Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ad669b1a-c728-435a-a665-56c15509d708.roa
File:                     ad669b1a-c728-435a-a665-56c15509d708.roa (raw, json)
Hash identifier:          +PtSjfS1KeIljt0m04H4UrPFljSoVh1ntzf7+F3s75w=
Subject key identifier:   CF:15:51:03:5F:DA:1C:9D:71:9F:30:B7:77:AE:EA:DE:6B:12:B7:1C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2CE90F12A3BE0293C4055962361EB661AB62BFB8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ad669b1a-c728-435a-a665-56c15509d708.roa
Signing time:             Sat 16 May 2026 02:10:44 +0000
ROA not before:           Sat 16 May 2026 02:10:44 +0000
ROA not after:            Fri 14 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        130.176.32.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:e9:0f:12:a3:be:02:93:c4:05:59:62:36:1e:b6:61:ab:62:bf:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 16 02:10:44 2026 GMT
            Not After : Aug 14 23:59:59 2026 GMT
        Subject: serialNumber=983e5f5ace444401271b73b3b16d8dffd17a8f94ea40e4cfeaf0ce70aacfaf5e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:2c:4f:bb:ba:ad:8e:5c:10:91:09:61:3e:d5:
                    f4:70:5f:37:29:aa:51:39:cd:8c:87:47:9c:c2:48:
                    fc:f4:fd:e5:2f:ed:db:04:f3:b7:c7:b6:25:81:48:
                    89:29:0e:04:61:55:32:6f:f2:17:fe:6d:06:b0:2d:
                    7d:20:57:f6:7d:25:e6:14:25:7c:10:fd:7f:61:70:
                    9d:df:b3:f3:1d:aa:4b:c0:9c:ce:f6:ab:2b:87:b2:
                    0f:0f:11:9d:01:32:30:c8:8c:88:fb:c4:b7:15:99:
                    11:d0:e1:72:5d:8d:4f:b6:66:5c:21:3d:78:53:fb:
                    97:eb:ce:90:42:4f:78:71:a7:31:d2:e4:4b:8d:bf:
                    85:7d:04:b4:fb:89:f0:24:74:5f:a6:c7:13:3b:cf:
                    df:66:e7:f2:ae:42:5b:6f:69:56:d9:33:e5:85:28:
                    de:bd:83:ea:6e:8d:57:fe:be:7f:97:57:4d:f5:58:
                    96:4d:c1:eb:c0:52:ef:16:55:4a:e9:03:4f:43:83:
                    f7:eb:94:7d:78:20:4b:6c:64:01:4d:e5:ba:b3:98:
                    d7:4e:60:b3:cc:87:ca:94:0b:db:db:41:fe:50:c2:
                    31:e8:b1:ee:b8:fb:d7:38:45:ef:73:f6:ed:07:1e:
                    de:7c:93:d5:6a:64:df:98:e5:16:a4:57:b7:4b:52:
                    7e:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:15:51:03:5F:DA:1C:9D:71:9F:30:B7:77:AE:EA:DE:6B:12:B7:1C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ad669b1a-c728-435a-a665-56c15509d708.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.176.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:e4:fa:e9:0b:18:53:09:45:c0:59:51:7e:65:95:05:c9:0c:
         c9:d0:dd:f7:8b:5f:e5:eb:4c:e0:ef:4f:91:9f:10:ee:72:d4:
         93:92:a5:6e:25:34:9b:a3:af:44:2d:e0:b6:80:b6:e0:59:0e:
         cb:7d:55:36:5a:8f:10:22:51:c4:cd:ab:88:64:1e:ac:06:ab:
         cb:6b:a1:3b:4d:82:27:19:6d:0c:98:74:b9:66:60:af:4a:bd:
         3f:1a:81:0d:99:ec:1b:93:b0:46:7f:1c:16:cb:16:67:d2:f8:
         bc:d9:31:21:9a:b3:59:1d:60:e6:07:56:b0:67:fb:7b:35:3a:
         ed:89:d1:44:91:07:7d:88:98:c6:6c:69:11:89:24:d3:42:61:
         d4:f7:93:3e:14:b7:57:75:70:8a:49:c4:50:cc:ba:de:8e:21:
         ca:92:6e:30:2e:2c:07:4f:0a:64:d3:46:5b:78:14:d3:cb:8a:
         71:75:54:01:e5:fa:d5:86:e0:b6:1b:fb:d5:3b:d8:32:07:b7:
         59:f4:39:a8:f3:50:b6:96:70:ed:82:e3:f6:d4:13:c5:ac:29:
         b8:82:46:f5:9d:ea:90:d7:ed:96:bf:d6:7b:2c:66:0d:17:b4:
         b9:fc:d6:79:4d:c9:d1:32:87:9d:b9:63:e5:57:0f:32:14:54:
         43:0f:13:88
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIULOkPEqO+ApPEBVliNh62Yativ7gwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTE2MDIxMDQ0WhcNMjYwODE0MjM1OTU5
WjB6MUkwRwYDVQQFE0A5ODNlNWY1YWNlNDQ0NDAxMjcxYjczYjNiMTZkOGRmZmQx
N2E4Zjk0ZWE0MGU0Y2ZlYWYwY2U3MGFhY2ZhZjVlMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCvLE+7uq2OXBCRCWE+1fRwXzcpqlE5zYyHR5zCSPz0/eUv
7dsE87fHtiWBSIkpDgRhVTJv8hf+bQawLX0gV/Z9JeYUJXwQ/X9hcJ3fs/MdqkvA
nM72qyuHsg8PEZ0BMjDIjIj7xLcVmRHQ4XJdjU+2ZlwhPXhT+5frzpBCT3hxpzHS
5EuNv4V9BLT7ifAkdF+mxxM7z99m5/KuQltvaVbZM+WFKN69g+pujVf+vn+XV031
WJZNwevAUu8WVUrpA09Dg/frlH14IEtsZAFN5bqzmNdOYLPMh8qUC9vbQf5QwjHo
se64+9c4Re9z9u0HHt58k9VqZN+Y5RakV7dLUn5dAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUzxVRA1/aHJ1xnzC3d67q3msStxwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2FkNjY5YjFhLWM3MjgtNDM1YS1hNjY1LTU2YzE1NTA5ZDcwOC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBACCsCAwDQYJKoZIhvcNAQELBQADggEBAATk+ukLGFMJRcBZUX5llQXJDMnQ
3feLX+XrTODvT5GfEO5y1JOSpW4lNJujr0Qt4LaAtuBZDst9VTZajxAiUcTNq4hk
HqwGq8troTtNgicZbQyYdLlmYK9KvT8agQ2Z7BuTsEZ/HBbLFmfS+LzZMSGas1kd
YOYHVrBn+3s1Ou2J0USRB32ImMZsaRGJJNNCYdT3kz4Ut1d1cIpJxFDMut6OIcqS
bjAuLAdPCmTTRlt4FNPLinF1VAHl+tWG4LYb+9U72DIHt1n0OajzULaWcO2C4/bU
E8WsKbiCRvWd6pDX7Za/1nssZg0XtLn81nlNydEyh525Y+VXDzIUVEMPE4g=
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:31:19 2026 by rpki-client