Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/797ed6fe-02f3-4238-99c5-a4981bd335d7.roa
File:                     797ed6fe-02f3-4238-99c5-a4981bd335d7.roa (raw, json)
Hash identifier:          W6VSmT7tbvt836EkAKkjwwKY2hBAzQCi5VIoCJ5oy00=
Subject key identifier:   7F:AC:7B:60:07:F1:1F:8E:3A:92:FB:39:84:62:FE:0B:55:7A:50:CA
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       59FB151A39E155248E5FEBD0D085231289DEC25F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/797ed6fe-02f3-4238-99c5-a4981bd335d7.roa
Signing time:             Sat 21 Feb 2026 01:01:18 +0000
ROA not before:           Sat 21 Feb 2026 01:01:18 +0000
ROA not after:            Fri 22 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        130.176.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:fb:15:1a:39:e1:55:24:8e:5f:eb:d0:d0:85:23:12:89:de:c2:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 21 01:01:18 2026 GMT
            Not After : May 22 23:59:59 2026 GMT
        Subject: serialNumber=4bf76e97a1dfecb3d012e6a0efe3dc79675cb29232361c23c2c185179d5f7e72, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:9e:8d:e8:99:5e:a1:c0:5a:45:98:ea:98:53:
                    54:4d:bc:86:78:e5:47:83:a0:f7:48:b1:58:6f:50:
                    b5:c0:24:d4:d2:f5:e3:7e:0d:48:63:28:b3:d0:8e:
                    bd:46:09:b3:de:ea:6e:22:9a:0e:81:4a:cb:af:1c:
                    d6:14:18:51:4b:99:2c:8d:49:56:be:83:4e:2b:d3:
                    f1:32:dc:ed:af:cb:85:b1:af:70:7b:c4:6c:33:ee:
                    ff:44:27:e3:a6:86:06:58:92:47:1c:43:74:bd:22:
                    d4:b8:15:68:08:42:8a:f8:7c:ae:aa:0c:af:10:c1:
                    29:62:7c:e1:24:57:c8:81:7f:00:25:f7:1b:4f:cd:
                    27:93:48:ea:48:57:a2:14:7c:c6:2a:20:e5:77:84:
                    83:34:ed:8d:5e:61:25:b0:e0:f3:4f:c2:bc:46:eb:
                    c5:73:2a:31:69:4b:4a:be:42:f1:44:6c:a3:c4:c5:
                    14:b3:3d:c4:d4:09:8c:f1:d3:f2:c6:35:cf:cc:90:
                    2e:d4:a8:9e:42:f4:f7:5e:a9:ef:49:2c:ab:e8:b6:
                    d4:f3:84:56:a4:fa:29:e3:7f:81:c7:79:cc:4f:d3:
                    d2:7c:db:a0:a7:eb:5f:29:af:aa:25:b4:6f:ff:45:
                    f6:20:f7:02:b2:44:e7:e5:3b:8a:63:cb:a7:da:57:
                    5c:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:AC:7B:60:07:F1:1F:8E:3A:92:FB:39:84:62:FE:0B:55:7A:50:CA
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/797ed6fe-02f3-4238-99c5-a4981bd335d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.176.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:2f:dd:be:d8:36:2f:38:d9:4f:d6:d9:49:7d:f2:df:43:6b:
         bd:5e:88:7f:85:73:eb:c5:b6:4d:6e:92:63:b7:84:0d:49:f8:
         30:50:1e:af:40:15:d7:3f:68:65:31:1e:69:fc:c3:27:d9:88:
         ff:4d:c8:b7:7b:90:07:c8:fa:0a:ad:6c:2c:cf:0d:83:94:53:
         82:08:db:70:0e:76:02:b3:2f:fa:99:76:21:cd:f1:d8:79:32:
         18:1b:1d:b6:1c:3b:0c:90:1a:54:9c:4e:41:22:0b:8c:c9:a1:
         34:c4:d0:c9:03:71:fa:fe:37:33:dc:8b:99:b6:a8:db:36:d7:
         4e:be:95:38:2a:0f:10:7d:8d:8e:9b:96:3b:f2:e7:03:4c:67:
         42:38:29:a1:21:0d:52:e4:be:46:41:b3:aa:4d:d1:cb:ca:ec:
         cd:53:25:9a:b5:8f:96:4b:79:b4:71:c8:46:9e:40:01:eb:69:
         96:7b:99:0b:69:cf:2d:d6:5d:c8:bb:64:74:4a:3d:db:ac:5e:
         37:d5:73:18:a7:fa:82:c5:25:05:08:70:f0:e6:2b:0a:47:dd:
         3a:f6:1a:87:51:1f:a2:1e:4e:7f:74:95:7f:9f:41:2d:27:6f:
         b3:8d:ec:dd:94:36:0d:f0:f9:70:40:34:55:10:b3:60:f7:03:
         33:b7:d5:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:30:05 2026 by rpki-client