Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/be820f17-7291-4a84-85df-748d513a2c5d.roa
File:                     be820f17-7291-4a84-85df-748d513a2c5d.roa (raw, json)
Hash identifier:          52DmszVPMoygReD9dEvZExQ3iA4+4mj21YA0ZzYlx6Y=
Subject key identifier:   81:D3:6A:A6:13:93:D2:3F:3B:E8:58:BC:AA:F5:4D:B6:FA:6D:D4:B0
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7D359FF600A2EDFE40AE10BE21702E6B87E6CA61
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/be820f17-7291-4a84-85df-748d513a2c5d.roa
Signing time:             Fri 31 Jul 2026 00:50:09 +0000
ROA not before:           Fri 31 Jul 2026 00:50:09 +0000
ROA not after:            Thu 29 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        130.176.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Aug 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:35:9f:f6:00:a2:ed:fe:40:ae:10:be:21:70:2e:6b:87:e6:ca:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 31 00:50:09 2026 GMT
            Not After : Oct 29 23:59:59 2026 GMT
        Subject: serialNumber=6fca7e3650e506f69757fc48c3e6255b38417b927017dbb2869fd31dfd646d77, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c0:fd:08:03:4d:e0:4e:3c:02:71:3e:28:37:
                    71:cb:62:ff:0c:35:ed:e2:f9:02:34:ef:3a:df:89:
                    23:7f:39:0c:b8:b0:16:60:69:fd:b9:49:c2:ab:74:
                    72:d5:1b:bd:65:6a:db:0f:04:ae:1e:a2:52:50:2a:
                    61:f9:8c:2b:0d:c1:cf:0f:61:ea:0e:35:f9:71:91:
                    fd:c3:cf:67:1f:4a:c7:03:f2:df:bf:a8:61:cc:28:
                    de:b0:62:65:e6:7d:87:29:64:4e:77:21:3c:f1:38:
                    cb:8d:33:be:64:b4:bc:68:c0:42:a4:2f:0a:e8:0f:
                    4b:5b:ae:39:f8:7f:ed:63:a8:7d:57:9c:01:79:8a:
                    08:f2:af:82:19:d1:e5:67:9d:d5:67:2f:66:89:24:
                    da:6c:6d:90:17:eb:4a:5f:c7:74:d6:18:13:c2:ff:
                    42:2c:14:8d:e2:d8:dd:8a:3f:a1:55:92:d4:77:62:
                    e4:e0:59:5c:7f:48:30:cb:8b:96:8d:7c:b8:4d:12:
                    ea:e0:10:7c:a0:3c:58:b4:d6:2f:d5:26:d9:4a:98:
                    4b:ac:52:55:47:bb:ff:3d:04:e5:a6:2a:b5:ff:4d:
                    23:29:5a:36:c3:01:b6:f5:01:91:87:b2:47:65:10:
                    3d:78:bf:6e:69:ce:f4:87:e0:5c:54:06:b9:23:8f:
                    f4:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:D3:6A:A6:13:93:D2:3F:3B:E8:58:BC:AA:F5:4D:B6:FA:6D:D4:B0
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/be820f17-7291-4a84-85df-748d513a2c5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.176.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:9d:a7:da:17:42:9f:3f:49:89:e1:9d:1c:17:53:8f:60:71:
         c4:9c:46:aa:bb:16:3d:b1:c2:71:57:ee:74:02:89:32:9f:bb:
         10:67:45:11:0a:a1:c9:97:34:1c:24:e2:df:b5:9e:b6:0f:c6:
         9c:a0:aa:05:57:74:53:ba:40:33:60:0a:66:2e:1e:ed:8a:a4:
         55:1f:d1:71:99:28:fe:b6:cf:5e:f6:72:c7:cb:f0:4a:2f:e4:
         ff:f4:66:b8:43:59:ac:47:f7:7b:5c:b7:06:59:4e:e7:96:15:
         4f:2e:92:6c:e6:75:c4:0b:10:6f:12:de:3b:7b:88:b8:ff:66:
         69:e9:89:00:e6:16:04:7e:29:84:e7:fe:6a:3c:3f:f4:0a:bb:
         94:99:2c:6e:27:3d:4c:fb:1b:76:71:2d:56:29:2e:5f:74:d5:
         60:25:a7:42:43:b0:fc:59:c0:9d:4f:5d:60:6e:8c:88:c2:b6:
         c2:3b:4f:6b:ef:b5:9c:5c:5f:30:b3:8e:cd:2e:74:09:95:86:
         25:77:b1:af:40:06:4d:a5:5e:16:84:93:ef:95:f1:26:98:2d:
         a0:a0:50:da:0a:fd:66:69:9f:2b:81:99:46:8b:58:90:2d:c8:
         1c:6a:5d:8a:85:77:0b:6c:ee:93:3d:5e:47:79:7e:31:5b:78:
         af:a6:d8:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 3 05:43:38 2026 by rpki-client