Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0114a896-9728-46a0-a9f2-a6fdf1c6fb94.roa
File:                     0114a896-9728-46a0-a9f2-a6fdf1c6fb94.roa (raw, json)
Hash identifier:          RuvtixqYQAsTHr1Z74cF1nVw2jYpRb4yg/w6enRKKOY=
Subject key identifier:   A2:12:C5:47:6D:3B:BF:E8:87:6B:5C:EE:4B:20:F6:89:10:FF:C1:B0
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       78E798F37EDF94604D9BC0629AE0F162037CEB9C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0114a896-9728-46a0-a9f2-a6fdf1c6fb94.roa
Signing time:             Sat 16 May 2026 01:41:26 +0000
ROA not before:           Sat 16 May 2026 01:41:26 +0000
ROA not after:            Fri 14 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        92.201.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:e7:98:f3:7e:df:94:60:4d:9b:c0:62:9a:e0:f1:62:03:7c:eb:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 16 01:41:26 2026 GMT
            Not After : Aug 14 23:59:59 2026 GMT
        Subject: serialNumber=ee2f7bcc6275ebec74ea6306ad62ab2091f087be97dcfd08566953f66ac06a46, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:3e:3e:dd:7b:05:aa:95:af:dc:73:44:a8:b1:
                    1e:1b:67:3f:b1:53:fb:12:f3:72:4b:18:58:fb:f5:
                    75:0f:73:80:90:8f:cc:b8:35:3a:2a:0b:eb:2a:40:
                    6d:ae:51:6d:8c:df:5d:b5:bd:17:1f:a3:b8:b6:92:
                    1d:6d:c7:8d:d3:66:8e:5b:26:3d:33:c8:21:63:53:
                    5b:6b:a2:16:c3:50:1b:62:51:31:67:9b:81:7f:dc:
                    7c:16:90:f2:38:69:b4:63:9b:d8:90:a1:47:84:3c:
                    5b:59:bf:2f:24:73:af:40:52:8a:02:a1:b0:a5:a2:
                    58:d0:d7:a9:66:05:2a:09:07:36:82:29:62:de:57:
                    a8:55:59:bd:be:6e:4b:58:67:5f:92:8c:46:8c:10:
                    73:4f:a3:55:21:6c:11:43:6f:a3:a0:ec:a8:a5:13:
                    66:8b:1d:5c:ed:19:dc:3c:ce:ed:5a:f1:a6:ce:74:
                    b5:fe:3c:6b:80:53:7f:c8:b9:82:a0:fe:f5:1e:dd:
                    ee:f7:39:7c:0a:8d:57:f4:fa:6c:a0:b2:ab:13:b7:
                    b0:4b:9f:fc:87:f6:7f:fe:60:6d:18:74:fe:3b:eb:
                    56:f1:05:16:12:95:4a:6c:27:b3:90:80:bf:af:ab:
                    be:7b:9b:4e:8a:0f:e9:7a:75:a4:a5:95:c4:26:c5:
                    79:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:12:C5:47:6D:3B:BF:E8:87:6B:5C:EE:4B:20:F6:89:10:FF:C1:B0
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0114a896-9728-46a0-a9f2-a6fdf1c6fb94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.201.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         11:01:c4:c4:13:a9:b2:88:c7:f4:a3:d4:9f:3d:d4:10:2f:04:
         8b:4f:69:05:e6:fc:31:2b:c2:42:67:a5:3a:e4:d5:c0:3b:17:
         b3:d7:19:b7:06:79:37:0e:58:d2:e9:29:c0:c6:4e:83:09:5d:
         67:93:b1:e0:f8:79:e2:c0:68:2e:0b:e5:b4:c1:a9:e4:1f:48:
         12:f0:f5:74:be:60:1a:c2:54:eb:b9:ba:55:45:d4:a9:92:22:
         91:2a:58:76:fe:d9:04:89:2f:85:d9:cb:d5:34:e6:7f:cc:65:
         84:d5:0e:75:43:ac:27:c3:1f:4f:64:ff:92:60:9f:42:b5:c6:
         35:b7:72:a9:83:c1:66:da:ed:88:39:ac:10:e5:1d:58:e7:ca:
         2d:42:21:ae:50:36:5f:88:bc:68:10:82:9b:f6:04:99:c2:27:
         64:27:9c:15:69:5f:5b:73:3b:39:c8:dd:02:6a:14:53:ea:6d:
         13:ce:c5:bf:84:7c:cf:89:c7:59:93:5d:49:cf:07:2f:e7:b5:
         da:29:5d:f1:07:a5:3a:79:75:b7:96:97:09:84:03:36:c8:ff:
         aa:29:25:ed:df:b8:23:16:ec:c1:b6:d3:f6:14:96:6a:13:6e:
         c6:f6:fa:1a:3c:7c:d4:33:59:0b:46:82:98:be:b6:6e:6b:87:
         a0:27:d7:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:50:49 2026 by rpki-client