Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/92a2267e-063d-4dfc-aad8-a9ed1663387b.roa
File:                     92a2267e-063d-4dfc-aad8-a9ed1663387b.roa (raw, json)
Hash identifier:          Ybmlq3mgaKqN62qgp/3gcKRZYRJtOkbRrzY103Z1RsM=
Subject key identifier:   D7:CD:E8:53:09:03:9C:C1:EE:E9:E1:0B:29:29:6C:89:59:40:04:95
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       64BF92BD92223E9A4F6F1095CE10420CE1C3AEF2
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/92a2267e-063d-4dfc-aad8-a9ed1663387b.roa
Signing time:             Tue 12 May 2026 00:30:15 +0000
ROA not before:           Tue 12 May 2026 00:30:15 +0000
ROA not after:            Mon 10 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        83.160.0.0/14 maxlen: 14
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:bf:92:bd:92:22:3e:9a:4f:6f:10:95:ce:10:42:0c:e1:c3:ae:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 12 00:30:15 2026 GMT
            Not After : Aug 10 23:59:59 2026 GMT
        Subject: serialNumber=59f2124ee77c6fe438b88cebe41177ac24028d7b647a8653cd62b15154b96857, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f4:e6:65:52:a2:73:cd:08:dc:78:23:f3:5d:
                    09:3f:98:3c:98:3c:32:88:f4:2a:2d:81:65:c5:f7:
                    00:5a:e2:1a:27:5b:71:88:22:2d:85:44:40:3a:9c:
                    ae:4c:d8:3a:f7:69:fe:cd:a0:91:40:9d:25:70:5e:
                    b5:f8:eb:79:f8:5f:2a:4d:07:59:14:ac:6e:05:25:
                    d0:63:3e:68:e7:18:e4:76:2e:28:83:67:de:45:c0:
                    2e:23:03:c8:27:d5:5b:01:f4:f8:1c:87:b4:e2:a5:
                    7e:f3:78:f7:6f:8a:31:26:95:66:40:2f:a6:60:bf:
                    87:be:63:25:5d:30:3a:c7:1f:ca:ad:57:cb:0a:69:
                    1f:2d:a4:ff:78:08:83:77:e4:39:09:aa:f0:27:de:
                    1d:59:ba:8b:3a:1a:0d:01:8e:4e:12:65:e5:f4:30:
                    c8:25:80:84:ae:d6:b0:da:1e:05:98:91:10:8b:80:
                    7e:0c:34:da:dc:92:dc:f4:2d:a0:1f:22:3d:b7:9d:
                    f4:eb:79:8c:9a:27:93:0b:cc:33:60:4a:ea:fc:f2:
                    d3:1e:44:d6:11:18:a3:cf:9d:a7:8b:d8:34:de:cb:
                    a0:67:f1:a0:c6:c1:0c:2e:4c:62:01:a5:33:7d:13:
                    a7:7a:b2:2c:5f:37:a7:82:b5:f4:2d:9c:20:f0:27:
                    72:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:CD:E8:53:09:03:9C:C1:EE:E9:E1:0B:29:29:6C:89:59:40:04:95
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/92a2267e-063d-4dfc-aad8-a9ed1663387b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.160.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         67:04:14:e8:f7:ba:38:da:60:87:33:b8:7d:09:23:81:88:ec:
         9c:3e:7b:67:b9:1d:1a:97:d2:40:9c:ed:3d:1e:46:ae:ec:05:
         42:4d:6b:05:44:23:34:75:e1:c6:79:fa:76:6e:2f:02:81:0f:
         ba:54:65:08:87:b9:bf:70:5d:61:a3:64:76:9d:fb:3a:ed:5e:
         38:82:7e:00:f4:6c:31:e7:a6:7d:c1:ae:28:83:70:68:97:21:
         d6:e4:e5:58:aa:28:b1:1d:e3:5e:9d:c0:a2:a4:2c:ce:29:e9:
         36:4c:00:63:0b:42:f0:69:9c:59:e5:62:57:42:a4:7f:2f:39:
         f9:88:c4:4a:97:2d:76:4b:89:fe:97:a8:01:35:2d:14:9f:72:
         16:e4:2f:e9:11:38:57:89:26:c9:b1:72:74:ca:0b:da:03:5b:
         63:78:17:18:1e:b0:f2:6c:2c:7e:46:e2:96:bc:37:43:fe:45:
         aa:c6:7a:9a:38:95:9c:84:9d:61:11:16:f4:50:98:62:71:5d:
         61:07:c0:a7:b0:84:e6:2a:c1:84:fa:15:7c:25:2c:2f:ce:e2:
         fc:e1:b7:87:17:da:01:1c:7e:c0:61:b2:47:8d:53:39:20:e7:
         98:21:c5:90:49:b4:6f:f7:64:14:b9:63:cd:0a:29:7c:46:e5:
         8f:9c:5d:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:59:10 2026 by rpki-client