Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0819d3f8-1f9d-41b0-b4ce-0b87c04afb8b.roa
File:                     0819d3f8-1f9d-41b0-b4ce-0b87c04afb8b.roa (raw, json)
Hash identifier:          ftSBabFRLXF1FE7Qlb0PSZsftTAdV0hbloOy1WzpqnU=
Subject key identifier:   A5:AF:95:D2:65:9B:B0:DC:34:2C:9B:E0:87:34:35:D9:C1:0D:1D:28
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       580A6C3EC8F6233C410C8A9490CC48B9FA352ACA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0819d3f8-1f9d-41b0-b4ce-0b87c04afb8b.roa
Signing time:             Thu 18 Jun 2026 00:00:13 +0000
ROA not before:           Thu 18 Jun 2026 00:00:13 +0000
ROA not after:            Wed 16 Sep 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        130.176.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:0a:6c:3e:c8:f6:23:3c:41:0c:8a:94:90:cc:48:b9:fa:35:2a:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun 18 00:00:13 2026 GMT
            Not After : Sep 16 23:59:59 2026 GMT
        Subject: serialNumber=faa98ba13fae948af43c71e2c96b05b5d9bdd1b36a83d2dd6742fbfa5b3bb9fa, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:54:ba:58:1e:09:1f:b9:f5:28:f4:23:7f:ff:
                    bc:d2:60:a8:47:78:68:3a:6d:fd:4b:ca:02:03:aa:
                    4e:d0:30:22:d8:f5:e2:ca:54:30:b2:8c:c0:5e:de:
                    ef:c7:a1:ae:ad:93:77:6f:1a:94:9d:cf:2c:b0:ae:
                    bd:22:47:19:15:20:87:5a:47:9a:9a:3d:dc:31:43:
                    43:02:7d:60:42:c9:8d:f1:ff:4d:9a:f6:39:db:c4:
                    c1:f9:eb:ed:38:bd:a8:e0:ba:2c:d2:ad:a9:71:3c:
                    07:93:68:63:09:57:87:96:a8:d6:e3:10:7d:0c:0f:
                    b4:e6:24:49:eb:c9:ff:ec:29:73:90:b4:f7:86:24:
                    27:af:65:b6:38:14:74:1e:da:f9:5e:f1:19:ff:aa:
                    3c:82:eb:7b:7d:1e:29:7c:80:a2:4f:56:4f:72:2f:
                    f8:48:d8:c8:57:72:f6:e2:89:21:d7:8a:b2:2c:79:
                    6a:97:73:04:c1:da:ff:f5:af:68:9f:d6:44:97:47:
                    47:d6:a3:18:6d:3f:9d:d4:e8:43:22:3f:52:7d:71:
                    8c:32:bf:4b:34:f0:e3:77:94:29:35:d4:1c:91:84:
                    4b:39:fc:5d:57:9f:f3:c6:3b:d4:ab:33:58:e3:89:
                    25:dc:5b:a5:62:e2:e6:37:33:76:c6:41:80:a4:ae:
                    d0:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:AF:95:D2:65:9B:B0:DC:34:2C:9B:E0:87:34:35:D9:C1:0D:1D:28
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0819d3f8-1f9d-41b0-b4ce-0b87c04afb8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.176.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:21:f6:69:65:83:b9:12:0c:25:f6:c2:12:d8:d2:c1:02:aa:
         db:80:31:3e:49:a4:68:f7:91:ab:b8:f8:8e:e0:15:b7:02:a7:
         97:6e:1a:ac:f8:bb:1b:bb:c3:9d:ab:13:b4:80:81:6c:75:ed:
         b5:aa:b6:e3:fe:cf:90:e8:bc:35:26:8d:66:e9:bf:2b:c5:9f:
         86:5b:c2:b1:ec:95:c6:8d:53:36:aa:49:56:dc:18:7c:37:a5:
         7f:d8:3b:04:87:23:2b:01:6a:02:a8:66:d4:8a:40:56:6f:69:
         29:5a:a0:5b:70:9b:68:07:2b:23:c7:46:f9:f0:95:6f:84:8a:
         19:ac:07:db:ab:f2:8c:35:34:86:74:90:66:7f:5a:96:59:fa:
         68:de:8c:f3:05:13:17:5d:3c:79:2a:75:3a:54:33:be:90:cd:
         38:62:13:cf:97:c0:fb:01:26:ed:17:68:45:d9:28:1e:a4:76:
         ec:63:25:39:4e:34:d9:9f:56:e6:ed:ce:7b:bf:9d:6d:37:f8:
         ec:1d:dc:14:1b:62:30:29:77:f1:ee:d0:7d:6d:de:f6:97:cb:
         91:e0:68:04:ae:93:a1:36:46:e6:d8:94:ce:aa:af:07:88:e3:
         5d:60:8d:e5:b2:60:dd:49:67:0c:aa:1d:9d:63:bc:66:20:a7:
         eb:89:33:9e
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUWApsPsj2IzxBDIqUkMxIufo1KsowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNjE4MDAwMDEzWhcNMjYwOTE2MjM1OTU5
WjB6MUkwRwYDVQQFE0BmYWE5OGJhMTNmYWU5NDhhZjQzYzcxZTJjOTZiMDViNWQ5
YmRkMWIzNmE4M2QyZGQ2NzQyZmJmYTViM2JiOWZhMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQChVLpYHgkfufUo9CN//7zSYKhHeGg6bf1LygIDqk7QMCLY
9eLKVDCyjMBe3u/Hoa6tk3dvGpSdzyywrr0iRxkVIIdaR5qaPdwxQ0MCfWBCyY3x
/02a9jnbxMH56+04vajguizSralxPAeTaGMJV4eWqNbjEH0MD7TmJEnryf/sKXOQ
tPeGJCevZbY4FHQe2vle8Rn/qjyC63t9Hil8gKJPVk9yL/hI2MhXcvbiiSHXirIs
eWqXcwTB2v/1r2if1kSXR0fWoxhtP53U6EMiP1J9cYwyv0s08ON3lCk11ByRhEs5
/F1Xn/PGO9SrM1jjiSXcW6Vi4uY3M3bGQYCkrtB7AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUpa+V0mWbsNw0LJvghzQ12cENHSgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzA4MTlkM2Y4LTFmOWQtNDFiMC1iNGNlLTBiODdjMDRhZmI4Yi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBACCsBYwDQYJKoZIhvcNAQELBQADggEBABgh9mllg7kSDCX2whLY0sECqtuA
MT5JpGj3kau4+I7gFbcCp5duGqz4uxu7w52rE7SAgWx17bWqtuP+z5DovDUmjWbp
vyvFn4ZbwrHslcaNUzaqSVbcGHw3pX/YOwSHIysBagKoZtSKQFZvaSlaoFtwm2gH
KyPHRvnwlW+EihmsB9ur8ow1NIZ0kGZ/WpZZ+mjejPMFExddPHkqdTpUM76QzThi
E8+XwPsBJu0XaEXZKB6kduxjJTlONNmfVubtznu/nW03+Owd3BQbYjApd/Hu0H1t
3vaXy5HgaASuk6E2RubYlM6qrweI411gjeWyYN1JZwyqHZ1jvGYgp+uJM54=
-----END CERTIFICATE-----
Generated at Fri Jun 19 03:55:08 2026 by rpki-client