Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b9a7ad1f-d5b6-411d-849a-1af69320238a.roa
File:                     b9a7ad1f-d5b6-411d-849a-1af69320238a.roa (raw, json)
Hash identifier:          7J2/CFGgjWxKIcfycgGgJ5LsYxCNYlwidk+iFW3SoDA=
Subject key identifier:   4E:C6:F4:67:EB:8F:45:51:47:C5:C3:1E:3E:C6:7C:78:A1:BC:32:97
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       15B0593027EF938F7631001ADCFEBBBE45F9072B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b9a7ad1f-d5b6-411d-849a-1af69320238a.roa
Signing time:             Mon 10 Aug 2026 00:31:08 +0000
ROA not before:           Mon 10 Aug 2026 00:31:08 +0000
ROA not after:            Sun 08 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        130.176.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 16 Aug 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:b0:59:30:27:ef:93:8f:76:31:00:1a:dc:fe:bb:be:45:f9:07:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug 10 00:31:08 2026 GMT
            Not After : Nov  8 23:59:59 2026 GMT
        Subject: serialNumber=f593826964bff6d3aff617276f31ea3191c292c938c02e6131add2ce7fac52e8, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:17:b7:89:45:1a:dc:3f:16:2c:8f:17:23:2e:
                    c8:1f:ae:6b:c2:a5:11:91:6a:0c:31:a4:6d:e8:70:
                    c2:9c:95:5e:f5:10:4a:ad:a3:f2:50:f8:7a:e8:a6:
                    12:57:77:d4:09:9b:6c:56:4a:91:e0:dc:ee:7c:e6:
                    e9:15:a4:bd:d5:86:b2:1f:5a:e6:5d:89:1d:4e:f0:
                    7e:1f:b4:2f:55:e1:58:eb:26:c5:99:54:e7:68:51:
                    0f:29:75:db:3c:40:52:00:ed:8a:42:7d:31:c8:f5:
                    96:83:a9:b7:b3:b8:4c:d6:0f:42:ad:8d:ad:8f:ac:
                    a3:e3:14:0e:76:28:ea:e4:84:67:5b:5d:9b:29:0c:
                    a8:1a:2c:fa:1e:ec:ee:d9:9c:38:b7:d3:8b:e8:cf:
                    2b:a3:08:b0:d5:7e:33:9d:9e:00:34:3b:fb:77:c2:
                    23:9c:74:95:a3:d1:b4:a6:9e:54:5a:17:16:1b:bf:
                    9a:0d:6a:86:78:ae:7f:16:f9:3f:9d:59:cc:ed:fe:
                    8a:42:14:ac:63:f7:b4:cc:20:7d:a0:b4:91:64:6e:
                    c2:82:41:50:4f:0d:a5:93:ea:1c:45:25:cf:57:f3:
                    20:2e:6f:88:0f:20:a0:9e:c4:54:75:f8:27:79:f4:
                    b7:bb:be:a0:7a:64:4f:9f:cb:c2:56:06:21:c3:39:
                    5e:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:C6:F4:67:EB:8F:45:51:47:C5:C3:1E:3E:C6:7C:78:A1:BC:32:97
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b9a7ad1f-d5b6-411d-849a-1af69320238a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.176.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:08:fa:e3:03:db:24:74:c8:f9:66:81:b5:a3:5d:36:f4:5e:
         ec:60:ce:7d:95:63:3d:91:25:6d:a0:49:bc:1a:87:3c:5b:f4:
         f2:82:9c:2f:46:cd:2c:dc:bd:d8:13:09:c5:00:ca:97:24:4b:
         de:66:ea:3b:46:3b:07:b3:ea:d6:18:4e:99:29:d9:4d:85:c7:
         4e:74:c8:24:c5:1f:80:d3:90:d0:a2:b1:d2:fa:4f:70:12:e2:
         cd:12:d6:cd:4d:bc:73:39:04:5c:a3:47:b9:9b:23:87:30:af:
         91:44:13:67:c4:10:24:cf:47:e8:d3:69:26:6f:9d:80:27:3f:
         15:69:79:cc:f0:8a:b7:ec:88:6b:e6:d1:ab:3f:ef:e7:96:fd:
         09:e7:46:37:52:80:d5:27:3e:4a:56:2d:6d:c4:7c:de:3e:f4:
         17:a6:be:18:d2:09:09:0a:11:36:e4:6c:cc:54:48:19:13:d3:
         fb:6a:ea:40:ca:b9:69:25:2b:b4:9e:be:62:de:02:9e:5a:11:
         b5:3a:cb:cf:47:20:ac:5b:db:9d:53:a7:f6:a9:42:ba:74:ce:
         99:67:91:7b:a4:85:2a:8f:41:e2:70:95:8c:e1:4f:49:81:63:
         70:8f:a5:26:10:cb:62:01:9d:83:16:ec:16:06:8d:51:da:fa:
         fb:eb:d4:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 07:44:18 2026 by rpki-client