Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/92a2267e-063d-4dfc-aad8-a9ed1663387b.roa
File:                     92a2267e-063d-4dfc-aad8-a9ed1663387b.roa (raw, json)
Hash identifier:          mgux5/gNU079Pgmp4axJQ1TTVhqfSUTRxX9mXjgjZko=
Subject key identifier:   31:65:25:EE:14:D5:05:0B:4B:13:FB:55:CE:03:27:27:D6:1B:EB:8D
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2E6DBF3A1F783E9D67FDD7777B1D32162FAEB525
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/92a2267e-063d-4dfc-aad8-a9ed1663387b.roa
Signing time:             Sat 21 Feb 2026 00:40:55 +0000
ROA not before:           Sat 21 Feb 2026 00:40:55 +0000
ROA not after:            Fri 22 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        83.160.0.0/14 maxlen: 14
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:6d:bf:3a:1f:78:3e:9d:67:fd:d7:77:7b:1d:32:16:2f:ae:b5:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 21 00:40:55 2026 GMT
            Not After : May 22 23:59:59 2026 GMT
        Subject: serialNumber=0da5659b7d05b120af96bf4ca7b56ba222a2c3fe2c55ee6ad8510ae95bcc6b2c, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:ee:3a:7b:12:23:0a:c4:6b:b3:ea:82:42:41:
                    24:cd:7d:e9:99:0a:bc:62:73:e7:9b:d6:01:d6:3c:
                    76:7e:b5:a2:76:57:5e:c0:47:52:f9:83:79:2a:02:
                    47:4f:84:ed:60:29:bc:94:f6:06:ac:88:2d:12:92:
                    9c:52:81:e2:a2:3c:49:92:83:09:be:ce:34:89:36:
                    c7:2e:59:63:ca:e5:21:a1:e8:25:bf:75:40:6d:f6:
                    bf:5f:38:4c:c4:01:a2:bc:04:e0:0d:e1:21:34:45:
                    b3:93:33:ae:6c:6e:30:8e:92:21:a7:8c:d4:50:52:
                    9d:57:b7:7e:a6:da:00:21:2f:eb:5b:11:6e:43:05:
                    a9:f5:d8:5d:9d:a7:d5:80:f6:eb:57:8e:79:c2:28:
                    d4:a4:40:f8:11:3b:14:a1:26:1d:74:12:97:85:57:
                    f9:c6:b4:50:79:0e:c1:3b:09:d8:54:71:ac:e4:ff:
                    fe:06:27:ae:96:12:25:93:1e:62:83:68:d0:22:1c:
                    e5:35:fb:3c:58:21:4a:31:16:94:d1:2c:fb:39:ed:
                    e6:e3:96:e4:82:6a:db:ff:f3:fe:f2:08:bb:7c:fb:
                    33:78:fd:9d:86:6c:3a:0b:43:f3:07:76:57:4e:a2:
                    39:82:c1:b8:eb:5f:fd:98:90:cc:c5:f4:a7:aa:d4:
                    61:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:65:25:EE:14:D5:05:0B:4B:13:FB:55:CE:03:27:27:D6:1B:EB:8D
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/92a2267e-063d-4dfc-aad8-a9ed1663387b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.160.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         77:50:f6:e3:0c:74:0b:be:5f:4e:ac:e2:3d:93:dd:31:45:31:
         30:de:34:82:52:6c:e9:1b:41:84:cb:e9:e1:87:19:a0:e1:35:
         8e:2c:6f:f7:f6:b2:9a:f8:02:f6:ff:35:2c:3b:6d:59:6c:c0:
         85:ad:24:68:d4:50:f5:73:16:10:ea:0c:9b:08:fc:3f:de:85:
         16:3e:8d:15:aa:45:8e:5a:ec:e8:eb:83:d9:5f:50:f0:b5:80:
         55:28:9c:73:64:21:4f:51:7f:a4:1a:f9:4e:dc:0a:ce:35:9c:
         ac:55:76:d5:54:24:74:0e:36:01:8d:b0:6f:4c:d2:fc:8f:33:
         90:c6:c8:34:5f:4b:e9:96:58:b3:a8:bf:c0:92:9c:92:3f:24:
         d3:65:80:8a:81:b5:2c:6e:fa:75:74:10:17:53:7f:93:69:fb:
         0f:cf:b0:ca:db:d5:de:5a:35:d1:e0:9b:2e:36:35:b9:21:6e:
         6a:7c:18:69:77:bb:55:60:ce:3d:c0:e1:55:71:35:c0:3e:af:
         67:16:a4:c4:f9:65:7e:9f:07:a4:f6:2c:25:1f:b5:06:13:6d:
         63:13:af:fe:50:2c:e7:e1:c1:12:31:74:77:88:a7:71:17:0d:
         e7:e5:01:d7:39:75:b5:86:1d:53:3a:55:37:4d:69:bf:6c:27:
         cf:5e:60:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:06:54 2026 by rpki-client