Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7d9cad97-cde7-4768-9af6-8a2992e72fe1.roa
File:                     7d9cad97-cde7-4768-9af6-8a2992e72fe1.roa (raw, json)
Hash identifier:          z2vfEaLfvsQ+CoHULNavTC/ghsvXcGsMKl+iLidw2OQ=
Subject key identifier:   D3:DF:20:E1:BB:A5:B8:3B:E6:53:C3:C1:35:EB:AF:7A:03:20:A3:3B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0A006558509AB99B806325114F4D5D41DAB6FD92
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7d9cad97-cde7-4768-9af6-8a2992e72fe1.roa
Signing time:             Wed 08 Apr 2026 05:06:49 +0000
ROA not before:           Wed 08 Apr 2026 05:06:49 +0000
ROA not after:            Tue 07 Jul 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        130.176.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:00:65:58:50:9a:b9:9b:80:63:25:11:4f:4d:5d:41:da:b6:fd:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr  8 05:06:49 2026 GMT
            Not After : Jul  7 23:59:59 2026 GMT
        Subject: serialNumber=055e9054d98d1b973e1e0cc52c8af204a59ea79050f9bf01c6e65d19eae15159, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:41:2a:bf:f3:23:8c:25:ee:19:40:3d:9b:d4:
                    8f:cb:ce:22:18:16:f9:98:6b:99:3b:9e:a3:ad:2b:
                    3c:fe:7f:47:e8:af:33:86:30:0a:cf:2a:5b:18:f9:
                    8f:c4:05:71:29:dc:cb:dd:f4:8c:cc:55:08:22:e0:
                    f5:00:28:13:ce:c4:7d:3b:da:4a:91:e8:7f:cf:3b:
                    8f:a6:c3:a2:bc:47:93:95:2e:cf:f0:c9:9f:12:4b:
                    4c:13:8f:16:59:b8:7b:2e:32:65:eb:da:ae:0f:30:
                    bd:6f:ca:29:0e:37:1c:01:4f:95:10:db:36:9c:24:
                    ff:6e:08:d0:79:1b:d8:8b:8c:d4:8c:72:7e:66:f9:
                    9a:1f:ea:cf:d1:db:a2:c7:d6:dd:c7:2c:24:60:23:
                    aa:f0:3d:64:2e:44:db:33:87:c2:b4:c1:e5:c2:ce:
                    ee:f0:e2:90:0d:a6:12:93:64:06:80:46:97:d5:cb:
                    9d:59:3c:15:d7:95:43:62:eb:ad:b1:24:14:86:58:
                    e1:27:48:e9:fe:98:0c:82:28:9b:36:49:89:cb:b3:
                    e9:af:0c:b6:bf:36:f6:96:7c:b0:bb:3e:f1:7b:56:
                    14:66:cd:a1:39:aa:cd:f6:e6:3d:98:02:4a:4c:78:
                    eb:34:6a:62:bf:a0:21:4a:a1:34:37:b7:82:95:5d:
                    01:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:DF:20:E1:BB:A5:B8:3B:E6:53:C3:C1:35:EB:AF:7A:03:20:A3:3B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7d9cad97-cde7-4768-9af6-8a2992e72fe1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.176.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:ba:54:2b:64:e8:1a:b3:02:f7:16:f4:cd:de:6e:e9:23:86:
         f1:f3:09:c1:83:bc:b6:95:95:8b:2e:ef:ef:a1:92:c9:68:eb:
         7e:02:cb:7d:c2:f8:d5:9f:02:97:3c:4e:75:5c:19:e4:a7:b3:
         0d:0d:a9:92:09:54:4e:49:0a:d8:96:cd:7e:3e:9c:e6:17:d2:
         cd:ae:da:a5:f9:45:d9:b0:5e:9e:48:53:0f:ac:6d:7d:55:b5:
         43:34:87:ec:73:da:6b:4d:ad:81:f8:3f:71:0f:11:af:c6:a8:
         54:06:8b:86:6e:25:2d:3b:0b:0f:94:10:c5:fd:ed:88:45:ec:
         e5:16:91:e0:87:bc:c1:f4:34:97:93:0e:c0:99:36:3b:c4:c4:
         d0:44:fd:59:88:a7:95:0e:de:47:5a:d3:b6:c7:98:e7:b0:0a:
         fd:1a:04:d6:2e:b9:1d:09:53:a0:a9:a7:81:2d:a3:c1:9d:72:
         f9:b9:9a:5f:36:7b:7c:b2:7e:f0:6d:71:d8:08:4b:f8:1d:16:
         01:91:16:ce:29:2a:27:0b:01:cf:68:1d:e3:95:48:4b:7d:c4:
         4d:ba:fc:78:d5:89:c7:b7:7a:3e:9a:c8:bf:21:9d:67:da:3d:
         e4:d6:6f:92:92:07:22:f2:87:c0:a4:eb:33:0b:66:a8:02:75:
         36:f2:bd:d4
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUCgBlWFCauZuAYyURT01dQdq2/ZIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNDA4MDUwNjQ5WhcNMjYwNzA3MjM1OTU5
WjB6MUkwRwYDVQQFE0AwNTVlOTA1NGQ5OGQxYjk3M2UxZTBjYzUyYzhhZjIwNGE1
OWVhNzkwNTBmOWJmMDFjNmU2NWQxOWVhZTE1MTU5MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC0QSq/8yOMJe4ZQD2b1I/LziIYFvmYa5k7nqOtKzz+f0fo
rzOGMArPKlsY+Y/EBXEp3Mvd9IzMVQgi4PUAKBPOxH072kqR6H/PO4+mw6K8R5OV
Ls/wyZ8SS0wTjxZZuHsuMmXr2q4PML1vyikONxwBT5UQ2zacJP9uCNB5G9iLjNSM
cn5m+Zof6s/R26LH1t3HLCRgI6rwPWQuRNszh8K0weXCzu7w4pANphKTZAaARpfV
y51ZPBXXlUNi662xJBSGWOEnSOn+mAyCKJs2SYnLs+mvDLa/NvaWfLC7PvF7VhRm
zaE5qs325j2YAkpMeOs0amK/oCFKoTQ3t4KVXQHHAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU098g4buluDvmU8PBNeuvegMgozswHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzdkOWNhZDk3LWNkZTctNDc2OC05YWY2LThhMjk5MmU3MmZlMS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBACCsBowDQYJKoZIhvcNAQELBQADggEBALC6VCtk6BqzAvcW9M3ebukjhvHz
CcGDvLaVlYsu7++hkslo634Cy33C+NWfApc8TnVcGeSnsw0NqZIJVE5JCtiWzX4+
nOYX0s2u2qX5RdmwXp5IUw+sbX1VtUM0h+xz2mtNrYH4P3EPEa/GqFQGi4ZuJS07
Cw+UEMX97YhF7OUWkeCHvMH0NJeTDsCZNjvExNBE/VmIp5UO3kda07bHmOewCv0a
BNYuuR0JU6Cpp4Eto8Gdcvm5ml82e3yyfvBtcdgIS/gdFgGRFs4pKicLAc9oHeOV
SEt9xE26/HjVice3ej6ayL8hnWfaPeTWb5KSByLyh8Ck6zMLZqgCdTbyvdQ=
-----END CERTIFICATE-----
Generated at Fri Apr 17 04:34:33 2026 by rpki-client