Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5172bcc4-1496-4663-b009-2084ac771361.roa
File:                     5172bcc4-1496-4663-b009-2084ac771361.roa (raw, json)
Hash identifier:          YjmyrfONsd4ADy7TaYtHEOG+HBP5qykBu84i8JtTAac=
Subject key identifier:   7F:CB:F5:09:93:CA:42:02:C3:81:D6:FE:76:3C:C1:E5:77:23:CD:3E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       33F086DE8664443484E675CF9B70B0E7228D98B5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5172bcc4-1496-4663-b009-2084ac771361.roa
Signing time:             Fri 31 Jul 2026 01:00:47 +0000
ROA not before:           Fri 31 Jul 2026 01:00:47 +0000
ROA not after:            Thu 29 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        130.176.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:f0:86:de:86:64:44:34:84:e6:75:cf:9b:70:b0:e7:22:8d:98:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 31 01:00:47 2026 GMT
            Not After : Oct 29 23:59:59 2026 GMT
        Subject: serialNumber=f1105a3297fb4869d1bdbac4f44a1990cab64e0982d2e066c9ac40c089ec80ba, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:77:db:36:56:ad:51:44:fa:d8:3f:aa:32:e4:
                    7a:e6:fb:8a:89:72:f6:34:9d:dd:96:77:86:e2:6e:
                    3d:83:55:9f:90:0b:95:98:14:93:c9:12:f1:c2:5a:
                    96:be:52:d7:5f:a5:27:36:3e:da:17:78:2e:02:c2:
                    b9:d8:da:aa:e9:67:c1:32:8a:57:82:2c:8b:1b:8d:
                    c0:02:ef:87:f0:53:a4:92:1f:92:86:3b:3f:6c:8a:
                    96:83:d0:ab:c4:b3:e1:83:53:a9:84:33:4e:b1:fe:
                    1b:88:d4:ad:b6:f1:02:83:03:4e:be:fc:28:df:e7:
                    86:bd:ec:64:db:42:c5:cc:76:f3:52:93:3f:89:a5:
                    fa:00:95:86:9f:3b:4e:a7:a9:4c:1b:38:86:ee:7d:
                    f4:eb:8f:7d:29:b3:7b:72:9a:e5:0b:f8:69:e7:e7:
                    10:ad:f1:b7:97:70:32:9b:4b:4b:85:d4:d1:e7:38:
                    ec:9b:44:5a:7f:20:74:35:c2:c1:6f:3f:67:33:52:
                    13:b3:12:c3:c8:4d:22:fd:64:ed:78:55:7d:d1:df:
                    6f:5b:15:a0:63:22:25:14:49:8f:fb:3b:63:b7:65:
                    92:7b:b1:c9:8d:0f:97:7c:bc:ef:cf:d4:25:7c:48:
                    a4:86:95:81:ce:cb:72:00:4d:cb:8c:e3:35:e2:b0:
                    67:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:CB:F5:09:93:CA:42:02:C3:81:D6:FE:76:3C:C1:E5:77:23:CD:3E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5172bcc4-1496-4663-b009-2084ac771361.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.176.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d5:b1:6e:0c:87:10:99:81:fe:f3:75:4e:4a:28:45:aa:b2:e7:
         04:1e:b8:e1:b4:13:9f:44:0a:7b:f6:82:7a:79:50:4b:c1:54:
         af:89:c1:da:a6:17:ff:c0:a1:c8:94:85:cb:5e:e3:13:c7:23:
         a9:a0:9c:af:9c:f2:e2:56:6c:66:81:27:73:e1:14:62:54:25:
         af:76:c1:3a:37:0a:7a:6c:71:18:02:0f:e4:f3:f4:cb:7c:7f:
         c0:2c:f8:21:bc:0b:7c:69:61:26:ef:a1:36:54:c1:19:25:2e:
         42:35:98:2b:c0:97:63:8d:3e:08:2f:3b:a2:39:dd:a6:9f:a7:
         61:b4:3d:5b:11:0c:76:c6:c4:0f:df:4c:23:ec:9c:ce:eb:40:
         84:31:c2:68:b5:8a:4a:41:a1:46:95:38:09:6d:ef:e9:19:24:
         13:a9:98:3f:f5:5f:a9:a4:34:9f:78:1b:ab:a7:85:fe:9d:69:
         92:ea:c3:ed:6b:0e:33:04:47:a6:96:22:f4:da:cf:13:03:20:
         a7:d2:15:90:a0:d5:e5:91:b9:9e:3c:70:31:8d:3b:ed:be:7f:
         fe:17:74:4e:de:ec:f8:6f:f5:a5:81:d9:e9:ab:de:ca:9e:4d:
         ee:e7:73:b2:22:cb:ec:04:0d:ef:82:e9:9d:4d:e1:b0:81:c2:
         87:22:0c:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 13:26:50 2026 by rpki-client