Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7a8447f8-92bb-4832-8e3f-00babd2deee8.roa
File:                     7a8447f8-92bb-4832-8e3f-00babd2deee8.roa (raw, json)
Hash identifier:          ll46vpLEsIsqJy/tNcQ3HAqokqqk0gBf2J3rueGSUiw=
Subject key identifier:   1D:13:0B:44:07:3F:BE:A0:2A:B8:65:37:BE:70:53:2D:BA:73:ED:2B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       14D24654A7CD9C7E41C4C5963E580040FAA4FDF0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7a8447f8-92bb-4832-8e3f-00babd2deee8.roa
Signing time:             Sat 21 Feb 2026 01:00:04 +0000
ROA not before:           Sat 21 Feb 2026 01:00:04 +0000
ROA not after:            Fri 22 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        130.176.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:d2:46:54:a7:cd:9c:7e:41:c4:c5:96:3e:58:00:40:fa:a4:fd:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 21 01:00:04 2026 GMT
            Not After : May 22 23:59:59 2026 GMT
        Subject: serialNumber=ab7929ff900191b3ba09d15f0b803c73675cdf1fb223065dafa94842ceb163d7, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:25:4f:17:1c:50:0b:0a:4a:b7:e3:8a:56:04:
                    c0:90:d3:a6:11:f2:41:13:3c:82:1e:48:fa:a5:89:
                    fb:78:93:ae:b5:6a:68:06:b1:ec:d9:37:2e:73:df:
                    f6:41:c3:3f:2c:11:72:d2:9b:0c:a3:41:78:ce:58:
                    36:3a:32:f8:92:30:6a:d0:51:e5:31:a7:21:18:bd:
                    31:ca:80:fb:64:68:72:f8:23:c6:1f:07:ac:c3:06:
                    7c:38:03:5f:78:ac:c9:d5:7f:4c:fd:36:ff:3d:9c:
                    16:a2:38:d5:c0:08:07:02:7e:ea:73:b9:97:76:81:
                    76:12:2c:40:ac:11:97:28:7d:45:fc:37:f6:d7:fa:
                    be:af:dc:26:c1:be:5b:b3:79:0f:c4:37:95:7e:02:
                    e9:3e:1d:62:6a:96:36:f6:71:41:b0:e8:fb:1c:84:
                    08:04:4b:ee:6f:4b:31:19:c9:98:03:bd:9c:08:82:
                    6e:ba:1b:a1:69:c2:ec:e2:c0:63:d2:b5:62:1a:d8:
                    39:69:64:d1:62:7d:dd:3e:0e:d4:90:c3:52:71:af:
                    8b:96:97:83:84:fe:2a:f5:53:d9:9b:0a:f7:a0:b8:
                    6a:fb:0b:22:2d:c4:80:15:d5:c5:44:83:94:4f:54:
                    97:7f:b4:70:5b:65:bd:06:10:3d:18:d2:49:ed:f2:
                    19:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:13:0B:44:07:3F:BE:A0:2A:B8:65:37:BE:70:53:2D:BA:73:ED:2B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7a8447f8-92bb-4832-8e3f-00babd2deee8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.176.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:eb:b3:d1:76:c9:0d:8e:b3:ab:96:8e:2c:95:f3:29:c2:d0:
         e6:ef:d5:29:df:01:1d:3d:66:fc:18:46:9c:bb:ca:94:56:3b:
         34:80:b7:af:83:96:d9:99:f1:84:55:1d:55:1d:62:0d:26:5d:
         b8:d9:35:c8:25:0e:12:2e:2f:92:6c:14:48:4f:6b:fd:08:5d:
         6e:bd:43:28:d5:2e:4d:83:bf:94:13:82:22:74:0e:e6:72:07:
         7e:20:e6:e6:18:f9:74:35:c6:4c:f0:d5:d8:70:12:39:e6:ba:
         a8:72:df:98:55:8a:64:96:8c:87:f1:f1:6f:3d:36:b7:4a:e2:
         33:48:e1:b1:84:d9:d1:6f:1e:a9:72:e0:ce:c5:85:84:3e:8a:
         d3:f9:63:61:c8:3f:66:df:4a:de:7f:3c:e9:2d:7f:44:bc:30:
         03:e5:56:1a:c0:57:6b:9c:2f:ac:6c:87:be:74:1b:9b:ad:a8:
         32:9f:a1:3d:11:12:b5:02:1c:d2:bf:b9:fa:84:00:45:da:62:
         d4:c1:8c:0a:22:44:5d:66:c5:cd:f5:34:79:56:28:af:ba:0e:
         d1:7f:77:d5:74:73:d4:fe:f2:cc:05:c5:b7:b6:2d:c9:1e:c4:
         fd:82:34:16:48:f9:9f:c7:f5:bd:19:85:df:f7:a1:1a:cd:e2:
         98:0f:e6:05
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUFNJGVKfNnH5BxMWWPlgAQPqk/fAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjIxMDEwMDA0WhcNMjYwNTIyMjM1OTU5
WjB6MUkwRwYDVQQFE0BhYjc5MjlmZjkwMDE5MWIzYmEwOWQxNWYwYjgwM2M3MzY3
NWNkZjFmYjIyMzA2NWRhZmE5NDg0MmNlYjE2M2Q3MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC4JU8XHFALCkq344pWBMCQ06YR8kETPIIeSPqlift4k661
amgGsezZNy5z3/ZBwz8sEXLSmwyjQXjOWDY6MviSMGrQUeUxpyEYvTHKgPtkaHL4
I8YfB6zDBnw4A194rMnVf0z9Nv89nBaiONXACAcCfupzuZd2gXYSLECsEZcofUX8
N/bX+r6v3CbBvluzeQ/EN5V+Auk+HWJqljb2cUGw6PschAgES+5vSzEZyZgDvZwI
gm66G6FpwuziwGPStWIa2DlpZNFifd0+DtSQw1Jxr4uWl4OE/ir1U9mbCveguGr7
CyItxIAV1cVEg5RPVJd/tHBbZb0GED0Y0knt8hmfAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUHRMLRAc/vqAquGU3vnBTLbpz7SswHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzdhODQ0N2Y4LTkyYmItNDgzMi04ZTNmLTAwYmFiZDJkZWVlOC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBACCsMEwDQYJKoZIhvcNAQELBQADggEBAGXrs9F2yQ2Os6uWjiyV8ynC0Obv
1SnfAR09ZvwYRpy7ypRWOzSAt6+DltmZ8YRVHVUdYg0mXbjZNcglDhIuL5JsFEhP
a/0IXW69QyjVLk2Dv5QTgiJ0DuZyB34g5uYY+XQ1xkzw1dhwEjnmuqhy35hVimSW
jIfx8W89NrdK4jNI4bGE2dFvHqly4M7FhYQ+itP5Y2HIP2bfSt5/POktf0S8MAPl
VhrAV2ucL6xsh750G5utqDKfoT0RErUCHNK/ufqEAEXaYtTBjAoiRF1mxc31NHlW
KK+6DtF/d9V0c9T+8swFxbe2LckexP2CNBZI+Z/H9b0Zhd/3oRrN4pgP5gU=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:11:44 2026 by rpki-client