Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4d4df828-87d0-400e-bee0-4cd343ba4776.roa
File:                     4d4df828-87d0-400e-bee0-4cd343ba4776.roa (raw, json)
Hash identifier:          mOcrt1yGFgQQgIBRAKZkInxvAmT03Ito04rbbP+V4wU=
Subject key identifier:   F2:09:57:8A:FF:5D:D5:6A:47:90:89:8E:D6:7F:7E:81:0F:40:A6:0B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       07896B4636060571F1611D91AB5C3901D2AB285E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4d4df828-87d0-400e-bee0-4cd343ba4776.roa
Signing time:             Fri 13 Feb 2026 01:00:51 +0000
ROA not before:           Fri 13 Feb 2026 01:00:51 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        50.18.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:89:6b:46:36:06:05:71:f1:61:1d:91:ab:5c:39:01:d2:ab:28:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 13 01:00:51 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=f5d855552835c81ba2c61e6b14c3457fc074a1dd71d04a07bc7969c43ab0a687, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:01:31:4f:98:92:f5:c5:db:c9:e2:f6:f6:df:
                    07:62:35:76:7c:a8:a6:39:21:bb:07:19:fa:a3:ea:
                    93:a4:6a:ff:c5:c4:ae:aa:7d:ea:cd:0d:27:43:26:
                    35:03:3d:93:6e:22:bf:81:3d:70:70:2e:88:37:02:
                    8c:ad:71:6a:b3:e6:f5:e8:38:3d:71:54:61:91:15:
                    95:f6:ed:fb:80:3d:76:eb:f3:7e:0f:10:70:66:81:
                    1b:38:e6:2a:30:71:94:48:aa:a0:17:12:b6:13:66:
                    c3:12:91:3d:c7:f5:3c:50:21:0f:27:df:9b:6a:23:
                    4d:b3:77:de:f0:3f:ac:b3:b8:67:04:88:7c:94:85:
                    96:13:bc:7b:b8:65:b4:80:e7:06:13:1b:7a:37:22:
                    ba:98:6e:d2:2f:36:ba:7b:41:ed:7a:25:da:f8:4d:
                    d2:43:42:04:e9:17:cd:d4:be:c8:c9:c2:d7:16:10:
                    d1:fe:5f:45:be:e5:37:a1:63:45:d0:75:c7:f5:9b:
                    ad:1f:fa:b1:9b:6d:41:d1:bd:91:3f:38:6c:ad:da:
                    63:19:c3:37:18:b7:d7:70:cf:eb:1c:ac:f5:87:60:
                    b7:20:6c:bb:65:5f:31:e0:68:3e:05:51:8a:29:40:
                    d7:a3:82:88:39:0c:6b:91:4d:23:2e:c6:81:43:3f:
                    2d:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:09:57:8A:FF:5D:D5:6A:47:90:89:8E:D6:7F:7E:81:0F:40:A6:0B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4d4df828-87d0-400e-bee0-4cd343ba4776.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.18.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         55:df:0b:45:d4:f5:4a:ea:35:54:dd:88:76:f5:5a:fd:36:8a:
         15:64:f0:a5:9c:f8:d6:be:5c:2b:55:4f:74:f5:61:16:51:67:
         e1:21:20:0d:46:6c:aa:ec:7e:53:e1:47:e4:7a:9e:7c:e1:05:
         b8:da:19:10:eb:94:57:6a:67:a7:ba:f4:70:37:a1:3f:67:ae:
         04:31:f9:19:c8:6d:d1:6b:08:ca:0f:49:33:4e:f7:2a:3a:ff:
         1a:e6:af:19:ba:a9:37:5e:41:33:e1:93:1c:d8:2d:58:de:ed:
         2f:39:5f:07:d4:82:d7:6c:be:e9:4e:f7:00:88:31:51:9c:23:
         c7:34:e4:3c:e2:95:7a:ab:92:b2:ef:3f:c8:84:73:18:b6:66:
         85:92:6a:29:a6:2a:41:b3:8d:60:f3:6b:23:e1:09:98:6c:fa:
         88:a7:0d:81:b5:07:fc:35:ca:2e:e8:c4:ce:1d:1e:54:c7:30:
         f8:c0:e0:9b:c3:74:38:b2:35:16:17:59:35:d2:17:25:98:be:
         1d:79:a5:62:7c:0e:f0:ff:d9:14:ec:2b:cb:c8:31:95:4c:d5:
         2d:bb:92:a0:ab:45:48:02:ae:c0:ce:72:67:0b:ae:3f:28:80:
         ee:36:ee:24:2e:7f:d2:1a:ab:6a:be:0e:4a:fe:e4:ec:68:5a:
         90:32:7b:99
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUB4lrRjYGBXHxYR2Rq1w5AdKrKF4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjEzMDEwMDUxWhcNMjYwNTE0MjM1OTU5
WjB6MUkwRwYDVQQFE0BmNWQ4NTU1NTI4MzVjODFiYTJjNjFlNmIxNGMzNDU3ZmMw
NzRhMWRkNzFkMDRhMDdiYzc5NjljNDNhYjBhNjg3MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDGATFPmJL1xdvJ4vb23wdiNXZ8qKY5IbsHGfqj6pOkav/F
xK6qferNDSdDJjUDPZNuIr+BPXBwLog3AoytcWqz5vXoOD1xVGGRFZX27fuAPXbr
834PEHBmgRs45iowcZRIqqAXErYTZsMSkT3H9TxQIQ8n35tqI02zd97wP6yzuGcE
iHyUhZYTvHu4ZbSA5wYTG3o3IrqYbtIvNrp7Qe16Jdr4TdJDQgTpF83UvsjJwtcW
ENH+X0W+5TehY0XQdcf1m60f+rGbbUHRvZE/OGyt2mMZwzcYt9dwz+scrPWHYLcg
bLtlXzHgaD4FUYopQNejgog5DGuRTSMuxoFDPy0ZAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU8glXiv9d1WpHkImO1n9+gQ9ApgswHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzRkNGRmODI4LTg3ZDAtNDAwZS1iZWUwLTRjZDM0M2JhNDc3Ni5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAYyEkAwDQYJKoZIhvcNAQELBQADggEBAFXfC0XU9UrqNVTdiHb1Wv02ihVk
8KWc+Na+XCtVT3T1YRZRZ+EhIA1GbKrsflPhR+R6nnzhBbjaGRDrlFdqZ6e69HA3
oT9nrgQx+RnIbdFrCMoPSTNO9yo6/xrmrxm6qTdeQTPhkxzYLVje7S85XwfUgtds
vulO9wCIMVGcI8c05DzilXqrkrLvP8iEcxi2ZoWSaimmKkGzjWDzayPhCZhs+oin
DYG1B/w1yi7oxM4dHlTHMPjA4JvDdDiyNRYXWTXSFyWYvh15pWJ8DvD/2RTsK8vI
MZVM1S27kqCrRUgCrsDOcmcLrj8ogO427iQuf9Iaq2q+Dkr+5OxoWpAye5k=
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:35:31 2026 by rpki-client