Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5b30c813-6ee9-4d86-a03e-63af7eafa022.roa
File:                     5b30c813-6ee9-4d86-a03e-63af7eafa022.roa (raw, json)
Hash identifier:          Mzk3n2z/HxHVl1JI5LAkZhCWMwg7yNzRNV/fP6Ae97w=
Subject key identifier:   D5:36:59:AF:A9:2E:9A:9A:EB:35:95:E8:AF:59:42:B8:2B:A1:34:3C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1972262682B83BB43A0CDE04E9BB2AB2159E1C78
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5b30c813-6ee9-4d86-a03e-63af7eafa022.roa
Signing time:             Fri 31 Jul 2026 01:11:29 +0000
ROA not before:           Fri 31 Jul 2026 01:11:29 +0000
ROA not after:            Thu 29 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        130.176.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Aug 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:72:26:26:82:b8:3b:b4:3a:0c:de:04:e9:bb:2a:b2:15:9e:1c:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 31 01:11:29 2026 GMT
            Not After : Oct 29 23:59:59 2026 GMT
        Subject: serialNumber=5737075e612ee848ea491a6f522aec6bea6e09e07283f7fafa70bb4de60b3020, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:d6:21:3a:50:0d:c1:bd:df:ff:fd:0f:85:23:
                    8c:fa:4b:a7:27:30:84:29:60:ed:b2:79:b2:0f:84:
                    10:94:2e:97:41:5b:5c:7d:a5:34:4a:d8:4d:11:dc:
                    cc:e2:34:69:af:08:fd:c2:9f:5c:19:1a:6f:f4:42:
                    8e:c1:19:71:2c:64:a6:11:ae:9c:99:f8:3b:c2:4b:
                    cf:cb:e7:fe:17:22:59:97:00:ae:90:01:6d:0b:39:
                    03:0c:ee:c1:67:0a:84:65:cc:99:86:23:6b:c3:b4:
                    4c:05:b6:f7:87:05:a1:56:c3:66:b7:82:ee:30:42:
                    e4:c0:cc:af:2d:a0:a6:40:8a:ea:1d:b9:fe:23:6a:
                    1e:7f:84:95:c1:77:09:bd:3d:11:f7:5d:e5:04:f5:
                    76:be:bd:db:56:ab:1f:10:39:7a:c7:80:12:1d:92:
                    48:78:89:6f:72:06:b7:b2:2d:5d:c3:01:71:bb:dd:
                    6a:b7:11:d7:20:d5:ab:51:bb:58:ba:1f:d0:77:ed:
                    42:40:f5:02:f1:88:83:4b:e8:d3:07:61:66:d5:ba:
                    65:0e:d5:84:21:8d:87:fa:dc:a2:4a:62:cc:a1:61:
                    40:6f:3a:af:6f:df:97:27:22:44:d5:6f:28:b7:34:
                    d5:3a:35:d7:db:06:ea:05:fd:aa:21:1f:25:17:ec:
                    6a:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:36:59:AF:A9:2E:9A:9A:EB:35:95:E8:AF:59:42:B8:2B:A1:34:3C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5b30c813-6ee9-4d86-a03e-63af7eafa022.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.176.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:d0:ce:18:a8:fb:b7:85:30:56:30:94:d3:0e:bf:b1:29:ad:
         a8:cc:43:ec:82:af:cf:cd:39:77:db:9d:d4:0c:c7:07:42:de:
         50:e2:4b:4d:00:6a:bd:28:0d:8a:f0:2e:a4:3d:8b:2d:5b:65:
         fc:5e:e0:40:32:62:08:9b:95:65:fc:a5:80:4b:7c:fa:e4:a6:
         bb:88:0e:d0:66:12:15:16:06:32:04:73:02:f3:f3:36:3b:76:
         08:dd:f3:3c:76:fd:85:04:ab:15:ee:3a:20:48:bc:f6:fc:c3:
         be:4e:59:ce:e9:cc:64:32:25:38:6f:9d:a6:f3:1f:0f:d1:df:
         b1:8a:bd:6d:0f:a8:7f:c1:13:4d:db:37:f5:f1:f1:f3:cb:0b:
         28:50:87:c6:e5:b0:3d:04:69:c8:fc:dd:08:5d:4e:bb:d9:be:
         93:1b:fe:e3:1d:ef:13:43:9d:98:77:f4:f9:bc:96:94:19:22:
         23:27:5b:a3:05:e1:dc:35:08:88:1f:3f:1c:0d:ae:32:b7:81:
         1c:c0:87:0f:8a:5c:57:f5:7b:ca:c4:76:6c:92:76:1e:61:eb:
         7b:e3:f7:1f:7c:50:50:83:1f:6e:80:82:54:9f:db:d1:f3:63:
         a4:ca:51:94:6f:8c:70:e1:23:3b:3c:d6:27:82:a2:fd:87:17:
         fa:99:4a:eb
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUGXImJoK4O7Q6DN4E6bsqshWeHHgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzMxMDExMTI5WhcNMjYxMDI5MjM1OTU5
WjB6MUkwRwYDVQQFE0A1NzM3MDc1ZTYxMmVlODQ4ZWE0OTFhNmY1MjJhZWM2YmVh
NmUwOWUwNzI4M2Y3ZmFmYTcwYmI0ZGU2MGIzMDIwMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDZ1iE6UA3Bvd///Q+FI4z6S6cnMIQpYO2yebIPhBCULpdB
W1x9pTRK2E0R3MziNGmvCP3Cn1wZGm/0Qo7BGXEsZKYRrpyZ+DvCS8/L5/4XIlmX
AK6QAW0LOQMM7sFnCoRlzJmGI2vDtEwFtveHBaFWw2a3gu4wQuTAzK8toKZAiuod
uf4jah5/hJXBdwm9PRH3XeUE9Xa+vdtWqx8QOXrHgBIdkkh4iW9yBreyLV3DAXG7
3Wq3Edcg1atRu1i6H9B37UJA9QLxiINL6NMHYWbVumUO1YQhjYf63KJKYsyhYUBv
Oq9v35cnIkTVbyi3NNU6NdfbBuoF/aohHyUX7GobAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU1TZZr6kumprrNZXor1lCuCuhNDwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzViMzBjODEzLTZlZTktNGQ4Ni1hMDNlLTYzYWY3ZWFmYTAyMi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBACCsOswDQYJKoZIhvcNAQELBQADggEBAJnQzhio+7eFMFYwlNMOv7EprajM
Q+yCr8/NOXfbndQMxwdC3lDiS00Aar0oDYrwLqQ9iy1bZfxe4EAyYgiblWX8pYBL
fPrkpruIDtBmEhUWBjIEcwLz8zY7dgjd8zx2/YUEqxXuOiBIvPb8w75OWc7pzGQy
JThvnabzHw/R37GKvW0PqH/BE03bN/Xx8fPLCyhQh8blsD0Eacj83QhdTrvZvpMb
/uMd7xNDnZh39Pm8lpQZIiMnW6MF4dw1CIgfPxwNrjK3gRzAhw+KXFf1e8rEdmyS
dh5h63vj9x98UFCDH26AglSf29HzY6TKUZRvjHDhIzs81ieCov2HF/qZSus=
-----END CERTIFICATE-----
Generated at Mon Aug 3 05:37:58 2026 by rpki-client