Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e6be90fa-7ed7-404b-a71c-e8b9c8cf426b.roa
File:                     e6be90fa-7ed7-404b-a71c-e8b9c8cf426b.roa (raw, json)
Hash identifier:          soepwK0a7kx+tWfKq+muVCxNztSKORppF3gpDTA0NIo=
Subject key identifier:   1F:82:B2:64:73:3C:99:5C:AB:7C:AA:FA:33:A0:CC:D7:6E:25:9A:45
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       53A41D526B74A554BA79CAFDA3744E9C0229D948
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e6be90fa-7ed7-404b-a71c-e8b9c8cf426b.roa
Signing time:             Tue 26 May 2026 03:02:14 +0000
ROA not before:           Tue 26 May 2026 03:02:14 +0000
ROA not after:            Mon 24 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        130.176.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:a4:1d:52:6b:74:a5:54:ba:79:ca:fd:a3:74:4e:9c:02:29:d9:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 26 03:02:14 2026 GMT
            Not After : Aug 24 23:59:59 2026 GMT
        Subject: serialNumber=4a0d614d896523b5f62c1266674d3743c7c5bbfbf8347ce1d3e9f88aef508f00, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:1b:b2:78:1e:0f:d3:66:9a:4b:77:db:dc:12:
                    41:bb:e3:72:eb:b8:03:1c:d0:8d:3d:7b:d1:af:61:
                    11:79:f7:fc:99:fb:8f:4d:11:ce:a1:68:78:34:a0:
                    89:58:ec:4a:1a:c1:f6:52:07:63:19:2b:3d:e1:0c:
                    e6:ef:0b:d3:cd:9a:2e:44:68:54:32:02:e2:13:8e:
                    6e:d0:bf:df:66:7a:2c:27:43:11:4e:70:99:97:76:
                    18:c9:ff:ad:09:50:f8:29:b9:18:18:b9:41:7b:5b:
                    34:54:4e:7f:08:e4:7b:4a:3c:b6:67:80:fd:75:c3:
                    5a:47:d2:b6:dd:3d:7b:88:f7:46:6f:5b:7d:dd:74:
                    1a:18:fb:22:ae:ae:37:3a:c1:19:80:5d:d2:53:52:
                    0c:16:18:e4:d8:38:47:51:ac:32:d0:c9:75:1b:f1:
                    83:d8:41:dc:2a:0e:b3:1f:d1:33:27:3f:75:d9:d8:
                    df:71:2a:fb:20:1c:33:76:23:5f:9c:1d:8d:a5:1c:
                    9a:79:f8:b9:70:ce:18:6d:02:52:0d:c3:27:9e:6f:
                    aa:1b:0a:34:f4:fa:dc:75:0d:cf:97:c6:ba:a2:64:
                    70:bb:fe:fd:b8:88:95:f6:89:fc:ce:2a:61:f8:c1:
                    9a:e8:7e:83:1b:f9:d7:5f:01:5b:87:90:63:78:d2:
                    08:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:82:B2:64:73:3C:99:5C:AB:7C:AA:FA:33:A0:CC:D7:6E:25:9A:45
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e6be90fa-7ed7-404b-a71c-e8b9c8cf426b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.176.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:3e:72:ab:54:17:cc:73:a1:5f:f8:87:c6:8b:3c:43:96:d7:
         8c:58:d0:6f:14:dd:23:e5:e3:bd:dd:23:d5:c5:bd:11:7f:b7:
         47:79:37:f0:e2:9c:dc:f8:5f:6c:c7:54:61:1f:aa:b7:d1:32:
         e7:7a:6d:d8:c9:9a:00:93:33:c0:b4:be:22:e5:b1:c5:7b:04:
         b8:69:5c:f1:58:ff:98:74:01:f3:cb:ac:ba:ef:90:7c:ac:c7:
         d3:5e:6a:84:74:76:81:e3:d3:35:77:e9:32:c3:cc:da:4a:7c:
         93:2e:54:84:e6:37:fb:90:16:63:aa:4c:67:80:d0:6e:58:df:
         0b:9a:5b:a9:c4:f4:df:e8:60:77:e2:f2:92:71:42:4e:77:f2:
         b9:40:fb:2b:b9:a5:a1:a6:41:b5:46:67:c8:d8:61:a1:d7:32:
         3d:86:4a:27:0d:31:33:d5:bd:9d:dd:66:93:d2:33:24:1b:6b:
         bd:80:dc:79:9a:3a:0b:20:9f:d0:84:23:9d:3f:8f:b0:85:9a:
         af:27:b2:5e:af:8c:89:6c:74:dc:a9:5b:c6:25:fd:a8:01:4f:
         cc:77:fc:87:0e:e9:94:40:66:ec:2f:2d:43:6b:12:13:04:84:
         bb:07:a8:06:e8:71:4a:28:84:7a:71:0b:a0:f8:03:32:10:cd:
         97:00:96:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:53:52 2026 by rpki-client