Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/01ad075c-b896-4272-83e3-d7afaaca2a80.roa
File:                     01ad075c-b896-4272-83e3-d7afaaca2a80.roa (raw, json)
Hash identifier:          fEvM9DZaaxKEfsyyBLBf946J2UUPhs2snfkv5akmiFQ=
Subject key identifier:   AF:DE:0A:86:93:47:B2:7E:CB:64:26:5A:D0:9B:DD:DA:7D:FD:D0:AA
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3E38AEE85B9A4FE6143015FEC829D36F73E92825
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/01ad075c-b896-4272-83e3-d7afaaca2a80.roa
Signing time:             Mon 19 Oct 2026 01:40:12 +0000
ROA not before:           Mon 19 Oct 2026 01:40:12 +0000
ROA not after:            Sun 17 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        130.176.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Nov 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:38:ae:e8:5b:9a:4f:e6:14:30:15:fe:c8:29:d3:6f:73:e9:28:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 19 01:40:12 2026 GMT
            Not After : Jan 17 23:59:59 2027 GMT
        Subject: serialNumber=f9959ce699e79515c5bb44293e5ea8386babd4a8f78fd95c34a200c7f5a837e7, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:62:82:28:34:da:4f:fa:c3:c4:8c:ad:02:37:
                    ef:1e:86:1c:91:e1:cd:dc:2f:f7:f4:f9:b2:05:04:
                    39:8d:54:ce:af:88:26:bb:f1:33:52:69:9f:72:43:
                    b0:ad:3c:f1:8d:e1:87:a4:b8:a2:37:00:68:a9:19:
                    58:3d:f4:aa:ed:19:8c:65:c2:dd:bf:70:d0:97:e9:
                    75:c1:fc:b9:01:b3:04:19:78:1f:86:ec:74:50:5c:
                    63:36:8c:a7:b7:77:90:07:33:4c:c4:37:bf:57:84:
                    ce:2a:02:d1:6f:d6:a7:75:4d:72:5d:bd:21:89:84:
                    7b:53:95:4b:b8:9e:b5:39:6e:31:0e:e2:5d:4c:bd:
                    c1:17:f9:bb:67:22:db:5f:55:d0:61:ce:ef:1f:3e:
                    59:01:fe:11:39:b1:ac:70:ed:2d:cc:1a:45:58:9d:
                    a0:75:6d:1a:de:8d:21:1b:cd:16:2a:a0:ee:03:4f:
                    10:73:99:ec:00:5d:75:a4:d7:15:99:a5:e2:09:bc:
                    39:a3:d7:90:34:77:14:06:1d:d4:28:4d:f9:eb:56:
                    71:09:56:70:c9:16:81:70:47:99:d2:7e:ad:e5:63:
                    aa:83:93:c9:3e:d5:76:03:4c:fa:54:60:f4:ac:b4:
                    f4:b9:55:64:d1:20:a9:f6:21:a1:8f:5a:17:ba:02:
                    fd:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:DE:0A:86:93:47:B2:7E:CB:64:26:5A:D0:9B:DD:DA:7D:FD:D0:AA
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/01ad075c-b896-4272-83e3-d7afaaca2a80.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.176.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:ed:46:05:c2:42:cc:c0:45:14:30:da:31:0a:e1:a3:a4:fa:
         cc:af:1c:7e:11:05:44:11:71:73:93:29:28:d5:e9:ea:7e:2a:
         48:91:ca:4b:f3:3b:c7:d8:1f:d0:4c:48:a0:9b:0d:63:53:12:
         1b:ac:2a:f9:1c:f7:d6:ca:ea:cf:ec:01:1e:c6:dc:00:52:75:
         d9:86:dd:c8:3b:46:3e:9b:f7:6e:39:62:39:a1:3b:4f:49:ec:
         7b:2a:37:24:70:a4:fb:32:1a:dc:14:6b:83:6b:0c:30:51:bd:
         c3:db:36:82:70:fe:7a:83:47:34:d0:cc:29:47:0e:4e:63:62:
         6e:37:e4:ad:30:97:bf:f7:d6:3d:a0:4d:6e:ec:ad:f2:52:5c:
         46:df:b4:1f:91:2e:56:8f:ff:52:e5:89:7e:63:fa:5c:c6:9a:
         57:a1:2c:ca:ce:d8:85:c8:82:0f:67:21:cb:0a:4a:4f:e3:10:
         21:44:ef:27:6c:20:22:36:fa:03:f6:f5:a4:2a:89:bd:58:f9:
         6d:2f:bc:ae:6a:ac:38:dd:57:e7:7d:88:39:ac:75:02:fd:37:
         3e:fe:02:71:f0:c7:e8:fd:98:71:ec:13:ef:43:17:96:9b:bf:
         50:93:c3:2f:9c:48:8e:c8:00:a2:5f:14:46:a3:0b:b6:cf:4d:
         6a:49:ed:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 18:49:00 2026 by rpki-client