Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/355bbd3f-b404-43cd-be53-84e55894f58f.roa
File:                     355bbd3f-b404-43cd-be53-84e55894f58f.roa (raw, json)
Hash identifier:          8P7fkP7EidhliX9SxHe2xqzeULWFpltM+WAu5Q9A2+4=
Subject key identifier:   5C:54:D9:07:03:77:38:65:92:CB:70:A0:A5:E7:B9:8E:10:EC:F4:A7
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       56A6AA1D164AA07DD98CC7393E2AFA707E267862
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/355bbd3f-b404-43cd-be53-84e55894f58f.roa
Signing time:             Fri 31 Jul 2026 01:21:02 +0000
ROA not before:           Fri 31 Jul 2026 01:21:02 +0000
ROA not after:            Thu 29 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        130.176.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Aug 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:a6:aa:1d:16:4a:a0:7d:d9:8c:c7:39:3e:2a:fa:70:7e:26:78:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 31 01:21:02 2026 GMT
            Not After : Oct 29 23:59:59 2026 GMT
        Subject: serialNumber=04165fd3ad45e29d66a9cb2f256517cecb40c01da58273c267fd6ab492701c02, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:d2:b0:73:81:19:51:13:76:d9:9b:54:7f:61:
                    65:b5:3e:cc:0c:02:2d:b6:c5:48:2a:21:c3:b8:3b:
                    01:61:1a:86:98:64:b0:a3:87:82:4e:b3:0b:3e:a7:
                    67:77:89:89:19:d4:7b:a5:b6:60:1e:b3:ae:dc:9f:
                    17:d8:84:e6:df:cd:c2:23:97:0c:75:f5:3c:8d:00:
                    08:6f:f7:0a:c8:d7:ac:1c:f5:e1:2a:2b:cc:3f:2c:
                    39:6e:79:42:0f:1d:b7:b8:1b:77:19:1b:df:75:a6:
                    e0:cf:9d:fb:e3:ed:11:86:7c:e0:b6:21:32:6b:88:
                    c8:fd:af:6e:60:d6:51:56:3a:52:85:33:e7:e4:77:
                    d2:01:ea:76:5f:6b:cf:3a:29:bf:64:35:df:f4:f6:
                    4b:fb:83:8d:ec:82:5c:3c:07:79:a6:09:c4:78:0f:
                    0f:96:e4:bf:d2:c6:bf:a8:32:6c:5d:14:c9:3a:67:
                    40:05:c4:7d:7b:6f:ca:ef:ff:bc:76:d1:d0:0c:94:
                    a4:4a:1a:92:b2:20:fe:56:7e:0b:34:7d:48:55:49:
                    ea:28:5c:5b:fa:06:c6:02:1a:c3:40:d0:fb:d9:a2:
                    c9:14:29:89:b7:37:7c:e1:ad:6d:5b:9a:66:c3:a0:
                    ff:8c:33:86:be:23:23:19:c3:77:7b:51:b8:6e:0a:
                    38:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:54:D9:07:03:77:38:65:92:CB:70:A0:A5:E7:B9:8E:10:EC:F4:A7
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/355bbd3f-b404-43cd-be53-84e55894f58f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.176.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d7:e4:ff:8b:d8:d3:9c:71:48:5e:05:3c:ab:db:1d:c6:09:9e:
         3c:21:e9:fe:6c:ed:61:5c:40:58:b8:41:82:d0:e1:05:2d:1c:
         ce:c7:35:66:dd:df:82:95:33:cc:bb:89:58:59:d2:1f:d2:2c:
         a5:c4:09:6f:d9:b3:d2:27:72:e6:5b:26:b0:dd:bd:15:89:de:
         db:2f:51:64:52:71:df:9f:f1:4e:4c:ca:73:da:a8:03:6a:23:
         92:4c:04:16:9b:e5:5c:91:87:bc:d8:d2:bf:f1:db:1d:7e:96:
         3f:2c:fc:fd:5d:50:70:fb:cc:73:b6:5d:fd:07:cf:4e:83:f4:
         ae:f3:4b:47:f7:c5:70:ca:1a:d9:13:5b:a9:75:cf:e1:40:1f:
         c6:e5:f6:87:39:ca:0a:60:ac:2a:ff:a3:50:9c:8b:1b:df:80:
         3b:9f:bc:1a:a8:00:cf:5f:82:a0:28:38:e4:5b:c6:ed:27:ea:
         46:e7:4a:61:d4:b2:be:39:e8:f1:d0:0d:89:29:22:95:e8:4f:
         0b:be:74:48:ed:57:83:0e:f7:c9:60:67:17:21:19:5f:74:1a:
         d8:d6:49:3f:14:05:64:b2:fe:a9:d3:1a:8b:0a:6a:ca:3b:2f:
         7c:7d:d2:83:4f:87:71:9d:e4:b4:7e:e7:b2:c1:7a:ac:89:93:
         98:73:a4:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 3 05:44:52 2026 by rpki-client