Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f894388f-c0a4-4efa-b81e-0a0feb582809.roa
File:                     f894388f-c0a4-4efa-b81e-0a0feb582809.roa (raw, json)
Hash identifier:          YBbJU+mBCHxSd/JVdLyuYaVb3d3Q4WTM3SYXg1NKLqg=
Subject key identifier:   29:5C:6A:DF:26:21:07:80:47:A3:DE:16:49:37:A6:90:20:E2:61:6E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       539AB8254F2AD87A9E2FA094566FED25B85300CC
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f894388f-c0a4-4efa-b81e-0a0feb582809.roa
Signing time:             Thu 11 Jun 2026 00:00:14 +0000
ROA not before:           Thu 11 Jun 2026 00:00:14 +0000
ROA not after:            Wed 09 Sep 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        130.176.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:9a:b8:25:4f:2a:d8:7a:9e:2f:a0:94:56:6f:ed:25:b8:53:00:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun 11 00:00:14 2026 GMT
            Not After : Sep  9 23:59:59 2026 GMT
        Subject: serialNumber=ae128b1e52c906be9aeb6b2c3ed810609987d3ae8d2efccd0ac1fdc79f2404f7, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:6b:4b:69:3b:b8:76:56:16:7b:11:0f:49:05:
                    ad:88:16:65:4f:b7:44:ce:85:4a:64:32:8d:01:6b:
                    fa:2d:40:b3:10:12:09:fd:a5:4d:0c:c1:60:08:5a:
                    3b:04:0f:00:d7:8c:5b:ba:d5:19:5a:8f:e2:47:86:
                    ae:70:cd:bc:24:8a:b5:98:63:6e:00:8c:29:d6:4c:
                    7b:fd:0a:b6:e0:be:d6:c5:f9:10:31:3c:68:6f:85:
                    44:03:d9:58:9e:30:47:87:2c:b4:a5:ab:6e:7a:16:
                    ed:e4:9d:08:7e:b4:ae:be:62:0a:87:61:13:91:74:
                    8e:3e:a2:14:ad:37:19:96:52:23:26:8c:c6:1a:21:
                    e5:81:b1:b4:5d:b7:dc:ec:b3:39:17:65:3c:cd:fa:
                    72:7e:45:86:84:33:c3:21:c8:7a:e5:cc:1f:a6:27:
                    3b:87:64:94:48:83:02:c5:19:2d:c8:ca:a8:85:44:
                    7c:ad:cd:65:77:71:e9:52:98:33:ae:83:53:99:6d:
                    8c:94:11:47:1f:93:19:93:41:5a:e4:95:54:7f:28:
                    90:e1:68:fb:bd:92:86:bc:1d:f7:f2:f4:5d:1e:84:
                    16:4c:af:29:ab:0f:1d:e1:c4:f2:54:7d:bd:27:c9:
                    1b:ad:b2:57:b5:d1:30:02:1d:c4:c9:3d:70:57:0b:
                    43:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:5C:6A:DF:26:21:07:80:47:A3:DE:16:49:37:A6:90:20:E2:61:6E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f894388f-c0a4-4efa-b81e-0a0feb582809.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.176.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:d5:81:87:46:cd:ed:f6:b1:51:80:65:55:e9:1b:4a:38:bf:
         30:34:1d:b8:0b:c6:65:1e:5c:0c:5d:1c:af:cf:f8:a0:5e:4c:
         ee:37:a6:d7:a4:ba:1b:fb:16:eb:fc:95:01:3d:1a:01:f3:26:
         7b:60:de:2f:36:66:69:58:30:bd:5e:f4:f4:bf:74:95:39:4d:
         7a:0b:b0:f4:20:1c:9a:e8:b6:5f:64:26:f4:5a:2e:7d:94:8d:
         36:a9:b5:6d:72:fa:05:93:8a:0e:dc:b6:4c:1b:c0:e6:88:82:
         88:47:3e:9a:07:95:c0:67:9c:8d:0d:0c:e0:07:fe:58:f0:40:
         94:f3:8e:c3:6a:eb:71:dd:d9:ec:50:b9:53:87:bd:ef:84:fd:
         be:23:a5:54:65:52:bc:bf:c6:ff:d7:b6:ce:52:e1:2f:49:e8:
         9a:93:13:de:01:48:fe:e0:01:2c:66:a5:0d:a1:a1:bb:71:b6:
         e7:cc:af:c8:37:4e:6d:e1:c3:d3:3f:a3:26:40:49:f2:41:73:
         61:a5:1b:06:93:54:fb:2d:8f:ee:e5:e4:68:2b:cf:b2:cf:46:
         3e:18:b6:d7:1f:28:b1:14:5e:5b:37:a2:b5:b8:8f:01:e8:46:
         d9:0a:0a:05:59:88:0d:db:90:15:e5:c3:5a:c5:c2:a7:b7:ba:
         4d:90:a1:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:08:40 2026 by rpki-client