Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/24f8a6f4-9cf8-4839-a98d-4a5fd83b3cb0.roa
File:                     24f8a6f4-9cf8-4839-a98d-4a5fd83b3cb0.roa (raw, json)
Hash identifier:          Nn23vtm++khlXEQKPzajNvOH74PkfAvWjTLG5l3fP1g=
Subject key identifier:   74:53:51:6C:ED:15:85:66:F1:D7:0A:87:74:72:00:43:12:B7:9B:56
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3544B831EEDDF6B31D29C23F1832A6A475BCA635
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/24f8a6f4-9cf8-4839-a98d-4a5fd83b3cb0.roa
Signing time:             Mon 27 Apr 2026 00:11:20 +0000
ROA not before:           Mon 27 Apr 2026 00:11:20 +0000
ROA not after:            Sun 26 Jul 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        130.31.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:44:b8:31:ee:dd:f6:b3:1d:29:c2:3f:18:32:a6:a4:75:bc:a6:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 27 00:11:20 2026 GMT
            Not After : Jul 26 23:59:59 2026 GMT
        Subject: serialNumber=e030096b99729caaf4ae39ab2f21ca8d9b09e0d7f607a8296bb38e2e9c869c85, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:eb:0e:60:1d:0b:1e:8e:79:69:59:61:fd:88:
                    09:62:c8:3e:e1:e8:6c:df:a5:d3:1d:36:7a:ae:ad:
                    29:d2:a9:33:a4:fc:57:7e:83:68:55:de:aa:89:0c:
                    99:bd:1a:f3:09:37:7a:23:72:d2:6a:60:43:8e:97:
                    fc:90:7b:58:52:ee:f0:e8:33:74:5d:00:35:c8:52:
                    81:dd:dd:a0:a2:7a:66:7c:1c:7e:41:ef:c3:33:56:
                    7b:cf:99:94:70:06:86:d9:fc:ee:c9:87:a2:93:2b:
                    e6:84:66:37:b3:f9:37:da:7b:b1:3a:74:23:59:88:
                    49:c8:b9:2b:d7:1c:6d:b1:f2:42:e6:11:0f:4a:a6:
                    a6:4d:6e:f7:90:5f:64:de:16:ef:7f:32:c8:08:41:
                    74:16:eb:6b:66:8c:d2:78:49:40:a6:9e:5e:92:a1:
                    76:d9:2f:28:ad:3c:94:03:70:01:bd:be:ed:f7:d8:
                    63:17:78:4f:19:7e:14:20:b9:15:d6:a9:20:e5:bc:
                    5b:e7:6d:a1:50:41:30:0e:65:c0:56:cc:f0:62:ea:
                    b9:f5:6a:1c:db:63:4d:73:6f:28:5e:ea:36:5b:b3:
                    7d:c8:b7:ac:30:e2:99:f0:47:0c:e4:6b:06:48:57:
                    82:35:6f:d0:27:97:87:68:8d:ca:0e:7e:38:62:b8:
                    1c:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:53:51:6C:ED:15:85:66:F1:D7:0A:87:74:72:00:43:12:B7:9B:56
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/24f8a6f4-9cf8-4839-a98d-4a5fd83b3cb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.31.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         86:80:37:ff:ba:ce:8a:79:d5:1d:66:1f:3d:e7:d4:df:6c:d3:
         1c:fb:80:6b:67:11:31:dd:55:6c:e5:a1:89:e7:c8:d3:ca:5d:
         70:2d:bf:c4:b7:82:9f:6a:a2:5c:e4:ad:bc:13:2b:34:4c:5c:
         d0:8a:eb:4d:de:11:78:c2:14:21:ef:0b:f0:0c:4b:42:b5:8a:
         d7:d8:3f:2f:24:22:d9:22:ca:67:64:66:50:76:c1:f6:6f:54:
         e6:f5:16:e7:db:35:79:be:d5:68:7d:a9:e8:3a:72:10:80:bc:
         9b:fa:8f:45:f7:ff:05:10:26:c5:f1:a4:19:91:70:a7:67:ad:
         77:10:02:0d:05:7a:72:bc:69:a6:0b:db:d4:5a:d4:b0:db:ce:
         43:c7:e0:cd:5b:16:c0:45:ac:b0:20:5e:c1:31:22:28:70:f9:
         d2:08:02:c5:af:de:a7:d8:a5:58:da:83:24:ee:7f:f7:17:68:
         a2:7a:e3:59:b7:ad:95:62:66:b7:6d:40:f7:5c:57:c5:b7:38:
         be:fa:ca:2a:81:dd:87:5a:08:75:17:70:cc:a0:8b:51:fb:bb:
         1c:39:1e:11:c3:34:07:e9:8d:34:f8:8f:82:3b:af:9b:24:71:
         30:53:80:86:2d:e9:e2:85:61:0d:c8:39:8a:7a:70:f0:6b:7e:
         a2:be:b3:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 8 13:03:46 2026 by rpki-client