Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fbef39d3-2fd6-470e-b93f-c8d31b04eef0.roa
File:                     fbef39d3-2fd6-470e-b93f-c8d31b04eef0.roa (raw, json)
Hash identifier:          2XVUJ1xKkddFEuhfGVsNSragkMADBDfogjCfUkoHQlc=
Subject key identifier:   73:39:C9:BD:71:44:EC:0C:3A:20:4B:29:98:1A:D9:37:89:5F:9B:E4
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4C154F89F8995F1B9DFFF013DB2330D9586C99EE
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fbef39d3-2fd6-470e-b93f-c8d31b04eef0.roa
Signing time:             Fri 31 Jul 2026 01:00:12 +0000
ROA not before:           Fri 31 Jul 2026 01:00:12 +0000
ROA not after:            Thu 29 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        130.176.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:15:4f:89:f8:99:5f:1b:9d:ff:f0:13:db:23:30:d9:58:6c:99:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 31 01:00:12 2026 GMT
            Not After : Oct 29 23:59:59 2026 GMT
        Subject: serialNumber=86c7354fbba36bd0119822906de22e672b47795938e8dfe45a11c3415471b5f5, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:11:e2:21:1b:33:be:9e:c2:44:15:7f:27:ef:
                    3b:fa:98:fb:f9:bf:77:5e:ad:95:85:9a:21:58:fb:
                    5c:47:1f:35:c6:6c:df:2a:60:b5:4d:06:a4:ac:c6:
                    0c:f0:43:0a:85:b6:03:dd:89:60:55:8a:59:86:26:
                    f4:19:39:35:64:37:b7:62:28:60:3d:22:b5:19:bd:
                    35:c9:8e:d5:bf:09:c4:cf:8e:e7:ce:99:fc:30:e8:
                    4b:66:2f:69:a5:2a:bb:b1:e5:9a:ff:eb:2d:0f:93:
                    76:19:32:ce:11:84:4f:31:78:31:9d:5a:1e:83:3d:
                    96:77:44:fd:63:f7:18:e7:55:18:fc:4d:5f:38:09:
                    02:83:d8:ec:06:90:6a:b7:1c:ee:f5:e1:e4:d2:09:
                    41:09:43:f7:9f:5a:25:56:39:58:f4:51:c7:36:e9:
                    11:90:8a:84:8f:ba:dd:61:29:a1:a0:db:8d:2a:0f:
                    b4:85:d2:d5:cc:b7:13:de:11:74:57:d0:61:3e:28:
                    78:96:e0:d5:db:e9:11:c5:dc:0c:0c:78:52:da:9a:
                    44:26:0d:e4:ea:9d:05:ea:39:e8:76:10:a1:42:03:
                    69:a5:c4:4b:62:06:dd:8e:c5:0b:c1:45:ce:c5:89:
                    f8:97:34:d3:72:d6:97:0b:1f:da:51:49:f0:21:a4:
                    9d:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:39:C9:BD:71:44:EC:0C:3A:20:4B:29:98:1A:D9:37:89:5F:9B:E4
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fbef39d3-2fd6-470e-b93f-c8d31b04eef0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.176.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:c4:06:2a:72:5b:a9:94:e3:72:c1:74:c7:0d:82:d5:ee:83:
         5c:92:19:50:2d:9c:89:f4:99:fb:92:89:16:fa:16:b5:6d:6b:
         f5:42:bf:66:8b:e4:c6:31:73:33:1e:c1:d8:17:a3:13:5f:14:
         ca:08:19:00:27:97:fe:e9:c5:7a:ca:98:df:50:b2:8c:69:d2:
         8b:8d:92:eb:4c:95:ac:19:34:b0:3b:d7:3b:75:d0:7c:2c:ec:
         5a:8c:19:1b:7d:b1:3b:c9:61:52:c1:e0:f3:b7:c3:f0:7b:27:
         69:e1:54:6f:77:9d:eb:0b:a2:0b:f5:dd:f5:af:3a:0c:3b:c7:
         c6:e4:5c:a5:80:f8:4a:65:8b:3e:0d:bd:2e:21:15:eb:07:33:
         2b:8d:06:76:45:90:27:39:8e:c1:ce:88:87:1a:49:a6:8a:29:
         75:b4:b7:52:69:30:4f:16:52:c2:96:d5:51:1f:ab:3b:6f:02:
         aa:90:4d:66:1a:84:6f:6b:a4:cf:6c:e1:11:a1:9f:44:cc:a1:
         7d:5a:fc:bb:fa:6d:29:ba:34:88:79:34:b7:a5:8f:d8:f1:a7:
         90:4d:0c:bc:7d:d4:58:10:d9:3a:c7:da:55:65:aa:d7:9f:fa:
         71:b4:89:f1:08:57:f9:44:e0:c3:39:17:24:6a:eb:04:0e:33:
         17:0e:ed:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 13:18:58 2026 by rpki-client