Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7756513f-4fd9-4337-9702-90d5277dd482.roa
File:                     7756513f-4fd9-4337-9702-90d5277dd482.roa (raw, json)
Hash identifier:          V+Vr9FZ/SAtEySkVZ7QjNySthVG2Vp51+v+E0c4kUm4=
Subject key identifier:   A3:BC:5E:37:22:64:D7:EB:17:5D:D2:FB:8C:0F:80:10:84:03:50:04
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3C965CCD78AB6BA6BE6F5883AAB1D63981017BBB
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7756513f-4fd9-4337-9702-90d5277dd482.roa
Signing time:             Sat 21 Feb 2026 01:41:41 +0000
ROA not before:           Sat 21 Feb 2026 01:41:41 +0000
ROA not after:            Fri 22 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        130.176.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:96:5c:cd:78:ab:6b:a6:be:6f:58:83:aa:b1:d6:39:81:01:7b:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 21 01:41:41 2026 GMT
            Not After : May 22 23:59:59 2026 GMT
        Subject: serialNumber=4683a19747f18c424a977c197b1ce451307df2dc32379e667bbba3caef26c5a4, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:19:92:55:a4:8f:c4:1f:67:45:34:62:e4:7a:
                    40:8c:4f:86:3a:02:c4:39:99:e4:48:f9:d0:6c:69:
                    1e:20:de:7a:8a:91:9c:56:85:4e:88:ad:a0:ee:89:
                    0c:5e:12:62:d7:a3:3f:26:f0:ed:83:18:e3:6a:a2:
                    f2:91:30:e8:50:a0:9d:42:ec:0a:ea:36:e0:7f:ef:
                    c0:6f:7e:0a:30:9b:86:7b:66:e8:18:66:04:f4:ef:
                    4e:0c:ed:66:c4:ea:d8:37:c9:6e:af:2a:17:da:aa:
                    e9:4a:e5:e5:f6:da:49:0e:ef:f8:fc:26:2c:e5:63:
                    f4:f7:81:b3:79:68:cb:37:39:40:c0:86:2c:c7:5e:
                    48:5b:05:1c:36:97:10:35:f1:32:14:ce:fc:f1:c7:
                    14:ac:28:6b:9a:39:b7:10:a8:4e:3d:bc:e4:a6:0f:
                    db:b3:a7:20:bf:51:5e:49:20:20:5d:5d:73:7c:1e:
                    5d:b5:ff:68:80:48:ee:51:e7:de:62:8d:2b:5c:9f:
                    8b:1d:8c:d8:49:a3:76:e6:63:c4:8b:86:08:5f:ac:
                    1d:67:61:ff:7d:8b:f3:65:42:e4:27:31:96:18:b6:
                    8d:49:9f:d1:1c:55:9b:38:bd:59:55:0e:a9:3e:ed:
                    73:ea:97:cf:c5:e1:36:84:d0:eb:87:dc:2a:2f:d5:
                    39:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:BC:5E:37:22:64:D7:EB:17:5D:D2:FB:8C:0F:80:10:84:03:50:04
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7756513f-4fd9-4337-9702-90d5277dd482.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.176.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:fa:47:c3:a9:1a:5e:e1:c7:13:fd:df:47:3c:82:16:97:54:
         b6:a9:81:6f:2d:21:e3:62:9d:11:05:da:ff:55:c8:2f:ae:37:
         3d:35:11:db:62:87:7b:3e:69:ac:2d:c4:37:79:61:9e:97:35:
         b7:29:a4:81:30:ea:d8:6e:c7:76:2c:f6:7e:01:87:8d:60:48:
         ca:9a:d0:1d:20:e4:27:43:c2:19:af:17:4a:9d:6b:8a:e4:a7:
         78:9e:cc:3c:4c:95:2d:45:6d:64:f2:27:54:33:81:a0:9b:cf:
         c8:ec:dd:a4:2e:34:08:97:35:82:4e:1a:ca:89:3f:fc:a3:86:
         8b:9c:90:91:41:22:7f:6b:fb:19:66:3f:c3:eb:23:8e:ff:9c:
         09:77:e5:d0:7a:e7:19:23:6a:71:f3:46:f6:9e:97:1d:52:82:
         09:12:53:ef:74:e4:b3:bf:d9:34:ac:f7:d7:c5:fd:32:2f:16:
         d4:a1:39:8b:73:4b:05:c5:45:99:7e:3a:61:ac:5c:c0:27:41:
         59:69:11:6b:48:31:05:05:9e:d1:c0:e6:bb:85:9d:bb:3c:f8:
         fa:52:a8:4a:7e:f4:81:f6:09:cd:42:d5:0c:d2:18:2a:82:b8:
         0f:dd:fe:1d:0d:f9:5c:5e:36:19:1b:c6:38:7b:26:d5:69:1b:
         ad:2b:ad:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:37:22 2026 by rpki-client