Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/88a1cf4d-aa30-4c6e-a708-7fea9705baa7.roa
File:                     88a1cf4d-aa30-4c6e-a708-7fea9705baa7.roa (raw, json)
Hash identifier:          X9wz7rUxdMR05Tz+pQIZUIzmbDzLEBNbeN9IWEpvgiE=
Subject key identifier:   6A:70:D5:07:7F:7D:87:B6:5B:31:DC:D5:10:66:C6:3F:5F:A7:21:F2
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       551749250760816C84B4FC18BD01AD5D717B7FDE
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/88a1cf4d-aa30-4c6e-a708-7fea9705baa7.roa
Signing time:             Sat 21 Feb 2026 00:20:11 +0000
ROA not before:           Sat 21 Feb 2026 00:20:11 +0000
ROA not after:            Fri 22 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        130.176.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:17:49:25:07:60:81:6c:84:b4:fc:18:bd:01:ad:5d:71:7b:7f:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 21 00:20:11 2026 GMT
            Not After : May 22 23:59:59 2026 GMT
        Subject: serialNumber=5e85c184538be0a3e76e18eb3bda1403bc6f22329d0027f4eb6532441c7265a4, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ac:5d:75:1a:68:f6:d2:30:33:98:ed:a4:b9:
                    e6:49:23:4b:fc:6c:d6:fd:2d:0a:fe:51:3c:fb:18:
                    73:7f:93:33:69:a4:9a:72:bc:4d:15:a7:d2:98:29:
                    9e:9f:90:ac:f7:b8:d5:94:bd:f7:2a:7b:5e:24:85:
                    a4:2e:63:83:69:1e:f8:b9:72:e2:cc:47:4b:db:3a:
                    77:a2:cd:c5:e7:ba:5f:07:a0:58:0a:68:83:fc:4d:
                    a2:ca:b5:de:3e:5b:33:f2:84:ef:09:10:9f:4e:de:
                    9e:6e:37:05:14:9b:03:d5:e0:0c:08:cf:48:67:95:
                    93:44:cd:46:a9:e1:98:e9:68:33:9f:6c:01:df:b2:
                    99:16:38:ca:b5:31:8f:1d:02:c9:46:6d:9d:32:e3:
                    c0:5c:76:af:21:0a:94:bd:23:c4:fa:79:20:fa:a5:
                    35:41:c3:1e:76:c0:28:1c:b2:13:af:6b:3e:72:79:
                    6b:9b:16:ef:dc:c0:38:bb:97:32:d9:c0:75:cc:95:
                    04:7b:85:fc:bd:9c:03:51:a3:23:01:b4:dc:2b:40:
                    de:c4:04:4a:35:c7:56:c8:d8:99:3b:db:5f:f5:23:
                    e6:0f:c8:97:e9:49:d4:f9:b2:04:0c:e9:aa:e8:9b:
                    49:fd:e2:83:d8:df:cf:34:39:ce:19:09:72:f8:11:
                    58:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:70:D5:07:7F:7D:87:B6:5B:31:DC:D5:10:66:C6:3F:5F:A7:21:F2
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/88a1cf4d-aa30-4c6e-a708-7fea9705baa7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.176.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:f1:7e:e6:84:c9:5d:4c:a7:e4:f6:6d:e5:ae:42:27:70:35:
         7d:04:b0:1a:c2:40:ed:25:82:6e:12:30:03:69:7f:2f:c8:38:
         5f:1e:24:2c:13:1c:12:c3:98:b2:a4:0e:c5:94:f6:11:42:16:
         e3:46:c7:50:d6:9e:e8:8b:89:fe:e0:4b:c3:31:59:d1:0a:d3:
         ff:f6:64:29:e7:22:bf:df:26:92:aa:2e:d3:bc:4d:a2:70:d5:
         d8:fc:e2:21:b3:15:ef:39:47:e6:5b:88:83:d3:ad:d5:2a:95:
         3f:fe:78:9d:b9:db:93:ff:65:8e:04:8d:fc:52:c5:19:1b:12:
         e6:16:9c:5d:ee:ec:e4:91:59:35:7d:4c:68:b4:78:a7:52:62:
         e0:f4:f2:2a:e1:d7:f9:07:02:bc:88:22:5c:84:cc:92:1b:e3:
         0b:1c:30:a4:27:fa:45:ba:d6:37:62:f1:7e:c3:1f:dd:af:97:
         48:1a:fa:72:8c:4d:e4:13:9b:32:37:c3:31:c3:a2:4a:5f:88:
         6b:d8:37:6c:65:3c:18:87:7a:de:80:44:71:99:e1:e5:a1:b2:
         6d:94:99:2a:50:1c:0d:09:55:d8:19:83:10:b5:76:ab:1c:8b:
         11:96:de:b4:9f:70:5d:45:73:90:ac:0a:02:93:f3:ed:3d:fc:
         b9:4f:e0:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:39:45 2026 by rpki-client