Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ab16c679-8500-43c8-a6e1-de2c1bca9d9c.roa
File:                     ab16c679-8500-43c8-a6e1-de2c1bca9d9c.roa (raw, json)
Hash identifier:          iwX8vOARAfZ5IdaZpQLMLFRgLsRtl7IEOuoqTX6Ac7s=
Subject key identifier:   45:E0:31:78:1C:99:A0:92:B7:C0:09:FE:20:5F:C4:1F:0D:62:9F:83
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7E0634BE9D27FF0087DCC4C0E3443048BCC6FEA7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ab16c679-8500-43c8-a6e1-de2c1bca9d9c.roa
Signing time:             Fri 31 Jul 2026 01:22:00 +0000
ROA not before:           Fri 31 Jul 2026 01:22:00 +0000
ROA not after:            Thu 29 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        130.176.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 16 Aug 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:06:34:be:9d:27:ff:00:87:dc:c4:c0:e3:44:30:48:bc:c6:fe:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 31 01:22:00 2026 GMT
            Not After : Oct 29 23:59:59 2026 GMT
        Subject: serialNumber=f0963899157d942e9995a925fd09c109452430596d8c383aae03656f90a38388, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:31:03:f8:92:93:fa:13:b5:79:0f:11:f0:44:
                    c4:a6:89:c5:1e:50:7f:45:70:10:e1:d0:eb:a1:bc:
                    1f:c8:0f:d2:bb:02:f9:4f:f8:df:83:20:4c:30:8a:
                    4d:57:f3:d8:1b:42:69:50:88:b0:11:6e:3d:24:2a:
                    5d:cd:88:9e:ac:79:fe:b4:4b:c0:05:d7:97:3f:e9:
                    d1:f2:8c:68:24:f3:75:d9:08:4e:88:68:09:40:c8:
                    4e:89:e7:a4:09:0f:fd:31:d3:d4:74:99:c0:53:dc:
                    21:ef:ca:29:65:ae:b3:cb:eb:dc:93:15:7c:d9:25:
                    ce:4e:9d:dc:5a:9c:57:5b:28:74:10:93:9b:53:1f:
                    d2:2e:5f:5c:b5:39:0e:2a:34:c8:5f:1a:b7:98:23:
                    17:64:d4:25:0e:b7:ed:e6:9e:57:27:46:01:b1:cf:
                    e2:49:e8:03:01:72:e7:50:76:d2:3f:4a:1a:34:10:
                    5b:1c:10:3d:6e:21:75:9c:50:05:c9:8c:ba:91:23:
                    e5:e7:29:34:24:2a:1f:51:18:8f:98:1f:b9:80:28:
                    8d:85:51:2d:a2:81:22:e0:8c:ec:26:42:68:76:b1:
                    47:66:46:78:44:5f:0a:5f:9d:2d:f4:ce:d5:06:e2:
                    f5:de:91:2c:91:53:c7:b7:16:3f:c9:0e:d4:01:aa:
                    25:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:E0:31:78:1C:99:A0:92:B7:C0:09:FE:20:5F:C4:1F:0D:62:9F:83
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ab16c679-8500-43c8-a6e1-de2c1bca9d9c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.176.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:bb:a5:68:81:ae:83:72:97:e4:f6:d3:97:73:2d:21:21:f9:
         91:8a:f7:d4:68:5f:1c:25:b6:87:0a:36:55:52:e5:af:24:c3:
         bc:23:85:4e:db:76:c2:7b:ab:53:e8:d7:14:40:60:8b:04:44:
         56:0c:a9:bc:72:11:89:e9:f9:8b:86:0b:03:a0:27:00:55:84:
         d3:c2:cd:e9:7b:7a:56:3d:b9:8c:e5:ea:a4:53:d7:5d:be:24:
         c3:8c:4f:ec:9f:0f:09:80:2d:25:21:f4:e8:3f:92:eb:8e:c3:
         08:19:c5:97:33:36:a4:c6:93:c7:25:56:27:ba:83:97:c7:a6:
         2b:1c:17:7f:b3:ca:ad:26:b2:a2:ef:08:cc:81:bf:c7:76:c5:
         a9:68:ff:93:4c:37:95:87:e3:2f:2e:0e:90:12:4b:1a:bf:82:
         f0:bf:3d:d0:30:3d:aa:03:ed:1e:30:de:ac:ea:5d:a6:5e:70:
         8d:4c:1b:57:a5:b3:8b:47:e4:2c:df:cf:a8:09:74:28:88:1c:
         8f:e5:c0:a7:fb:4b:a5:0e:51:73:db:1a:f8:cf:08:e3:69:a9:
         5e:97:59:99:80:ee:29:42:b9:c6:c6:76:11:49:b8:2b:80:2d:
         a1:d4:27:3e:2c:55:75:2b:f3:95:73:51:ed:14:3f:24:5d:a1:
         5a:c0:8c:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 07:43:59 2026 by rpki-client