Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e0dee238-10ea-4c0c-aa38-d5eed40e3845.roa
File:                     e0dee238-10ea-4c0c-aa38-d5eed40e3845.roa (raw, json)
Hash identifier:          XD48KFpMikzmTESPp5OkR/k83lijzKxTnMR7wRtmZis=
Subject key identifier:   AC:B5:3A:B9:1F:45:07:B4:FC:96:2A:31:E6:5E:18:69:FF:19:EF:9D
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3427AC59BB58ED3CDBA0084C43463AFA9F3D29DD
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e0dee238-10ea-4c0c-aa38-d5eed40e3845.roa
Signing time:             Tue 12 May 2026 01:21:57 +0000
ROA not before:           Tue 12 May 2026 01:21:57 +0000
ROA not after:            Mon 10 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        130.176.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:27:ac:59:bb:58:ed:3c:db:a0:08:4c:43:46:3a:fa:9f:3d:29:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 12 01:21:57 2026 GMT
            Not After : Aug 10 23:59:59 2026 GMT
        Subject: serialNumber=a4cb901e5db775de52924a2210a5281aa269341c81595f63c344bc0636d23cfb, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:27:45:1d:dc:32:be:1a:7f:f7:38:91:7c:a0:
                    e7:f3:77:ac:f5:22:9f:86:60:c1:80:50:5f:fa:6a:
                    5d:7f:38:dc:a4:46:37:d8:7d:29:93:dc:5d:34:56:
                    71:9d:28:61:2a:7b:7b:e8:fd:40:d6:11:43:0b:26:
                    81:bd:28:da:6f:4d:66:78:29:ba:97:84:0d:59:2a:
                    91:f4:18:b4:ed:6f:87:e1:ee:cf:03:c4:9c:8e:f4:
                    be:a2:d8:aa:3b:ba:48:54:0b:09:23:51:f8:94:f5:
                    5e:15:8b:5a:f5:7c:ca:a1:f3:0c:a8:3a:e6:a6:97:
                    d1:cd:74:9f:75:52:34:a1:5f:e4:77:4b:43:7f:d9:
                    19:25:4e:34:2f:b7:9a:16:7a:81:75:da:47:62:22:
                    0b:0a:13:65:dc:8c:97:86:13:40:c4:42:43:84:05:
                    d1:13:3c:9e:75:68:45:7a:96:a1:82:a9:7b:7c:7f:
                    78:93:89:d2:b2:25:d2:e1:d1:fe:df:9a:ff:d4:1b:
                    97:3b:4e:3d:fc:04:86:67:09:82:5b:ae:d2:dc:6c:
                    8b:a4:76:88:9f:d0:c6:25:8a:1e:44:ac:05:1b:81:
                    4e:4c:46:6c:05:ce:20:f6:93:c4:7e:71:34:a8:98:
                    25:74:aa:1c:31:94:1f:24:90:ee:ce:b9:99:38:b9:
                    f7:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:B5:3A:B9:1F:45:07:B4:FC:96:2A:31:E6:5E:18:69:FF:19:EF:9D
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e0dee238-10ea-4c0c-aa38-d5eed40e3845.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.176.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:ea:bb:07:c2:0d:c0:f2:70:a6:87:43:ee:e6:a8:19:a5:67:
         60:3c:76:f7:fd:3f:df:ab:e9:1c:3b:67:fe:b8:f3:a0:d8:38:
         2a:07:61:a1:5e:65:77:2d:ae:83:37:e1:a6:d6:de:74:42:dc:
         a8:65:71:7e:e1:f7:bf:21:49:68:58:c9:e2:f9:10:7e:40:e8:
         8b:1c:9e:82:05:44:5f:f4:b4:fa:4a:db:5c:78:f8:f5:ef:02:
         c9:73:56:9b:10:d6:9c:4b:6b:48:4c:76:1d:ac:60:fa:25:85:
         22:cd:21:38:bf:06:f3:e6:f6:24:39:fd:4a:67:e0:33:aa:f4:
         e0:5f:f4:f3:04:9f:cb:cd:9c:e4:15:67:4a:49:b8:a3:51:8e:
         7f:06:4f:cb:79:4a:c7:9d:b3:ec:fc:df:80:00:6e:62:32:09:
         cb:6c:86:eb:84:5b:bc:05:9a:4c:d4:e0:9c:56:b2:c1:2a:02:
         74:d9:e3:93:3c:f8:aa:0c:de:35:b4:14:29:22:8d:0d:c0:a2:
         0d:ea:2a:14:d8:65:92:49:d3:0b:4a:a9:41:eb:f6:28:b1:d8:
         b1:d7:fe:39:43:c7:6c:02:e3:73:d9:de:b4:7d:eb:a9:2f:58:
         80:e7:d1:8c:9a:6f:64:20:dc:94:24:5e:15:13:18:a2:9e:dd:
         a4:7a:1f:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:47:02 2026 by rpki-client