Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/119dc5d3-828f-4fcb-ac13-56c9facae99f.roa
File:                     119dc5d3-828f-4fcb-ac13-56c9facae99f.roa (raw, json)
Hash identifier:          sBm9lKhMgzFEnapUpRY9gKkDr3P0Cr4RydD8Sxn01rE=
Subject key identifier:   E0:7C:FD:37:86:87:3E:72:48:C5:11:A4:73:B1:B0:9D:61:0D:7B:0E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4BF2625523D61C24F2E12CBCA0457677F74FE853
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/119dc5d3-828f-4fcb-ac13-56c9facae99f.roa
Signing time:             Sat 25 Jul 2026 00:11:19 +0000
ROA not before:           Sat 25 Jul 2026 00:11:19 +0000
ROA not after:            Fri 23 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        35.50.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:f2:62:55:23:d6:1c:24:f2:e1:2c:bc:a0:45:76:77:f7:4f:e8:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 25 00:11:19 2026 GMT
            Not After : Oct 23 23:59:59 2026 GMT
        Subject: serialNumber=0e0b8a0238bb5337e7a4c60db604b9e3e1287ecbebae46c635f451b8a4532a96, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:9e:65:38:08:89:f4:a9:4b:37:a3:07:98:03:
                    f8:19:48:c5:0a:77:13:08:23:b1:77:dd:a4:5f:9a:
                    2b:7d:09:ea:83:e8:bf:01:33:df:e5:64:69:43:29:
                    44:40:ff:06:b0:67:a1:73:25:4d:1b:1e:76:17:b0:
                    f5:f2:0e:5e:f4:e9:3e:71:cf:3f:d0:8a:22:f3:1c:
                    6c:49:f9:55:e7:a4:52:44:a7:5c:9b:f6:e7:a8:95:
                    68:9a:af:a3:2b:53:ea:a2:43:d5:d2:8b:b6:37:5a:
                    8f:36:60:ba:52:e5:76:78:49:d4:0e:f0:9e:15:bf:
                    4d:e3:20:e0:49:2c:7b:3d:eb:59:64:3b:4c:41:a8:
                    5b:7c:8a:e2:b6:64:61:af:51:27:6a:ee:92:54:00:
                    5b:7d:43:96:5b:3c:04:58:35:9c:33:97:ae:55:f9:
                    c5:55:1f:a8:23:31:0e:75:9d:46:5a:1d:40:37:a7:
                    72:7c:41:31:17:4f:25:d5:47:cf:d0:10:55:b1:89:
                    25:d8:4c:11:52:65:f5:3f:7f:ff:45:03:87:5c:20:
                    e8:0b:68:85:2e:69:6e:a6:44:52:08:04:40:a4:28:
                    77:5e:82:f0:ff:80:34:15:43:85:85:90:40:5c:3f:
                    e8:fd:a4:c1:fe:ba:1c:92:33:26:b2:f0:d9:26:5a:
                    00:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:7C:FD:37:86:87:3E:72:48:C5:11:A4:73:B1:B0:9D:61:0D:7B:0E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/119dc5d3-828f-4fcb-ac13-56c9facae99f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.50.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         88:df:d0:81:1b:05:1d:45:7c:c7:41:76:28:12:5c:d1:1e:cd:
         08:39:bd:34:ea:1b:d3:78:b4:c9:de:c0:0e:93:23:67:3d:f1:
         e3:77:e2:83:ce:be:3c:a1:cd:42:cc:04:4e:73:92:dd:17:c6:
         7d:b2:af:a2:9f:ba:27:5b:92:28:93:51:56:10:a4:50:06:1f:
         39:e2:68:25:d3:f5:54:31:cb:16:a1:8d:0c:fa:0e:78:07:95:
         31:7b:e7:c2:a5:c2:37:23:57:a9:02:d2:26:1d:89:0b:f7:53:
         12:4b:13:7b:70:20:49:11:59:7e:ee:88:de:96:22:6c:1f:7f:
         a4:4c:7a:55:af:f7:da:cd:c6:ed:8b:05:36:38:18:08:25:f6:
         7d:d2:08:df:f7:dc:a3:76:70:7f:17:7c:8f:3a:7a:d0:d6:ab:
         32:2c:53:9e:3e:30:69:a1:e9:0a:91:76:82:0e:40:6c:4e:f1:
         5e:0b:e6:04:8a:7e:a2:ee:b6:53:30:47:90:8f:57:8a:ed:22:
         70:c4:81:2b:12:1f:78:27:3b:05:f9:3b:97:5e:8f:21:a1:e7:
         c3:a0:dc:c7:0f:7b:10:2f:e8:1c:1d:5b:fd:c0:ac:4f:33:1c:
         62:af:40:b6:18:c7:d8:73:e8:bd:ef:0b:9e:d1:36:bb:4a:e2:
         0c:50:32:28
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUS/JiVSPWHCTy4Sy8oEV2d/dP6FMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzI1MDAxMTE5WhcNMjYxMDIzMjM1OTU5
WjB6MUkwRwYDVQQFE0AwZTBiOGEwMjM4YmI1MzM3ZTdhNGM2MGRiNjA0YjllM2Ux
Mjg3ZWNiZWJhZTQ2YzYzNWY0NTFiOGE0NTMyYTk2MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCqnmU4CIn0qUs3oweYA/gZSMUKdxMII7F33aRfmit9CeqD
6L8BM9/lZGlDKURA/wawZ6FzJU0bHnYXsPXyDl706T5xzz/QiiLzHGxJ+VXnpFJE
p1yb9ueolWiar6MrU+qiQ9XSi7Y3Wo82YLpS5XZ4SdQO8J4Vv03jIOBJLHs961lk
O0xBqFt8iuK2ZGGvUSdq7pJUAFt9Q5ZbPARYNZwzl65V+cVVH6gjMQ51nUZaHUA3
p3J8QTEXTyXVR8/QEFWxiSXYTBFSZfU/f/9FA4dcIOgLaIUuaW6mRFIIBECkKHde
gvD/gDQVQ4WFkEBcP+j9pMH+uhySMyay8NkmWgAZAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU4Hz9N4aHPnJIxRGkc7GwnWENew4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzExOWRjNWQzLTgyOGYtNGZjYi1hYzEzLTU2YzlmYWNhZTk5Zi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAcjMoAwDQYJKoZIhvcNAQELBQADggEBAIjf0IEbBR1FfMdBdigSXNEezQg5
vTTqG9N4tMnewA6TI2c98eN34oPOvjyhzULMBE5zkt0Xxn2yr6KfuidbkiiTUVYQ
pFAGHzniaCXT9VQxyxahjQz6DngHlTF758KlwjcjV6kC0iYdiQv3UxJLE3twIEkR
WX7uiN6WImwff6RMelWv99rNxu2LBTY4GAgl9n3SCN/33KN2cH8XfI86etDWqzIs
U54+MGmh6QqRdoIOQGxO8V4L5gSKfqLutlMwR5CPV4rtInDEgSsSH3gnOwX5O5de
jyGh58Og3McPexAv6BwdW/3ArE8zHGKvQLYYx9hz6L3vC57RNrtK4gxQMig=
-----END CERTIFICATE-----
Generated at Tue Jul 28 16:01:44 2026 by rpki-client