Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6c9734fa-b66f-423d-b7c6-26e8bd37e9fd.roa
File:                     6c9734fa-b66f-423d-b7c6-26e8bd37e9fd.roa (raw, json)
Hash identifier:          8d5G+1V1LLFQBoLu0u+fQa4/h+eTD8dFaC/952/4E4A=
Subject key identifier:   0F:1F:6C:E8:DE:29:58:3A:B5:AE:E2:B0:73:C2:E0:03:EA:2D:0C:00
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4DFAC6FE1B715FC6EC8C9415961EC14B3C91E1A4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6c9734fa-b66f-423d-b7c6-26e8bd37e9fd.roa
Signing time:             Mon 19 Oct 2026 01:30:42 +0000
ROA not before:           Mon 19 Oct 2026 01:30:42 +0000
ROA not after:            Sun 17 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        130.176.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:fa:c6:fe:1b:71:5f:c6:ec:8c:94:15:96:1e:c1:4b:3c:91:e1:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 19 01:30:42 2026 GMT
            Not After : Jan 17 23:59:59 2027 GMT
        Subject: serialNumber=1e2c6b757be48c0f8a2b1a1fc6e9a6fe68312f29fa06ba3fcc93263707dcd15c, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:8f:e1:b3:c5:13:62:93:53:d3:c9:55:a6:4b:
                    21:0b:55:ed:8c:87:71:53:40:f3:ee:bb:b9:66:e3:
                    94:e0:78:5f:97:d5:26:9a:1e:24:26:7b:df:6f:89:
                    41:7a:9b:35:9c:2c:dc:15:8f:56:bf:c0:d4:33:a2:
                    a7:94:d4:bf:b4:36:b1:4f:7c:11:68:a6:62:5a:92:
                    e0:91:7c:f6:f7:e3:d3:c0:25:43:7f:56:a0:a6:0b:
                    51:ed:11:3a:d8:61:f8:fb:d9:89:93:f3:a2:ec:0f:
                    e5:dd:a7:49:f4:b6:ad:6c:2d:97:06:0a:da:3a:df:
                    76:6d:96:62:6e:95:aa:de:53:2b:83:4e:b3:6d:f7:
                    e9:14:dd:a0:ff:cf:80:af:83:27:b9:a4:29:a0:a6:
                    13:89:15:9e:58:f5:04:f3:0a:d9:94:0f:40:3e:85:
                    43:c2:ab:ed:e4:e6:1b:38:a6:08:5c:f2:e2:25:2c:
                    a7:bd:c1:da:13:3d:1d:17:b5:43:75:33:98:a8:b1:
                    5b:85:85:db:39:ac:09:81:9b:b1:d0:fd:03:20:90:
                    bc:13:0d:69:b8:c4:e4:ed:d2:da:be:be:ad:57:dc:
                    7a:85:e7:3c:ac:ba:4a:58:4b:f6:36:07:13:53:26:
                    32:cd:94:ca:cb:17:7b:19:f3:ac:e1:64:31:59:36:
                    bf:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:1F:6C:E8:DE:29:58:3A:B5:AE:E2:B0:73:C2:E0:03:EA:2D:0C:00
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6c9734fa-b66f-423d-b7c6-26e8bd37e9fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.176.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:13:68:aa:1c:c3:f6:d2:23:2e:f4:92:cb:66:ad:13:27:55:
         b3:32:26:ae:95:dd:e6:08:15:33:b1:92:83:ca:c0:00:9e:94:
         46:9e:59:5a:0c:6b:97:b8:85:93:d8:5d:f9:bc:e7:52:e2:fb:
         db:82:bb:19:92:fc:37:ab:81:f7:00:3f:dd:af:4b:0c:cc:e4:
         0c:8f:66:ec:6c:bc:73:25:92:f0:38:2a:1a:d3:3b:9d:1d:38:
         5e:00:d5:99:f0:72:33:a4:9b:2d:d0:4e:68:17:45:ad:05:ad:
         12:58:8d:fa:c6:41:67:ab:f5:ba:a4:23:5e:8e:af:97:a9:d9:
         f2:db:e7:ac:e6:10:bd:c7:58:fc:5f:33:54:23:54:35:21:d6:
         d7:56:64:71:b7:05:b6:19:82:b6:66:d8:18:b8:d8:b7:42:b7:
         a5:62:39:20:f6:5e:30:4a:b8:ad:54:f1:dd:b9:c0:63:23:ea:
         89:7a:ab:9f:eb:09:12:b5:70:ce:1d:be:fe:a3:a0:05:91:31:
         71:38:cc:2d:ad:ec:d3:f5:b3:af:51:d2:6b:cd:d7:c1:6c:13:
         1e:a6:db:33:40:c7:c5:3d:55:71:88:43:e1:d4:dc:cf:9e:d7:
         30:2c:64:33:6c:92:7e:44:28:bc:7b:03:05:56:7e:78:9c:33:
         15:01:42:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 05:51:49 2026 by rpki-client