Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/44d54294-0a6f-4aef-8a9d-84532e872cc5.roa
File:                     44d54294-0a6f-4aef-8a9d-84532e872cc5.roa (raw, json)
Hash identifier:          Amz7sTI6I7DdwY6HnttIYIMym5tC5elok9InhwwEYUI=
Subject key identifier:   E7:44:6C:39:00:F3:58:FA:B0:09:CD:B8:11:26:AB:57:3C:DE:3E:28
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1CD6F3AA985B921C408B9FDC5667818020D568FD
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/44d54294-0a6f-4aef-8a9d-84532e872cc5.roa
Signing time:             Fri 31 Jul 2026 01:10:50 +0000
ROA not before:           Fri 31 Jul 2026 01:10:50 +0000
ROA not after:            Thu 29 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        130.176.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Aug 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:d6:f3:aa:98:5b:92:1c:40:8b:9f:dc:56:67:81:80:20:d5:68:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 31 01:10:50 2026 GMT
            Not After : Oct 29 23:59:59 2026 GMT
        Subject: serialNumber=af6a0a969a0ae0087d4b95b100ab2b84aceb728ed7357ac4185201af6fa6b466, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e3:d7:e0:4b:fa:37:c6:54:34:f7:00:03:a5:
                    d0:c3:9e:68:ac:85:b1:1e:04:c4:8f:95:19:ac:80:
                    a9:e2:8d:15:f6:b3:f6:3c:c7:55:fd:42:32:35:bb:
                    b0:24:09:71:ca:c6:f5:9c:e7:d0:2c:00:d0:da:78:
                    e3:22:9b:1f:a4:b2:ee:05:dc:0e:87:bd:ea:5f:7b:
                    00:84:44:82:6f:71:43:cd:36:fe:33:79:d1:f2:5a:
                    17:1d:18:98:66:cb:09:4f:4f:39:49:4a:5e:5f:21:
                    bb:e4:98:c0:7b:e7:17:0f:3c:e7:a5:02:3a:e1:4d:
                    e4:36:1f:ab:4a:8f:41:5f:07:21:35:4c:ec:df:15:
                    4a:2c:af:a9:03:db:3c:5f:3e:45:02:cf:36:ed:4b:
                    df:f7:f1:4a:7b:56:77:53:29:c4:ef:bf:1b:0f:d8:
                    6d:29:d8:ef:d7:8a:bf:2e:30:ae:e9:c9:f2:2b:63:
                    da:3f:64:09:ec:fe:12:ad:06:07:93:57:73:f1:c7:
                    87:c1:bb:b1:e6:47:86:43:6a:bf:63:6e:3a:0d:64:
                    a8:19:67:e1:da:01:96:57:11:10:8f:b2:e9:e7:33:
                    f3:ff:52:f4:4c:7c:ce:92:26:29:ff:08:71:c9:5e:
                    34:ac:9b:b1:31:3d:7c:03:c2:d1:6d:08:4f:a9:27:
                    a9:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:44:6C:39:00:F3:58:FA:B0:09:CD:B8:11:26:AB:57:3C:DE:3E:28
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/44d54294-0a6f-4aef-8a9d-84532e872cc5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.176.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:99:e6:b3:8a:29:2a:21:3d:c9:73:7f:08:eb:0f:d4:35:26:
         75:2f:e2:c8:50:a7:34:26:b7:3b:d5:a9:1e:71:d9:7d:36:96:
         be:1f:60:f2:ef:18:7c:58:4e:84:ce:df:a3:bf:64:c9:57:ef:
         19:ac:5d:1c:57:a8:51:54:33:e7:4c:dc:60:59:ba:26:3a:27:
         c7:67:89:f2:20:29:55:44:48:86:83:77:5f:3d:95:f7:ca:20:
         a1:a4:4f:28:6e:52:03:ec:84:4e:ca:e1:93:ad:71:c8:f7:82:
         0d:65:6f:e4:6b:b1:4b:7d:dc:05:ca:e0:5c:4a:cb:f6:3c:dc:
         ea:8e:22:c0:0c:d3:e1:05:a6:47:31:8e:70:bf:96:69:7e:80:
         bd:aa:f4:c2:d3:bb:0b:41:f9:fd:9d:17:00:dc:fd:48:a7:b2:
         96:8b:77:7c:94:b8:12:bc:71:e9:03:a2:d8:e1:f0:ef:0d:40:
         4b:3c:e5:bc:e2:74:1c:62:e7:9f:93:6b:a4:06:22:9c:0f:77:
         ff:40:40:10:fb:ca:41:8b:3b:bb:a9:91:45:4d:56:7a:07:10:
         34:0f:59:ba:8f:85:c8:c1:cc:ce:44:39:ba:82:ae:32:3e:bf:
         9e:0f:42:a1:51:64:b2:bd:ed:5d:76:4c:85:e8:af:a9:63:26:
         a1:7e:be:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 3 05:42:00 2026 by rpki-client