Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/15abc85e-35c2-4e47-b0f6-b47923e787da.roa
File:                     15abc85e-35c2-4e47-b0f6-b47923e787da.roa (raw, json)
Hash identifier:          5rlAmWWrzsNVwm2eSN3Y0bmrUIYjnTcaT9IXTyyIkmI=
Subject key identifier:   74:79:28:52:EE:7B:2F:66:28:98:72:C7:C4:11:F3:0C:9E:AC:DE:F3
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       49AF3F20C21598C5A467BF41E923DB03224EA3AA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/15abc85e-35c2-4e47-b0f6-b47923e787da.roa
Signing time:             Fri 31 Jul 2026 01:10:48 +0000
ROA not before:           Fri 31 Jul 2026 01:10:48 +0000
ROA not after:            Thu 29 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        130.176.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 16 Aug 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:af:3f:20:c2:15:98:c5:a4:67:bf:41:e9:23:db:03:22:4e:a3:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 31 01:10:48 2026 GMT
            Not After : Oct 29 23:59:59 2026 GMT
        Subject: serialNumber=414262b9c541fb581a2f3153033f0d74d2cb3a1422d8c46564c2d797130ba6cd, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:28:9b:7a:06:ff:ef:7d:78:63:25:1e:e5:e2:
                    50:c4:4e:8e:f8:9b:c7:10:0e:ed:e0:83:5c:1f:02:
                    e9:d6:ea:8b:1e:e9:ce:59:83:c7:65:3d:18:c3:3d:
                    be:2a:fe:00:90:45:4d:08:81:02:6b:b1:b1:5d:3b:
                    6d:23:6b:cf:04:ed:2d:6b:f2:1a:0a:3f:42:3d:e0:
                    8e:00:6f:98:25:5d:35:9b:f0:8f:96:32:49:7c:10:
                    c2:5c:0d:02:47:be:c7:11:b0:00:9d:21:7a:a6:c2:
                    52:d1:5c:52:7b:40:30:b5:f2:84:9c:4c:96:16:de:
                    59:22:c2:09:ab:d3:aa:e0:d6:e1:f8:40:af:25:86:
                    fe:42:b0:27:6d:aa:e4:d1:41:99:b3:10:fc:b5:22:
                    df:5e:09:74:94:4e:f2:cb:93:f5:dc:22:09:09:9a:
                    fb:28:07:f6:c1:38:e1:12:ea:56:8e:95:2d:88:ed:
                    d6:1c:21:63:42:f1:e7:28:23:80:4c:cf:76:60:04:
                    59:ba:b3:ac:05:9b:d4:00:b8:a2:4c:4f:a1:2e:6a:
                    42:2d:ef:4a:5b:6f:94:a0:6a:a1:55:fa:13:ac:7d:
                    19:b1:f3:57:20:64:56:9a:ef:d9:66:6d:89:92:fa:
                    f1:77:45:5c:e1:cd:16:53:a1:06:98:6b:05:b9:6a:
                    ad:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:79:28:52:EE:7B:2F:66:28:98:72:C7:C4:11:F3:0C:9E:AC:DE:F3
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/15abc85e-35c2-4e47-b0f6-b47923e787da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.176.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b9:f8:1d:ac:45:df:fc:37:7b:cb:72:fe:31:b2:89:38:6a:f3:
         c4:e0:aa:25:f6:c9:85:2f:39:e7:b7:00:7c:95:28:83:f3:0f:
         f8:59:52:32:89:e5:ca:99:15:d9:5c:fd:8e:55:27:04:a3:94:
         f7:d2:df:ea:37:78:11:a5:81:8b:a1:f3:bb:43:fd:d9:f2:2a:
         d7:79:27:e2:f3:d9:61:6d:31:16:63:5f:01:d0:2f:ee:36:7e:
         91:ff:89:a9:b2:f8:07:d0:4c:41:a3:3e:f2:bf:79:60:9b:40:
         0f:f6:1e:88:a8:12:c4:99:d6:1b:b7:15:bc:76:81:ff:ab:d5:
         98:2e:fc:b2:39:7a:b5:a7:a7:78:19:26:a8:1b:6a:61:74:90:
         3b:a6:bb:35:d3:f0:82:a0:bf:38:27:1b:ac:6b:de:9b:5c:0a:
         f4:18:ca:2f:8b:a6:1e:65:22:d2:20:8f:91:96:9a:ce:8c:e3:
         65:8d:c3:95:3d:71:13:8c:77:3e:c4:6d:2b:56:47:78:60:8d:
         8b:55:85:b8:f3:dc:6a:34:7b:d7:f1:e8:66:0c:60:74:df:1d:
         fc:72:91:81:74:a0:d4:9a:c2:82:c5:96:68:95:cb:53:72:88:
         97:28:56:2f:5c:59:61:97:81:23:08:52:e2:16:f3:1f:24:a3:
         86:44:6f:7e
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUSa8/IMIVmMWkZ79B6SPbAyJOo6owDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzMxMDExMDQ4WhcNMjYxMDI5MjM1OTU5
WjB6MUkwRwYDVQQFE0A0MTQyNjJiOWM1NDFmYjU4MWEyZjMxNTMwMzNmMGQ3NGQy
Y2IzYTE0MjJkOGM0NjU2NGMyZDc5NzEzMGJhNmNkMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC9KJt6Bv/vfXhjJR7l4lDETo74m8cQDu3gg1wfAunW6ose
6c5Zg8dlPRjDPb4q/gCQRU0IgQJrsbFdO20ja88E7S1r8hoKP0I94I4Ab5glXTWb
8I+WMkl8EMJcDQJHvscRsACdIXqmwlLRXFJ7QDC18oScTJYW3lkiwgmr06rg1uH4
QK8lhv5CsCdtquTRQZmzEPy1It9eCXSUTvLLk/XcIgkJmvsoB/bBOOES6laOlS2I
7dYcIWNC8ecoI4BMz3ZgBFm6s6wFm9QAuKJMT6EuakIt70pbb5SgaqFV+hOsfRmx
81cgZFaa79lmbYmS+vF3RVzhzRZToQaYawW5aq05AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUdHkoUu57L2YomHLHxBHzDJ6s3vMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzE1YWJjODVlLTM1YzItNGU0Ny1iMGY2LWI0NzkyM2U3ODdkYS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBACCsAEwDQYJKoZIhvcNAQELBQADggEBALn4HaxF3/w3e8ty/jGyiThq88Tg
qiX2yYUvOee3AHyVKIPzD/hZUjKJ5cqZFdlc/Y5VJwSjlPfS3+o3eBGlgYuh87tD
/dnyKtd5J+Lz2WFtMRZjXwHQL+42fpH/iamy+AfQTEGjPvK/eWCbQA/2HoioEsSZ
1hu3Fbx2gf+r1Zgu/LI5erWnp3gZJqgbamF0kDumuzXT8IKgvzgnG6xr3ptcCvQY
yi+Lph5lItIgj5GWms6M42WNw5U9cROMdz7EbStWR3hgjYtVhbjz3Go0e9fx6GYM
YHTfHfxykYF0oNSawoLFlmiVy1NyiJcoVi9cWWGXgSMIUuIW8x8ko4ZEb34=
-----END CERTIFICATE-----
Generated at Sat Aug 15 07:43:31 2026 by rpki-client