Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5ce64577-e032-4364-b209-0c4fa179abff.roa
File:                     5ce64577-e032-4364-b209-0c4fa179abff.roa (raw, json)
Hash identifier:          5+rkHK7ZItFIziNzQ6WdqJ1F+2SdLdsanySxXMh4nKE=
Subject key identifier:   01:B7:14:2E:6B:B0:8E:26:65:56:AB:0E:61:8F:4E:C5:F4:A0:4F:DC
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4A57171263B0AEF64EA5C59D3759C414DA6B237F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5ce64577-e032-4364-b209-0c4fa179abff.roa
Signing time:             Mon 19 Oct 2026 00:40:37 +0000
ROA not before:           Mon 19 Oct 2026 00:40:37 +0000
ROA not after:            Sun 17 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        130.176.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:57:17:12:63:b0:ae:f6:4e:a5:c5:9d:37:59:c4:14:da:6b:23:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 19 00:40:37 2026 GMT
            Not After : Jan 17 23:59:59 2027 GMT
        Subject: serialNumber=08060709f5232d06ee24ca7384203f4b6a3724fe37d4211048d7baa20cbb4d36, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ac:b8:8d:28:2b:ce:85:da:5c:a0:eb:ce:5e:
                    b9:54:ed:53:ca:fa:fd:82:b9:bf:63:ae:49:a5:95:
                    b3:46:5a:bd:8d:43:68:a3:00:cb:0d:fb:cf:26:fe:
                    c1:54:47:05:4f:d6:44:df:0b:58:3f:68:90:e7:d9:
                    e6:9b:7d:c6:86:f7:e9:fd:51:aa:8f:33:0c:b8:04:
                    82:5c:1b:a9:bf:dc:3c:40:2b:9c:d0:ca:c0:a7:4b:
                    e9:10:dd:e8:3c:64:ec:3e:52:20:2e:66:9c:91:de:
                    43:68:29:73:64:85:0b:09:da:32:3d:0d:a0:c4:ac:
                    b5:09:48:c5:e6:ef:10:4c:a0:9b:3e:bd:4a:d7:c0:
                    a5:8b:d3:f0:b3:c9:9a:8a:3e:00:01:a5:95:c5:be:
                    3d:59:77:53:df:b0:1c:13:b1:d0:1c:48:1c:c1:17:
                    dc:e8:7d:e3:c7:9f:19:bc:93:ac:6b:64:7b:30:6f:
                    6c:7f:51:ad:45:ae:35:a9:7a:35:d1:3a:6b:98:b2:
                    2e:29:19:0c:8c:91:21:09:1b:db:a3:25:d7:04:ce:
                    71:8d:fe:00:c6:dd:40:d0:aa:46:f3:d5:64:d3:8a:
                    08:84:5a:fc:0e:dc:67:c2:25:d7:e9:d0:4a:c6:3c:
                    a6:0f:c5:b0:21:e3:f5:d9:1b:cb:01:26:ab:78:6a:
                    ce:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:B7:14:2E:6B:B0:8E:26:65:56:AB:0E:61:8F:4E:C5:F4:A0:4F:DC
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5ce64577-e032-4364-b209-0c4fa179abff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.176.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:52:ad:a3:87:c2:92:62:7b:02:15:dd:d2:de:42:c2:04:1a:
         a2:0e:36:8a:f1:7d:b5:c0:a5:78:e8:94:1d:97:97:be:7f:66:
         c5:3c:7c:0a:cf:b8:5e:93:52:3d:eb:02:05:38:fe:04:5b:4c:
         6c:80:08:8a:1e:63:58:7c:ac:2b:18:fe:45:66:5f:ba:ef:72:
         cd:e4:6f:c2:39:e2:1a:d8:dd:22:f6:96:7f:6e:fd:8a:29:1d:
         46:30:12:62:65:3e:35:c3:03:1e:85:bf:69:d0:f8:e7:e9:c3:
         77:12:d5:a3:24:9d:5c:b7:61:54:7c:a8:72:56:73:58:74:9c:
         ed:c0:42:c9:c3:76:4a:a6:ca:56:df:fb:98:f7:9b:c3:68:0e:
         5d:16:32:a5:c7:87:09:e8:b5:08:6f:ee:a9:50:c8:93:72:a7:
         56:8b:eb:2d:42:d6:d6:6e:24:13:f7:32:2a:1d:1a:88:21:b0:
         34:de:f7:97:2c:1d:71:2c:66:0b:63:16:d9:a6:ac:ed:32:e6:
         6d:2b:9a:6c:c4:79:67:a5:35:29:90:d1:e3:5f:7f:53:28:dd:
         04:f5:b5:c8:09:50:6f:46:ea:2f:c4:78:a0:8f:e7:02:b2:bf:
         79:d3:49:68:48:32:3e:fb:67:cd:6b:87:7b:08:44:01:99:f1:
         b3:12:96:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 08:11:35 2026 by rpki-client