Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/681dd84d-f118-4b24-948b-08dfaeab0932.roa
File:                     681dd84d-f118-4b24-948b-08dfaeab0932.roa (raw, json)
Hash identifier:          eJYv4c0LK55ZfUAnddfN++9eCNw1eOa9BSJJdu6I4iQ=
Subject key identifier:   7F:2D:52:90:3C:43:55:2B:73:6B:5C:D6:24:26:13:D7:7A:D6:07:C6
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6F9BE9D87B2A6A87512E435A5D072687A28E2D14
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/681dd84d-f118-4b24-948b-08dfaeab0932.roa
Signing time:             Fri 31 Jul 2026 01:40:52 +0000
ROA not before:           Fri 31 Jul 2026 01:40:52 +0000
ROA not after:            Thu 29 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        130.176.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Aug 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:9b:e9:d8:7b:2a:6a:87:51:2e:43:5a:5d:07:26:87:a2:8e:2d:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 31 01:40:52 2026 GMT
            Not After : Oct 29 23:59:59 2026 GMT
        Subject: serialNumber=a7923c6b0423664221f9c14d66f8f517e27a806fcf1f36451f8895b4ec8c8b3c, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:7c:88:4e:6e:1c:55:49:e5:92:07:2f:10:37:
                    ac:83:b3:30:4c:8c:75:c6:7a:bf:c1:e8:d4:a5:3e:
                    33:58:04:17:0c:c0:3f:78:e1:3f:6b:9a:ba:1d:82:
                    8e:8f:ab:03:9e:f8:c6:b4:14:02:59:b4:d6:5e:88:
                    7b:1f:ad:0b:7f:1e:2c:f3:6a:9c:b3:c7:26:b7:43:
                    9b:71:f9:99:33:8a:b0:fd:fb:26:7b:9d:84:d9:91:
                    ca:74:94:59:10:f6:ae:7a:d7:c3:5f:10:86:46:f4:
                    a4:11:4e:fa:17:44:cf:35:db:cb:38:26:89:b9:78:
                    f5:6f:67:98:83:75:8b:43:b6:47:6c:a6:93:55:4d:
                    94:3d:b6:71:22:ee:44:c3:47:1e:b3:c4:6c:2e:2d:
                    54:1c:d8:ec:31:43:6a:1e:10:e4:07:ac:97:7e:1f:
                    c0:69:a2:2a:b2:73:07:6b:e0:5e:ef:c3:ef:f2:92:
                    bf:38:83:06:ea:30:5f:47:06:84:1a:cb:63:d5:45:
                    0f:15:c0:b4:7e:59:e3:51:9b:ff:cc:72:ab:01:83:
                    e6:02:03:02:f2:98:54:a9:dd:6f:58:82:43:d6:92:
                    8f:bf:93:65:1c:74:4c:3a:67:1d:9f:10:26:6e:a3:
                    f9:24:20:9e:67:06:9d:94:46:45:cd:a8:b9:21:81:
                    61:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:2D:52:90:3C:43:55:2B:73:6B:5C:D6:24:26:13:D7:7A:D6:07:C6
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/681dd84d-f118-4b24-948b-08dfaeab0932.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.176.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:a8:61:72:74:1b:a8:b6:10:39:58:cd:f9:0a:68:e6:d4:a3:
         19:ad:fd:c0:0b:5a:03:c3:a6:bc:2b:f0:79:98:24:6e:52:78:
         f5:5c:09:26:3b:38:d9:10:9e:03:08:8f:65:22:ed:4a:19:ca:
         88:e8:50:9e:50:c4:bb:f6:35:6f:7b:0a:1d:20:08:08:f5:93:
         47:4c:33:46:ed:5b:ae:d5:bf:48:e4:c3:f8:98:36:13:cc:df:
         ba:9c:d5:92:05:d3:28:94:89:50:d6:27:03:0a:e6:2c:21:07:
         b8:40:c8:90:60:48:a3:48:db:b1:b4:7c:c9:19:55:e8:ab:eb:
         98:f3:e0:9f:f5:d4:bd:ab:3f:70:de:fe:e4:dd:d7:5c:eb:94:
         a9:fa:0b:fe:4f:ea:95:c0:fc:88:91:3c:61:99:c5:04:ee:cc:
         bb:30:f3:07:0c:d6:d9:c3:36:89:42:bb:d0:23:65:ac:94:6b:
         d7:9c:9c:02:6e:45:87:50:66:15:39:31:24:54:1b:b1:64:d6:
         d2:0b:e4:c4:36:78:81:0b:be:07:cf:41:51:c4:5b:fd:2a:94:
         68:1d:36:fb:57:f7:89:cb:e6:a4:88:48:e4:52:3f:6f:39:12:
         e2:a9:40:2a:c6:58:0d:9d:09:ed:6d:71:9a:19:6e:c3:25:57:
         8b:e0:0a:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 3 05:44:48 2026 by rpki-client