Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f2fe5322-91ca-4110-b210-af46310a9592.roa
File:                     f2fe5322-91ca-4110-b210-af46310a9592.roa (raw, json)
Hash identifier:          WYkvXdXWoaSlAGKOYxJ4aVQFzMHkwBNIAP8wAPnRGGg=
Subject key identifier:   14:38:C9:98:53:98:02:BB:12:4E:9E:8A:6B:BF:68:C3:D4:E3:8A:A2
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       204E585F02334F358C94A21AF1600DDAF6DEF39F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f2fe5322-91ca-4110-b210-af46310a9592.roa
Signing time:             Tue 28 Apr 2026 00:10:09 +0000
ROA not before:           Tue 28 Apr 2026 00:10:09 +0000
ROA not after:            Mon 27 Jul 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        166.92.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:4e:58:5f:02:33:4f:35:8c:94:a2:1a:f1:60:0d:da:f6:de:f3:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 28 00:10:09 2026 GMT
            Not After : Jul 27 23:59:59 2026 GMT
        Subject: serialNumber=cd4eb408968de69024adf29d8829990393cde557c398d1df01d1dd8676dbb96d, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:19:6c:32:34:ee:c8:a8:68:3d:07:48:49:13:
                    2e:b2:63:f9:c6:21:7c:a7:51:4f:5e:08:2e:1f:a0:
                    f6:ff:f6:56:77:d1:b5:b5:31:fa:51:40:fe:72:bb:
                    9a:ed:bf:99:d0:93:4f:24:50:43:7a:d6:2d:fc:2e:
                    a7:b7:c7:27:48:88:79:43:70:7e:1b:9d:1b:07:5c:
                    1b:e1:4f:1e:02:0f:74:2d:f4:14:fb:62:c2:8e:9b:
                    99:81:ac:b4:78:bd:ce:23:55:16:ed:6d:e6:db:0f:
                    00:c3:17:18:6e:3f:51:62:47:58:0a:62:7b:d9:79:
                    6e:4a:99:1a:1c:54:2f:7d:c5:38:b3:8d:df:be:85:
                    49:5e:26:85:ec:90:6f:86:c6:9e:a8:0c:07:4e:d1:
                    fc:2b:91:e9:a4:f9:80:73:18:07:5a:20:59:7b:bf:
                    d2:8d:8e:ae:16:24:3b:9b:3e:fd:4b:c5:82:3f:c0:
                    b6:a6:7c:bc:4b:b0:cd:3f:eb:de:b4:89:2f:4c:13:
                    ae:bf:49:97:f5:99:ea:15:80:bb:19:c7:a0:90:3b:
                    28:6e:2f:d9:80:ee:1a:5e:e0:5c:d3:90:ad:a7:d2:
                    8e:67:31:0e:b6:e7:f4:23:55:b5:a0:fe:dc:27:ff:
                    d4:d6:42:ca:f3:0f:19:76:73:22:1b:a9:db:5d:2b:
                    fa:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:38:C9:98:53:98:02:BB:12:4E:9E:8A:6B:BF:68:C3:D4:E3:8A:A2
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f2fe5322-91ca-4110-b210-af46310a9592.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.92.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         2c:1c:bf:d9:65:dd:11:73:b4:fd:cd:e0:a5:cb:67:67:82:9b:
         47:06:93:19:f0:f5:7a:72:d7:59:58:50:5b:2c:7f:84:65:1e:
         17:f0:d4:70:93:b2:f2:1a:13:97:19:f8:ec:b6:ef:53:2c:2f:
         ba:af:26:04:fe:ae:ae:bc:a2:3b:27:e2:c0:43:2f:7b:99:c6:
         b3:e5:2a:57:df:e4:8e:33:f9:e9:5f:59:16:26:1f:11:70:16:
         59:5f:25:87:0d:a7:9b:95:81:34:0e:ed:a5:f5:a2:56:9b:e7:
         c4:67:0b:30:7d:5d:4b:16:81:b5:00:ac:c5:6f:32:51:27:86:
         71:a9:a2:21:ba:63:84:36:9b:c2:20:44:9e:2b:b1:2d:71:2b:
         f8:09:56:61:15:3b:e7:81:56:e3:8e:d0:56:fb:4b:81:2e:ef:
         30:33:2e:f7:6d:ef:88:fb:4b:9a:ad:4e:c4:7a:ec:fd:6d:cb:
         50:4f:64:70:a4:81:96:a5:d0:a1:12:df:ab:86:b6:b2:94:a5:
         9e:88:8b:c2:3c:6c:1a:c8:26:1e:38:0d:26:5c:da:1a:c2:21:
         a5:f8:98:0b:17:13:da:97:3a:f9:3f:9f:b2:ff:7a:4a:7e:5f:
         fa:6c:55:94:fe:ff:05:20:52:59:8b:a4:1c:95:fe:c9:4d:83:
         a0:fb:db:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:14:31 2026 by rpki-client