a:5c:89:e4:
         ae:be:8b:99:2d:87:83:2b:8d:9c:c4:da:17:ab:9d:4c:d7:80:
         29:1f:6e:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:16:18 2026 by rpki-client