Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1c0a9a8c-1ff8-435b-b1aa-e9d93db1fe1a.roa
File:                     1c0a9a8c-1ff8-435b-b1aa-e9d93db1fe1a.roa (raw, json)
Hash identifier:          hmi+G8jlNOVijkwy+etuGdhdstbXMCMhLviIzxj99u8=
Subject key identifier:   2E:40:26:F1:1A:63:E7:57:47:40:36:47:4E:00:45:F2:7E:FD:C4:FD
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5673A50C9E6D0CE75985E64AAEF3509FD73BE5D4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1c0a9a8c-1ff8-435b-b1aa-e9d93db1fe1a.roa
Signing time:             Fri 31 Jul 2026 00:20:52 +0000
ROA not before:           Fri 31 Jul 2026 00:20:52 +0000
ROA not after:            Thu 29 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        130.176.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Aug 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:73:a5:0c:9e:6d:0c:e7:59:85:e6:4a:ae:f3:50:9f:d7:3b:e5:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 31 00:20:52 2026 GMT
            Not After : Oct 29 23:59:59 2026 GMT
        Subject: serialNumber=0b280333e69e2ec7704405fe1d0b55a09e083e55c76fe78c007ceca6f9dd6f15, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c7:a0:e3:55:c0:5e:90:e4:10:b8:fa:7e:7c:
                    a3:72:d0:64:7f:7b:b8:a9:d1:15:11:90:24:96:be:
                    6f:66:4f:c1:eb:02:58:40:e7:72:6e:85:47:87:24:
                    10:c6:59:e6:93:68:43:c3:00:ae:29:c9:75:1a:31:
                    47:21:be:21:dc:3a:ac:84:d9:92:b8:3b:86:53:78:
                    16:35:a7:8c:63:08:ef:16:24:9f:42:01:74:de:50:
                    6c:18:f2:7c:6f:3f:1b:97:35:a3:d8:f1:9e:08:02:
                    43:65:a7:93:20:80:43:17:0b:49:c0:83:d2:dd:39:
                    68:9a:e7:ed:3a:8f:71:e9:a3:e3:d0:79:42:a0:1b:
                    98:df:f4:78:c4:6f:78:d0:5e:bd:4b:ef:b8:62:c9:
                    ba:0b:c3:12:67:87:47:92:63:cb:da:4d:4e:b9:f7:
                    e2:5e:bd:3d:c1:66:96:f1:29:54:ce:44:ea:f7:4c:
                    4e:0f:33:74:3b:99:ad:51:f9:ed:7f:c0:0d:39:6e:
                    34:cc:cb:69:09:76:c0:a2:82:37:5c:b3:bf:c1:eb:
                    b9:40:9b:e7:87:bb:80:12:ed:62:ef:75:87:5c:35:
                    29:24:63:66:4f:45:d2:4e:e0:48:86:f7:c0:e0:6a:
                    bd:f0:f9:c9:76:64:ab:35:86:54:ad:75:4e:a4:a2:
                    dc:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:40:26:F1:1A:63:E7:57:47:40:36:47:4E:00:45:F2:7E:FD:C4:FD
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1c0a9a8c-1ff8-435b-b1aa-e9d93db1fe1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.176.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:f4:5e:2a:23:65:7c:e9:87:e5:c1:91:64:4a:7c:9e:68:42:
         2e:33:44:d4:02:12:56:39:fe:a4:ec:9b:57:21:4f:2e:de:6d:
         0d:c2:a3:e3:cd:eb:85:26:e8:79:28:6d:e6:39:da:3f:97:ca:
         2f:02:44:42:4d:71:95:0f:de:4e:1d:7f:3f:f6:83:f9:63:58:
         00:cb:20:a6:a8:94:5f:6c:57:7c:f6:59:c3:cf:7d:e6:46:2e:
         ad:68:9f:d0:2e:9b:24:2e:e3:5b:80:9d:18:09:1a:a8:80:1c:
         8e:f0:0a:47:10:2f:1b:59:34:b7:40:98:82:f2:66:36:a8:0d:
         ed:59:3e:92:90:16:91:a4:78:b8:50:c8:ec:f0:2a:ef:5a:15:
         84:ad:2d:03:b4:c4:35:a4:32:6a:00:6d:f9:dd:1b:41:ef:6c:
         c0:e5:d5:35:4e:d6:3c:63:66:ed:a1:4a:a8:99:78:06:64:a4:
         e8:d1:4d:1c:2b:cc:01:bb:f1:26:df:1b:dc:b7:a3:35:b8:bb:
         6e:92:bf:4c:a0:40:21:bf:72:0d:77:b1:6d:5b:85:9b:91:ca:
         b4:46:6e:b6:be:7a:20:db:c5:51:56:d1:59:f9:72:b2:59:75:
         d9:c2:a9:17:28:81:6d:b8:45:c5:f2:e0:75:4d:6f:91:6f:3d:
         b4:23:a6:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 3 06:36:19 2026 by rpki-client