Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/77ef751d-2e99-46b8-8795-fade0c31cb43.roa
File:                     77ef751d-2e99-46b8-8795-fade0c31cb43.roa (raw, json)
Hash identifier:          /e8MxVwwJ/QfoX/JR5RyLVPvOFQVueP3LjKlgtyC4cw=
Subject key identifier:   3C:7C:FE:D8:6A:DA:C8:73:FC:CD:67:EE:1E:F3:21:A9:AB:0E:D5:A8
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0696A839FDEB3415EFAD80B3FFEBA98103313BD3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/77ef751d-2e99-46b8-8795-fade0c31cb43.roa
Signing time:             Sat 21 Feb 2026 01:30:12 +0000
ROA not before:           Sat 21 Feb 2026 01:30:12 +0000
ROA not after:            Fri 22 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        130.176.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:96:a8:39:fd:eb:34:15:ef:ad:80:b3:ff:eb:a9:81:03:31:3b:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 21 01:30:12 2026 GMT
            Not After : May 22 23:59:59 2026 GMT
        Subject: serialNumber=84d27d7ea8e5bcdb687d9eaf5f5eaedba2e0c9b0496e6d90f182d0c326aa0759, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:63:9b:f5:5a:32:eb:56:76:e7:15:be:5b:9c:
                    1d:7f:2f:68:e4:4d:d6:ae:5a:33:4a:68:35:85:da:
                    93:bd:e1:1d:61:01:55:49:bf:ce:ef:9d:57:9a:d4:
                    df:18:ee:39:da:c0:10:96:5d:65:02:23:3b:2f:28:
                    3e:41:41:5a:61:13:62:18:3e:d4:0f:d0:8f:d1:3a:
                    f1:69:b7:5a:d1:98:da:01:00:c8:71:17:7a:76:c3:
                    1c:73:74:00:55:4e:82:75:90:2d:fb:b6:a8:2b:6f:
                    73:d9:1e:e6:77:e2:a2:a4:16:43:b2:1c:4c:25:cf:
                    f2:7c:be:b1:1e:7c:80:dd:1e:42:e2:c7:99:ea:d8:
                    e4:3a:12:74:61:4e:ef:df:32:d3:30:28:84:48:89:
                    d5:21:a7:96:8a:5b:ba:96:c6:41:fd:41:3b:52:90:
                    0d:69:88:ce:5a:80:bd:42:1b:bf:8c:68:b9:f0:c5:
                    c6:60:ea:67:c9:1c:62:bf:5b:9e:43:f9:7f:37:40:
                    51:38:22:e8:a1:24:86:0b:20:99:f1:1e:f0:2c:45:
                    c9:0e:14:b5:cc:ba:b9:f6:60:0a:63:7f:fa:c2:dc:
                    ef:4e:5f:de:7d:3e:25:8d:04:e3:c8:9f:ca:ba:b0:
                    9b:23:a2:48:38:cb:7c:ca:55:ac:20:2b:d9:f0:20:
                    47:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:7C:FE:D8:6A:DA:C8:73:FC:CD:67:EE:1E:F3:21:A9:AB:0E:D5:A8
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/77ef751d-2e99-46b8-8795-fade0c31cb43.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.176.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:20:45:96:37:fe:24:50:4f:77:fc:8b:08:69:dd:78:83:74:
         6a:39:7e:24:d7:3b:7d:f6:b5:5f:64:ff:de:12:60:e8:79:25:
         66:20:12:26:3c:dc:d2:a2:54:c2:b1:76:bf:3c:48:aa:c3:97:
         c2:af:41:c3:61:9f:41:0d:ee:8c:73:34:cd:99:4a:46:3b:65:
         a0:0b:03:8e:d9:56:0d:aa:d1:99:0e:0f:f9:9b:ff:5e:72:7a:
         90:8d:14:12:96:a9:ac:b2:da:a0:b0:d1:f7:62:45:5e:82:60:
         3b:99:cd:cb:1f:6a:f1:8f:50:78:21:cd:57:6f:41:ab:91:7b:
         cb:f5:44:7b:a3:d2:94:f8:28:2f:eb:14:05:f3:71:a0:cf:ad:
         d9:f0:8d:09:61:cc:ad:70:28:0e:f8:74:6d:95:56:99:8a:2c:
         01:d6:ec:a5:41:e3:20:1e:b8:9c:a9:b8:79:a6:14:f8:ad:cf:
         81:72:a5:aa:64:83:d9:02:63:8c:6a:ad:3f:27:f5:5d:17:41:
         e3:77:02:fe:1b:f1:94:bf:11:c7:17:9c:9b:73:0c:1d:72:08:
         58:b7:95:ca:12:14:06:98:e9:24:bc:89:44:e7:12:56:d4:63:
         7b:00:53:2f:65:66:0e:24:2a:33:28:bf:3c:7a:77:47:a3:b0:
         62:6b:0f:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:17:45 2026 by rpki-client