Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e6be90fa-7ed7-404b-a71c-e8b9c8cf426b.roa
File:                     e6be90fa-7ed7-404b-a71c-e8b9c8cf426b.roa (raw, json)
Hash identifier:          uq0OwbRt/o7XD6ncAd2qiwuVcU/rRI+p3HiGfvt58pQ=
Subject key identifier:   34:6F:9D:D0:60:E8:F6:D3:0C:B5:66:83:FF:B6:E3:B3:60:AD:DD:04
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0E2D4DE9C7303C751EA580A32455BCCC67CC4B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e6be90fa-7ed7-404b-a71c-e8b9c8cf426b.roa
Signing time:             Fri 14 Aug 2026 00:00:11 +0000
ROA not before:           Fri 14 Aug 2026 00:00:11 +0000
ROA not after:            Thu 12 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        130.176.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:2d:4d:e9:c7:30:3c:75:1e:a5:80:a3:24:55:bc:cc:67:cc:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug 14 00:00:11 2026 GMT
            Not After : Nov 12 23:59:59 2026 GMT
        Subject: serialNumber=b8701885a8863af2126abd1ff1d7faf37488b498fbec00419186a2e340495974, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:f4:25:d0:a5:8c:42:a9:78:25:f7:a8:31:59:
                    b5:9f:46:92:91:31:07:93:4c:c7:b6:95:af:f9:8b:
                    7f:aa:d3:30:e1:6c:8c:8d:5d:b1:82:cb:d1:e1:51:
                    89:66:08:35:8a:6a:b1:65:18:d7:ec:7b:2d:48:31:
                    4e:b1:6c:f8:56:50:cb:80:be:6b:98:ea:f5:28:d0:
                    6c:0f:7a:f2:8d:38:37:79:c2:4d:9a:ca:7a:81:08:
                    56:d1:85:44:d3:67:4c:f0:94:94:da:9a:06:52:1d:
                    7d:a6:96:ac:e5:d5:d3:68:88:e0:23:6e:98:a9:f9:
                    c6:19:13:63:82:70:c7:89:07:73:79:79:da:da:4e:
                    d2:2c:2a:06:e7:27:d4:a5:e5:3f:e4:de:ea:8f:5a:
                    ab:b9:40:3a:fa:8e:52:4f:71:ac:af:94:db:f7:15:
                    d8:a2:28:71:1c:8e:94:41:13:e0:f9:8b:ae:65:fc:
                    33:38:b1:8a:d8:78:1c:c4:b4:3a:08:6d:b4:04:12:
                    09:5e:6d:dc:43:ee:0e:0d:46:4b:64:aa:29:ee:3d:
                    2f:b3:ca:22:a1:93:eb:c8:46:e1:21:96:9f:aa:37:
                    fb:a2:2d:93:7f:dc:c9:c7:ee:5d:1a:0c:f7:ea:c2:
                    fb:d4:e0:4e:47:ab:74:2d:8b:0a:4d:10:92:3c:2d:
                    bb:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:6F:9D:D0:60:E8:F6:D3:0C:B5:66:83:FF:B6:E3:B3:60:AD:DD:04
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e6be90fa-7ed7-404b-a71c-e8b9c8cf426b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.176.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:f9:eb:d2:4c:ab:ba:0f:4c:1d:78:56:67:29:27:e0:b9:c1:
         a7:c3:1b:23:90:4e:7b:a9:06:b3:e0:92:b4:fa:46:c5:83:ac:
         31:c3:5a:2d:bf:ae:7b:df:72:22:9c:35:f9:a2:a5:7e:5f:e2:
         0a:f5:52:6a:68:f4:59:0d:7d:70:29:a6:88:bb:ed:e3:bc:22:
         1e:12:43:b8:65:b6:58:4c:38:a6:b5:1f:43:e0:fd:d5:55:66:
         85:a7:a9:cd:98:e4:74:93:e9:62:d2:01:0c:8e:7e:f4:9b:6d:
         c0:05:61:aa:19:db:27:e7:4b:3b:cd:08:bf:36:a2:f7:33:0f:
         33:09:4e:22:40:51:16:15:07:91:0e:86:69:8d:e9:ed:14:ba:
         d9:fd:87:6f:72:4e:a1:ee:e9:1b:0f:6d:37:5a:a9:e7:81:9d:
         84:b4:4e:16:64:10:bf:02:fd:0c:05:4e:ea:de:62:d4:a0:0c:
         8c:7c:96:ca:7b:77:f8:b2:74:9f:fd:09:af:84:4a:85:b9:43:
         46:c0:a0:60:9b:79:23:92:63:2e:03:54:22:2b:f7:41:df:8f:
         91:1b:95:52:0d:bd:22:01:df:10:19:d5:e2:77:ca:f6:94:ed:
         69:41:ba:04:f1:cc:a3:64:9b:6e:ef:5e:c7:66:c7:20:ea:b1:
         85:38:cc:e4
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgITDi1N6ccwPHUepYCjJFW8zGfMSzANBgkqhkiG9w0BAQsF
ADA9MTswOQYDVQQDEzI2ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAxOGQ0MmJlMzU4ZWIz
NzEwN2RiZThjYjcxZDBhNzAeFw0yNjA4MTQwMDAwMTFaFw0yNjExMTIyMzU5NTla
MHoxSTBHBgNVBAUTQGI4NzAxODg1YTg4NjNhZjIxMjZhYmQxZmYxZDdmYWYzNzQ4
OGI0OThmYmVjMDA0MTkxODZhMmUzNDA0OTU5NzQxLTArBgNVBAMTJGIyNWM5NzBm
LWQ4MTMtNDQ1Yy1iZmUyLTYyNjY4NTE4Yzg3ZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJf0JdCljEKpeCX3qDFZtZ9GkpExB5NMx7aVr/mLf6rTMOFs
jI1dsYLL0eFRiWYINYpqsWUY1+x7LUgxTrFs+FZQy4C+a5jq9SjQbA968o04N3nC
TZrKeoEIVtGFRNNnTPCUlNqaBlIdfaaWrOXV02iI4CNumKn5xhkTY4Jwx4kHc3l5
2tpO0iwqBucn1KXlP+Te6o9aq7lAOvqOUk9xrK+U2/cV2KIocRyOlEET4PmLrmX8
Mzixith4HMS0OghttAQSCV5t3EPuDg1GS2SqKe49L7PKIqGT68hG4SGWn6o3+6It
k3/cycfuXRoM9+rC+9TgTkerdC2LCk0Qkjwtu/0CAwEAAaOCArEwggKtMB0GA1Ud
DgQWBBQ0b53QYOj20wy1ZoP/tuOzYK3dBDAfBgNVHSMEGDAWgBQQXdeNVXhAq0Nd
vRUhII8p+kk/rjAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg
BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy
aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv
MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzFiYTMwMmI4LThk
YWItNDkxZC1iOWVkLWQ3YzkyZDAzMGQ4Mi82ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAx
OGQ0MmJlMzU4ZWIzNzEwN2RiZThjYjcxZDBhNy5jZXIwgZ4GCCsGAQUFBwELBIGR
MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8yMGFhMzI5Yi1mYzUyLTRjNjEtYmY1My0wOTcy
NWMwNDI5NDIvZTZiZTkwZmEtN2VkNy00MDRiLWE3MWMtZThiOWM4Y2Y0MjZiLnJv
YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0
LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMt
MDk3MjVjMDQyOTQyL19xeDNSSjhCalVLLU5ZNnpjUWZiNk10eDBLYy5jcmwwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAIKwHDANBgkqhkiG9w0BAQsFAAOCAQEASvnr0kyrug9MHXhWZykn4LnBp8Mb
I5BOe6kGs+CStPpGxYOsMcNaLb+ue99yIpw1+aKlfl/iCvVSamj0WQ19cCmmiLvt
47wiHhJDuGW2WEw4prUfQ+D91VVmhaepzZjkdJPpYtIBDI5+9JttwAVhqhnbJ+dL
O80Ivzai9zMPMwlOIkBRFhUHkQ6GaY3p7RS62f2Hb3JOoe7pGw9tN1qp54GdhLRO
FmQQvwL9DAVO6t5i1KAMjHyWynt3+LJ0n/0Jr4RKhblDRsCgYJt5I5JjLgNUIiv3
Qd+PkRuVUg29IgHfEBnV4nfK9pTtaUG6BPHMo2Sbbu9ex2bHIOqxhTjM5A==
-----END CERTIFICATE-----
Generated at Tue Sep 15 10:59:06 2026 by rpki-client