Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8291900e-f954-42d0-aebd-6f02f518cba7.roa
File:                     8291900e-f954-42d0-aebd-6f02f518cba7.roa (raw, json)
Hash identifier:          yZZKpf5t6ptWS1EBNs4erqtxX/fN7n7VDmctf/yccsI=
Subject key identifier:   4A:40:CB:22:22:69:C5:E5:58:8D:BF:F6:9C:10:51:F4:A4:BB:E5:2C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       55EA8A9FF94F98AF57EB6010986276836C3F5B11
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8291900e-f954-42d0-aebd-6f02f518cba7.roa
Signing time:             Fri 31 Jul 2026 01:00:49 +0000
ROA not before:           Fri 31 Jul 2026 01:00:49 +0000
ROA not after:            Thu 29 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        130.176.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:ea:8a:9f:f9:4f:98:af:57:eb:60:10:98:62:76:83:6c:3f:5b:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 31 01:00:49 2026 GMT
            Not After : Oct 29 23:59:59 2026 GMT
        Subject: serialNumber=9792cf4acd59c0b6d5ea201e91387a65177f7dcae94d803692b5b99f09b6be82, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:a3:b8:e0:dc:68:3f:99:8b:fb:45:b4:71:49:
                    81:f4:35:56:2f:34:36:32:63:e7:32:14:d5:72:c2:
                    f9:11:0e:6f:28:14:53:7e:8a:7a:e9:80:c4:61:71:
                    39:00:2d:67:26:c4:4b:98:c3:42:75:02:a1:d8:b7:
                    9e:7a:09:18:a2:b8:42:55:30:6b:a6:a6:c7:56:59:
                    cb:1f:8e:1f:ad:87:d6:55:e9:d1:69:f0:1a:55:85:
                    7b:5a:bf:38:cd:6d:36:6c:30:84:0d:d1:84:df:d7:
                    a0:07:19:35:1a:ea:60:cf:96:cb:ea:2b:35:96:5b:
                    a3:16:9b:c1:6a:ca:b5:6d:51:f5:e1:af:17:56:9c:
                    49:ed:16:79:38:10:d8:1e:a2:c0:24:05:74:b4:30:
                    37:18:36:b8:54:2e:b4:08:b5:c8:88:e0:d5:35:c5:
                    19:9e:6a:79:0e:a9:23:32:39:76:98:3c:bc:d7:ee:
                    a4:61:82:24:e6:52:23:bf:60:e7:f1:a8:98:47:a3:
                    49:00:3e:c0:ec:61:ba:9b:97:f8:5f:dc:bd:bf:b6:
                    d0:24:32:31:06:ef:d8:b4:53:5e:e3:0c:8b:c5:c7:
                    5f:4d:37:83:60:62:40:ee:68:06:e2:3f:49:a2:94:
                    e4:7c:b8:2e:5e:99:80:20:cf:ef:c8:d0:50:b7:a1:
                    2c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:40:CB:22:22:69:C5:E5:58:8D:BF:F6:9C:10:51:F4:A4:BB:E5:2C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8291900e-f954-42d0-aebd-6f02f518cba7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.176.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:50:5c:0a:34:f9:8a:91:ad:e6:80:1f:c6:22:a7:c5:8b:7f:
         e6:7f:e0:4f:58:33:0a:ee:9b:16:34:74:ba:98:ad:a5:d2:2c:
         09:72:a2:57:89:77:1b:96:04:36:55:80:c9:f8:0c:0d:41:c5:
         56:d7:90:3f:dd:cc:7c:55:7b:43:d5:76:d6:6d:89:43:10:d3:
         57:42:f3:3e:5e:41:19:40:f1:22:74:be:1b:9c:7f:bb:fc:8c:
         6b:21:05:97:fd:11:a3:6d:91:a0:d3:b3:73:88:41:f0:a0:06:
         8c:ed:bc:92:95:af:e3:67:27:ba:86:d2:d0:3f:63:9d:7e:56:
         d0:d1:3a:11:85:be:a6:40:32:1e:92:d4:e0:66:d7:de:9c:f3:
         4b:e8:d5:f8:ae:d8:24:9a:af:4a:96:1e:c4:27:9d:c7:db:e9:
         50:f7:fc:f2:5a:0c:b5:5e:63:99:5b:0f:8e:8e:ea:d6:81:c6:
         89:31:99:39:c2:7f:90:66:53:b7:44:eb:c7:38:1d:f4:54:31:
         bf:61:3a:b3:78:89:d1:10:3f:64:20:d6:f9:0d:b6:95:9a:6c:
         22:c2:b4:bf:7d:02:46:80:b3:87:e1:25:b3:13:e9:6d:51:3f:
         f6:c5:c8:b5:71:1c:81:b6:57:c3:3d:98:6e:1f:da:68:5b:56:
         4e:eb:a0:35
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUVeqKn/lPmK9X62AQmGJ2g2w/WxEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzMxMDEwMDQ5WhcNMjYxMDI5MjM1OTU5
WjB6MUkwRwYDVQQFE0A5NzkyY2Y0YWNkNTljMGI2ZDVlYTIwMWU5MTM4N2E2NTE3
N2Y3ZGNhZTk0ZDgwMzY5MmI1Yjk5ZjA5YjZiZTgyMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDZo7jg3Gg/mYv7RbRxSYH0NVYvNDYyY+cyFNVywvkRDm8o
FFN+inrpgMRhcTkALWcmxEuYw0J1AqHYt556CRiiuEJVMGumpsdWWcsfjh+th9ZV
6dFp8BpVhXtavzjNbTZsMIQN0YTf16AHGTUa6mDPlsvqKzWWW6MWm8FqyrVtUfXh
rxdWnEntFnk4ENgeosAkBXS0MDcYNrhULrQItciI4NU1xRmeankOqSMyOXaYPLzX
7qRhgiTmUiO/YOfxqJhHo0kAPsDsYbqbl/hf3L2/ttAkMjEG79i0U17jDIvFx19N
N4NgYkDuaAbiP0milOR8uC5emYAgz+/I0FC3oSxnAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUSkDLIiJpxeVYjb/2nBBR9KS75SwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzgyOTE5MDBlLWY5NTQtNDJkMC1hZWJkLTZmMDJmNTE4Y2JhNy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBACCsHswDQYJKoZIhvcNAQELBQADggEBABJQXAo0+YqRreaAH8Yip8WLf+Z/
4E9YMwrumxY0dLqYraXSLAlyoleJdxuWBDZVgMn4DA1BxVbXkD/dzHxVe0PVdtZt
iUMQ01dC8z5eQRlA8SJ0vhucf7v8jGshBZf9EaNtkaDTs3OIQfCgBoztvJKVr+Nn
J7qG0tA/Y51+VtDROhGFvqZAMh6S1OBm196c80vo1fiu2CSar0qWHsQnncfb6VD3
/PJaDLVeY5lbD46O6taBxokxmTnCf5BmU7dE68c4HfRUMb9hOrN4idEQP2Qg1vkN
tpWabCLCtL99AkaAs4fhJbMT6W1RP/bFyLVxHIG2V8M9mG4f2mhbVk7roDU=
-----END CERTIFICATE-----
Generated at Tue Sep 15 13:25:16 2026 by rpki-client