Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9b0bbbf7-74c2-4538-a223-73b2562d74e2.roa
File:                     9b0bbbf7-74c2-4538-a223-73b2562d74e2.roa (raw, json)
Hash identifier:          ePMRhffqY7F1FFzdc8XuQ6HwhW6lu7t+Vvm5OTQPR/0=
Subject key identifier:   55:B7:14:C1:B1:F9:26:9A:97:59:58:68:89:58:CF:B4:08:95:35:DB
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       09530B604A7AEBBED895190CD64669C606D3E738
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9b0bbbf7-74c2-4538-a223-73b2562d74e2.roa
Signing time:             Sat 21 Feb 2026 01:32:05 +0000
ROA not before:           Sat 21 Feb 2026 01:32:05 +0000
ROA not after:            Fri 22 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        130.176.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:53:0b:60:4a:7a:eb:be:d8:95:19:0c:d6:46:69:c6:06:d3:e7:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 21 01:32:05 2026 GMT
            Not After : May 22 23:59:59 2026 GMT
        Subject: serialNumber=7671c4c7458d27f1f16541cacc9e1a933a63839bd284afc0c0015efe0a1b783d, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:9a:a4:86:fb:a5:26:13:31:be:67:ca:8e:7a:
                    dc:4a:e2:09:b7:3e:a4:31:ca:02:6d:b6:f8:ce:a6:
                    08:d9:47:c9:5c:87:5d:4f:ba:9d:ff:04:35:60:79:
                    e4:77:10:2e:6f:05:50:e7:ae:05:0a:69:a5:ae:44:
                    e0:31:e6:3c:da:6f:97:03:9d:31:1c:b5:81:ab:8b:
                    3f:a0:93:ff:b9:82:de:4e:27:f7:f3:a6:3b:2c:54:
                    4e:5c:3a:a7:f4:1f:1d:36:fb:4b:ad:34:31:e9:3b:
                    6a:d9:46:27:b2:b6:8e:31:a2:c8:37:7d:a0:01:d8:
                    c3:02:f0:4a:fe:f7:2d:85:da:ae:4f:cb:e7:00:f3:
                    80:03:5e:75:34:78:59:e9:35:5d:ed:46:b8:94:af:
                    43:01:5f:b0:92:57:ad:36:27:55:ef:37:d5:93:9a:
                    d7:c7:d1:fe:b5:49:97:ab:60:b7:f8:93:8d:e6:ad:
                    3a:5b:6e:2e:e1:44:6b:d9:d3:df:6d:6b:d5:f7:84:
                    d5:b8:8c:42:5d:b1:f7:05:42:d4:a6:74:af:c9:01:
                    1a:fa:f0:ba:3e:52:51:80:bd:e5:0e:de:1f:71:74:
                    61:46:87:fd:39:30:23:76:06:6d:00:98:7f:72:91:
                    09:65:03:d8:4b:a6:ee:ce:d4:f3:dd:48:9f:4e:98:
                    c8:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:B7:14:C1:B1:F9:26:9A:97:59:58:68:89:58:CF:B4:08:95:35:DB
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9b0bbbf7-74c2-4538-a223-73b2562d74e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.176.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:87:8e:d0:03:32:bf:76:6e:ed:fb:5d:e1:44:13:ea:08:2f:
         a6:b5:45:3b:70:14:9f:08:23:48:77:80:9e:58:85:05:06:15:
         bf:83:0f:f4:ec:9d:24:ad:6e:0e:2b:d2:e3:31:92:30:4e:89:
         90:59:04:a9:e2:b3:fd:ba:19:21:04:ba:58:d6:9b:58:3a:7f:
         02:c6:e0:56:72:6d:a6:b2:c7:57:e0:61:85:7c:27:bd:44:9a:
         ab:6c:18:3a:a3:c5:d3:cf:4b:bc:f5:ea:df:f9:8d:75:90:f2:
         46:15:41:69:7f:b0:a8:1c:88:26:56:86:d6:5c:a6:a4:4f:b5:
         ff:b4:4d:ed:8d:93:45:ad:66:2f:d0:2d:28:0b:d7:b0:48:ae:
         09:3b:12:13:85:72:a7:62:50:f0:8c:4c:c3:e9:de:4b:f0:6e:
         29:ec:10:27:45:57:02:45:c9:59:a5:e1:02:d2:bf:fc:ab:14:
         6a:8b:2b:67:59:93:f3:ef:88:40:28:d0:9c:4b:78:71:45:d2:
         f4:0d:83:db:aa:53:7c:01:5a:ca:cf:8c:37:b6:20:e3:14:71:
         21:bc:c4:ae:f9:11:b2:88:b9:b4:93:4f:29:80:43:24:bf:fe:
         32:51:de:f4:70:4c:29:fe:36:4f:46:fa:2a:b7:88:cd:47:96:
         33:6e:63:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:57:48 2026 by rpki-client