Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7336cad9-8c1c-4cd9-b3f2-01b65f0f6a24.roa
File:                     7336cad9-8c1c-4cd9-b3f2-01b65f0f6a24.roa (raw, json)
Hash identifier:          YdFVlegWNCnSQW8/IdcyWoAzAo5oVGJCNySmlZdEkQw=
Subject key identifier:   67:3C:5C:31:58:AE:34:1C:BE:C6:9A:F5:81:FF:26:63:1C:43:97:26
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       330278DD9F49924B3C3C8B110CDE234043EBDAFF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7336cad9-8c1c-4cd9-b3f2-01b65f0f6a24.roa
Signing time:             Mon 19 Oct 2026 00:30:09 +0000
ROA not before:           Mon 19 Oct 2026 00:30:09 +0000
ROA not after:            Sun 17 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        130.176.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Nov 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:02:78:dd:9f:49:92:4b:3c:3c:8b:11:0c:de:23:40:43:eb:da:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 19 00:30:09 2026 GMT
            Not After : Jan 17 23:59:59 2027 GMT
        Subject: serialNumber=220cd7c211fe3e7e57eb87c29bc81770ecfdb93094dd73c70719704db9757393, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:5b:ae:9e:4b:f6:e1:c2:11:db:d8:70:ad:3a:
                    7f:54:be:6b:9a:50:3c:b3:3c:2d:b8:23:59:fc:89:
                    02:f6:5e:8e:33:aa:32:5f:c9:e0:be:03:d1:15:f2:
                    9d:7d:f1:66:de:86:1c:e8:65:03:c0:e1:03:ce:3e:
                    f7:58:4d:3d:61:02:77:c3:7e:63:c9:0c:08:b5:bb:
                    b3:97:94:8a:54:6c:ab:fd:1f:77:28:d8:36:42:b9:
                    fd:bf:79:30:8f:f0:06:66:7d:60:35:86:89:3d:0c:
                    be:5c:52:db:dc:0d:a7:b9:17:20:1e:45:ab:30:fd:
                    67:40:a8:0e:9d:65:d5:17:71:2a:b1:5c:13:d3:8e:
                    94:ea:c2:6f:a4:99:28:53:ee:cf:27:6f:58:a7:b6:
                    20:30:e4:9b:f4:4f:ad:c9:39:2e:ca:6b:4c:0a:09:
                    49:11:09:4a:ca:f2:89:39:1c:72:e7:b1:c0:99:47:
                    1b:c4:11:5c:71:db:67:39:c2:a2:b4:86:a7:75:8b:
                    d0:a1:7d:ba:51:81:fd:8b:a0:64:72:6d:78:55:f5:
                    23:bf:7c:64:c7:bb:a2:1d:68:e6:67:d6:fc:fb:9e:
                    43:18:65:31:e5:58:5f:10:1f:ff:e8:cf:e0:66:fa:
                    51:aa:28:ac:ff:84:64:9e:a2:78:e3:2f:d4:84:e2:
                    67:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:3C:5C:31:58:AE:34:1C:BE:C6:9A:F5:81:FF:26:63:1C:43:97:26
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7336cad9-8c1c-4cd9-b3f2-01b65f0f6a24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.176.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:3c:fe:b0:ab:2c:4e:59:97:c1:66:73:30:bd:e5:a8:56:c4:
         dc:72:75:c7:d4:b9:32:67:4b:ec:ca:e1:f6:ce:58:20:95:08:
         d0:a4:51:2a:40:0d:be:2b:5f:c9:6e:f6:66:eb:fc:ef:8b:84:
         e0:65:e8:dc:55:f7:f6:75:70:87:65:7b:53:4a:4b:f7:0a:f6:
         4d:96:0a:b7:35:e9:e1:97:17:3d:fa:18:a6:4e:9b:8e:65:a5:
         09:ab:57:fa:36:0a:0a:fd:4f:7d:16:80:bb:8e:90:09:cc:8d:
         24:e9:74:f6:22:2c:4d:03:0c:82:87:77:b4:9b:83:73:e1:d5:
         40:ed:11:f7:53:30:f6:e5:8e:a3:90:6e:bc:b6:db:e3:98:cb:
         ee:89:5b:90:95:fe:0c:95:da:f1:a1:32:b0:52:2d:2e:98:4c:
         58:5d:1f:e2:a0:b8:9f:a5:99:da:ca:0a:cf:ad:ff:c8:ce:5d:
         ed:79:a8:af:54:b3:4e:29:34:47:bd:06:04:06:69:7d:3c:69:
         1b:28:a8:dc:15:1e:e8:19:d9:d7:7f:be:1d:31:cf:d9:96:c7:
         7e:34:d0:e6:64:e3:5c:6a:33:6f:9b:f1:6c:90:93:8c:7c:62:
         32:49:c2:74:ed:4f:ac:a2:3b:31:93:bd:2d:9e:8f:bd:ac:24:
         5e:c0:b4:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 01:13:42 2026 by rpki-client