Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/174655aa-3528-434c-8b76-bb186c3d5b6f.roa
File:                     174655aa-3528-434c-8b76-bb186c3d5b6f.roa (raw, json)
Hash identifier:          nYQuMKCo+1jb61bBhaAnKMe21Dit+C8GNcyBDdNT1V4=
Subject key identifier:   B6:A3:C7:01:FF:72:E1:43:F6:B2:C8:4E:EE:5F:B1:0D:6C:DB:4C:E4
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       383AB88C95019688EDD7802A4D3E38322E0A5839
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/174655aa-3528-434c-8b76-bb186c3d5b6f.roa
Signing time:             Fri 31 Jul 2026 00:40:06 +0000
ROA not before:           Fri 31 Jul 2026 00:40:06 +0000
ROA not after:            Thu 29 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        130.176.64.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Aug 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:3a:b8:8c:95:01:96:88:ed:d7:80:2a:4d:3e:38:32:2e:0a:58:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 31 00:40:06 2026 GMT
            Not After : Oct 29 23:59:59 2026 GMT
        Subject: serialNumber=c93c320eece343e8d9b542b3d192dfde267c7c332251ca980a0e79666ec1d781, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:dd:68:46:89:f6:e4:b5:a0:50:98:20:84:c1:
                    bd:d4:82:75:a6:c2:f7:75:ed:72:14:0d:74:36:43:
                    9d:d2:a3:68:4f:95:f0:33:2f:df:13:bb:07:0a:f9:
                    d4:49:76:79:36:26:d7:60:9d:9a:62:3a:27:af:a9:
                    a4:03:9d:32:d0:35:01:64:06:4c:2f:68:4c:9b:fd:
                    aa:7b:17:e8:e5:a1:7b:e1:85:c8:1d:64:e7:d3:fc:
                    bf:6b:1f:94:be:4d:9f:d6:e4:50:f9:26:cd:a0:5b:
                    b2:4e:63:0b:ab:96:27:e2:85:9a:19:1f:20:e6:23:
                    95:8b:4f:3c:ed:16:38:e2:46:db:38:4f:e2:e1:ce:
                    9f:68:dc:cd:84:c0:4d:7a:73:33:a7:63:30:d2:4c:
                    3a:5a:2b:34:64:94:ad:0c:b6:ee:36:df:e1:62:12:
                    f0:cb:12:21:88:ce:e3:46:2f:aa:c7:ed:58:d8:4c:
                    89:44:62:ef:c3:eb:53:6b:4d:22:fc:b5:f3:f8:10:
                    23:c3:01:3c:54:28:b5:0f:e2:8d:67:87:e9:09:73:
                    99:44:cf:35:29:37:7b:f3:72:44:43:67:a1:23:b8:
                    00:84:a8:a7:84:20:a0:dc:23:a0:65:b6:22:19:e6:
                    d2:ae:32:65:bf:05:a2:ac:27:ba:4f:44:fe:fa:b6:
                    70:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:A3:C7:01:FF:72:E1:43:F6:B2:C8:4E:EE:5F:B1:0D:6C:DB:4C:E4
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/174655aa-3528-434c-8b76-bb186c3d5b6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.176.64.0/21

    Signature Algorithm: sha256WithRSAEncryption
         cc:28:64:01:a2:fa:26:ff:ef:1b:48:10:cf:0a:dc:48:2b:da:
         57:47:17:98:5e:ba:cd:d0:26:a1:1d:6b:69:7b:83:f9:b3:cd:
         2d:b6:b0:13:a4:d1:42:b6:a1:96:b3:bd:a7:56:a1:2b:c2:42:
         67:99:70:f6:e3:7c:11:ee:06:4f:9a:c9:9d:2b:4f:3c:55:4d:
         14:cc:4b:e7:f7:cc:35:50:c1:dd:2b:05:28:9e:f9:47:ae:4c:
         f2:f3:15:a9:01:e1:4c:86:d8:1d:4d:25:68:85:f4:a0:7e:a6:
         16:9f:2d:b0:c9:2f:36:18:15:4c:ee:7e:01:e8:4f:60:96:d3:
         cb:e0:27:2b:4c:da:12:39:5b:d3:65:70:ad:79:91:81:a9:5f:
         2c:24:f6:bb:f5:cd:0d:1f:40:c6:97:75:30:1a:65:5f:e4:8e:
         ef:b9:c5:76:ac:1f:a8:1c:07:d8:3a:65:e9:75:af:42:38:db:
         56:22:42:38:01:97:79:13:73:31:c9:7b:8d:cb:b9:bd:f4:e3:
         c6:e6:01:2b:73:cb:4c:9d:7b:1f:78:25:83:a8:94:4d:40:28:
         7b:ef:5c:be:73:84:f1:dc:ca:0d:59:bb:97:ca:5b:59:d6:b1:
         74:c7:d2:cd:16:54:2a:a4:0b:dc:a2:7f:e8:78:75:cc:4f:52:
         dd:ef:6c:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 3 05:42:03 2026 by rpki-client