Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/77e7ac3e-0443-426d-aa31-e15acdeba010.roa
File:                     77e7ac3e-0443-426d-aa31-e15acdeba010.roa (raw, json)
Hash identifier:          ZhGPcU6h9Qiy/1hm06TRJqXkwFEyBWdHoVmrN72R9Fs=
Subject key identifier:   EB:84:C4:C4:E6:B1:63:54:32:1A:97:FE:C5:5F:D0:89:40:48:6E:3A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       77FE1ADE6580F0C54A4129C04B359AAEEC1DCE12
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/77e7ac3e-0443-426d-aa31-e15acdeba010.roa
Signing time:             Sat 21 Feb 2026 00:41:56 +0000
ROA not before:           Sat 21 Feb 2026 00:41:56 +0000
ROA not after:            Fri 22 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        130.176.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:fe:1a:de:65:80:f0:c5:4a:41:29:c0:4b:35:9a:ae:ec:1d:ce:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 21 00:41:56 2026 GMT
            Not After : May 22 23:59:59 2026 GMT
        Subject: serialNumber=21f327ea95efcf9f3a04dc5bc93b3b572379993c2a7a00fe23aa88c1508fff8d, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ee:fa:e9:9c:97:c1:1a:01:72:f0:17:e9:3d:
                    77:b9:83:2e:af:a5:99:a0:83:4a:75:59:4e:0f:37:
                    87:64:28:ee:83:67:e9:5d:8e:8d:92:dc:07:c3:c9:
                    4f:fd:11:fb:50:87:e6:c6:76:06:3c:16:eb:69:83:
                    66:80:15:b6:28:37:fc:17:5b:f8:2a:c6:8c:58:fc:
                    d6:b3:15:e2:b6:8a:27:7f:f5:f6:94:8f:44:b3:df:
                    7a:3d:fe:7d:98:d1:a9:47:be:b2:4d:a0:60:a7:63:
                    2f:d9:c9:bc:37:17:fd:55:6f:a8:07:3a:62:44:96:
                    63:1d:f3:0e:41:e3:24:9b:37:84:3d:55:0e:74:db:
                    de:df:df:d3:ae:65:00:ca:cd:a5:ff:48:d3:70:b3:
                    41:b0:2f:a1:88:a6:73:d9:7d:13:d3:a2:91:ce:55:
                    dd:ac:53:83:69:29:3b:bf:57:2e:26:81:4a:db:af:
                    52:2a:ca:13:ee:f2:49:9b:09:16:62:16:18:14:92:
                    cd:44:01:23:eb:ef:7f:12:b4:41:fc:c0:60:2a:69:
                    b4:53:64:c6:18:70:6e:4a:89:8c:04:02:76:f4:de:
                    eb:a6:e4:ba:86:df:3c:c7:cc:2b:73:d3:5e:32:ae:
                    22:bb:63:e5:d6:e7:09:92:d7:70:8c:7d:6e:09:c9:
                    38:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:84:C4:C4:E6:B1:63:54:32:1A:97:FE:C5:5F:D0:89:40:48:6E:3A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/77e7ac3e-0443-426d-aa31-e15acdeba010.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.176.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d4:cb:26:16:32:20:e4:ef:ad:4e:8c:69:9f:74:0e:ad:88:a9:
         df:14:a9:54:b4:94:60:63:ef:56:dc:36:0a:f6:8e:bc:22:0d:
         b0:eb:aa:36:7b:7f:84:09:03:40:33:5f:4f:d5:1d:68:3c:8f:
         59:75:d8:db:ae:c4:10:17:30:e3:a6:c7:86:47:cb:ec:35:42:
         76:57:b8:d5:10:e5:b3:07:4b:c3:ba:5d:8c:88:c4:3a:48:c6:
         30:2e:6e:95:31:c5:a8:a2:83:b8:39:3e:13:2c:91:b0:73:77:
         a9:e0:0a:60:84:de:9f:43:fe:60:60:06:a2:54:1a:9f:d0:c3:
         ef:6e:42:86:87:62:a6:fb:60:ed:99:2c:03:46:76:54:83:d1:
         db:33:6c:be:68:d9:0e:7b:80:0e:93:8b:b7:7a:ef:0c:ed:a9:
         66:32:a1:2d:24:31:2c:be:83:91:64:7b:89:1c:64:f8:e0:d6:
         4e:8b:c1:47:fd:c8:f1:da:dc:39:cd:9f:59:24:03:65:9e:68:
         b1:9d:8b:e6:f5:ec:89:6d:f2:bc:6d:62:50:cc:24:3a:dd:ed:
         25:82:12:2e:07:ac:bb:42:b6:03:db:69:26:2c:16:de:41:ac:
         ca:2c:8d:00:09:0e:ac:0f:ac:91:e8:4d:04:39:55:c2:e3:75:
         30:c4:19:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:08:58 2026 by rpki-client