Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e14b38ff-40d4-4152-92dc-eddb0d540e20.roa
File:                     e14b38ff-40d4-4152-92dc-eddb0d540e20.roa (raw, json)
Hash identifier:          SaVBwROdW1CwaHMUzR9iQm2CBwlBFAzt8P830TDCuek=
Subject key identifier:   CD:DE:9F:AD:03:9C:A5:E4:08:1E:88:79:0E:AD:12:0F:B5:88:7E:32
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5F70238DA0B2FDCC935F5683B5C5F922FE287FE0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e14b38ff-40d4-4152-92dc-eddb0d540e20.roa
Signing time:             Tue 12 May 2026 01:31:46 +0000
ROA not before:           Tue 12 May 2026 01:31:46 +0000
ROA not after:            Mon 10 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        130.176.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:70:23:8d:a0:b2:fd:cc:93:5f:56:83:b5:c5:f9:22:fe:28:7f:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 12 01:31:46 2026 GMT
            Not After : Aug 10 23:59:59 2026 GMT
        Subject: serialNumber=2c8ec0ad02175d5b181ade0860a65b924a900c2d07853185ca5640cfe9eac8cc, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:e4:0f:24:d4:fb:66:64:6a:96:fd:58:18:e2:
                    07:b3:b6:c4:99:db:dd:e4:ee:72:ee:c3:66:3c:6a:
                    f8:fe:4d:3c:06:70:0a:5e:25:42:02:c0:45:ba:d6:
                    64:e0:16:4f:8c:26:57:e3:45:fd:52:cb:d7:0b:9a:
                    42:67:c0:a7:35:28:6f:24:12:37:2f:30:e2:21:4b:
                    27:f1:a4:9d:56:09:97:ea:bc:79:92:23:cd:10:35:
                    74:67:aa:17:54:6c:c0:36:3b:49:3e:e4:25:2d:e8:
                    97:0a:df:0c:5c:7e:70:a2:bb:c6:e5:5c:ad:01:d1:
                    47:7f:0d:b3:b7:bd:2c:b2:d6:99:f8:4d:47:c3:e5:
                    41:b6:44:36:77:ae:67:3a:fb:2a:ea:3c:21:6e:9c:
                    c3:a4:a0:07:29:eb:36:8f:71:9a:68:ce:8f:b5:64:
                    2c:54:3d:1b:c1:62:33:3e:36:f3:8e:28:74:9e:6f:
                    f7:1e:b5:4e:79:9f:0c:57:9d:77:1a:dd:51:d3:82:
                    b5:5f:8c:79:3b:86:86:49:6c:78:08:90:ad:f4:bf:
                    88:e9:41:3f:aa:54:09:6b:9b:ec:a9:2a:aa:8c:97:
                    a9:07:61:35:a8:11:f1:31:98:b1:ab:37:f0:ae:cc:
                    d2:c2:04:fc:9c:84:9d:e0:84:db:b4:37:c0:50:ac:
                    1b:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:DE:9F:AD:03:9C:A5:E4:08:1E:88:79:0E:AD:12:0F:B5:88:7E:32
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e14b38ff-40d4-4152-92dc-eddb0d540e20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.176.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:38:d2:a5:23:42:20:8e:c7:bd:05:44:6f:ae:c4:0a:41:a8:
         5e:6e:31:db:07:21:f9:e7:24:04:be:7b:72:06:9a:ac:76:92:
         99:1f:3e:7a:4c:7a:15:54:ed:4f:ae:8f:cd:0c:1c:10:03:01:
         35:85:3c:d9:d3:ed:5b:3b:68:c8:87:58:f6:50:05:9d:54:5d:
         af:98:3c:a4:dd:f7:a2:f9:97:9d:c6:5f:65:84:4f:f7:b0:25:
         1a:54:0b:06:45:da:5e:f6:d9:c9:a9:29:b9:79:65:79:db:76:
         ba:9c:c7:58:e1:80:2d:16:80:7b:2b:3f:3e:97:ea:34:b9:9f:
         5b:a6:23:70:8e:36:14:04:8b:c7:25:3e:2f:30:78:8c:3c:e8:
         e4:d2:f6:f9:27:69:7c:c8:fe:00:74:7c:d1:08:0e:f2:e0:ff:
         4c:0a:c6:cb:e3:27:39:7c:70:ac:ac:99:84:a4:34:f0:9e:11:
         af:7f:49:af:b2:ec:c9:6f:b7:4a:7f:f3:bd:47:e3:c4:97:78:
         19:71:01:9b:d7:14:88:68:02:b1:b1:aa:23:62:68:be:d0:e5:
         1e:ee:e4:fe:ad:bc:d0:f4:8f:ce:c9:a4:3e:b5:b2:ad:e2:5c:
         5d:49:d0:c6:74:21:4b:d8:34:eb:46:d8:38:6b:01:f0:f9:f5:
         ab:92:81:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:16:57 2026 by rpki-client