Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b00aeea4-383a-49e7-8e11-a05b39456c60.roa
File:                     b00aeea4-383a-49e7-8e11-a05b39456c60.roa (raw, json)
Hash identifier:          SYYDUTg26ZZEKz3RWQJjIM0nKhmMKvXoitfY2+STIL0=
Subject key identifier:   AC:60:EA:4F:82:57:B6:4C:EF:02:43:61:6D:D0:63:78:58:D0:5D:27
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6E474ACAE1C4407E67FCB7A3E0EE7C6D55D14B6B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b00aeea4-383a-49e7-8e11-a05b39456c60.roa
Signing time:             Fri 31 Jul 2026 00:40:11 +0000
ROA not before:           Fri 31 Jul 2026 00:40:11 +0000
ROA not after:            Thu 29 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        130.176.72.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Aug 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:47:4a:ca:e1:c4:40:7e:67:fc:b7:a3:e0:ee:7c:6d:55:d1:4b:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 31 00:40:11 2026 GMT
            Not After : Oct 29 23:59:59 2026 GMT
        Subject: serialNumber=180e7e80bc04a3c52de7b6fcb43ad8925cc1eeacfe4134b1b314adc1a629b9fe, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:22:01:a8:26:82:63:0b:14:88:1e:45:96:0a:
                    43:a1:52:fb:73:49:fe:20:5c:9d:8b:7a:56:c1:e3:
                    f6:97:72:e4:70:5e:d8:6b:62:f4:eb:80:de:f6:5b:
                    2b:a4:10:11:b0:c3:4c:29:e1:56:53:fb:b5:e4:0f:
                    aa:29:b9:46:12:fa:9e:7f:39:80:63:74:d8:42:29:
                    3d:bf:b4:d4:7c:18:24:14:52:aa:d5:2e:50:39:93:
                    0a:be:96:b8:cd:e3:6a:ce:dc:d4:a4:0b:cf:a0:5c:
                    04:a8:25:2d:5d:0c:e6:92:3f:00:66:99:fe:6f:f5:
                    da:fe:61:0e:33:82:25:17:77:79:15:3f:3b:9d:be:
                    45:48:61:69:8e:38:bb:d2:32:3c:73:5f:99:50:09:
                    45:bd:a8:de:49:33:dc:df:6d:a2:fa:59:d0:77:2d:
                    39:27:7e:1c:19:c8:f9:81:41:73:c7:ef:0f:6f:21:
                    ca:96:bc:69:de:ea:f6:6e:69:8b:ba:68:b3:25:9c:
                    a2:2e:17:81:97:0e:f3:3f:61:a9:38:ef:e6:e5:d7:
                    2e:fa:0f:0f:39:4f:c0:5e:3f:5d:3a:7c:dd:05:4e:
                    71:21:9a:41:86:c5:e8:3f:93:00:81:34:bf:1e:90:
                    4d:ed:2b:73:3d:aa:9d:50:23:b9:ee:9a:82:e5:68:
                    b3:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:60:EA:4F:82:57:B6:4C:EF:02:43:61:6D:D0:63:78:58:D0:5D:27
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b00aeea4-383a-49e7-8e11-a05b39456c60.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.176.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         28:15:f9:16:7d:db:52:48:28:e4:38:d5:b1:45:6f:3e:8f:d3:
         2a:04:7a:12:d0:11:98:ae:2f:47:a8:31:8d:84:2c:ef:48:8d:
         3c:94:2b:fa:26:a7:49:30:5d:7f:a0:c7:b0:ea:9e:bc:e8:ec:
         0b:67:72:b0:f9:31:cd:34:8e:89:67:88:0e:97:89:2d:cf:65:
         07:36:f5:ca:29:bd:f9:d9:79:ba:3b:f0:62:08:0b:aa:c7:10:
         50:57:e5:e7:23:29:93:7a:92:fc:f9:2d:35:3f:71:31:0e:70:
         11:4e:76:9d:2e:69:f1:6f:6f:70:17:61:31:05:19:c9:0d:50:
         98:b1:9f:3f:29:fe:69:00:c3:2a:5d:a5:51:90:28:96:22:83:
         9b:58:a6:68:4d:c9:c2:a4:e9:12:be:d7:91:80:1e:b6:f2:8e:
         33:58:27:48:b8:5f:b6:45:2a:c4:ae:4a:12:65:1e:92:7a:7f:
         51:b6:d3:2b:d6:b3:b4:98:7d:f3:5a:2b:76:a0:18:50:d1:b0:
         d2:e1:3e:a3:18:e9:75:cc:8c:18:4e:f2:d5:81:f7:30:df:49:
         27:5e:3e:51:97:5e:3c:68:19:3d:7a:a9:a4:5b:07:bd:f7:6d:
         36:6e:b4:00:18:84:7b:fa:9a:25:cc:b8:11:8a:a5:62:c4:eb:
         c2:66:f4:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 3 05:37:25 2026 by rpki-client