Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c26c0254-1071-467d-bd2c-f81f3ba6a671.roa
File:                     c26c0254-1071-467d-bd2c-f81f3ba6a671.roa (raw, json)
Hash identifier:          EPwZ3YL6oFpiGtOgvkd/yDzt8OeNzHK2fVpqdTVSnww=
Subject key identifier:   73:CD:D1:5D:3B:D1:AC:E9:12:A1:84:E5:B4:FD:7A:F5:2D:7B:ED:89
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3166BD0562FE01746392EA54E09477E37B8E0C67
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c26c0254-1071-467d-bd2c-f81f3ba6a671.roa
Signing time:             Fri 24 Jul 2026 00:21:10 +0000
ROA not before:           Fri 24 Jul 2026 00:21:10 +0000
ROA not after:            Thu 22 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        50.19.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:66:bd:05:62:fe:01:74:63:92:ea:54:e0:94:77:e3:7b:8e:0c:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 24 00:21:10 2026 GMT
            Not After : Oct 22 23:59:59 2026 GMT
        Subject: serialNumber=b0a10c61904a95f32b3f242adb29236264b774442372cbae57240d7c07f02a2d, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c3:89:30:f0:c5:a0:34:e3:c3:78:dc:2d:93:
                    e7:01:c1:81:cd:66:98:d0:4e:eb:07:f7:b0:96:2d:
                    45:82:04:9e:8e:f5:4e:d7:1b:bf:92:f0:d9:bc:9f:
                    32:a9:65:b7:9d:dc:f3:dd:dd:ab:ff:ff:f7:22:9d:
                    37:86:8c:81:f7:e8:f4:66:0c:4f:0e:3e:b3:30:1f:
                    a5:6f:01:12:2b:4f:7b:b2:29:2a:fd:8c:5b:6d:a0:
                    da:f9:3a:c0:df:fe:60:47:95:fb:e3:f2:1c:c7:fb:
                    39:7d:32:3f:4c:ba:13:b1:64:49:7d:12:f8:ee:b0:
                    a2:3f:05:ce:4c:ec:77:7e:8d:88:44:a3:b6:46:67:
                    51:f3:52:e6:fd:e4:3e:03:34:28:50:f8:4b:76:d5:
                    e2:b4:28:61:24:22:41:46:14:e2:84:50:80:53:86:
                    bb:c4:19:0a:c2:a2:0b:31:a1:d4:2e:07:bc:ed:96:
                    f5:ba:55:3e:c8:71:db:d2:5e:5e:f4:2f:61:d1:be:
                    88:26:9c:57:1b:0e:f6:ca:38:05:fb:db:0c:2f:8f:
                    9a:03:af:8c:9b:d9:cb:74:14:32:f7:65:37:80:bf:
                    10:f2:da:bc:34:d8:82:8c:1e:a5:8c:8d:e3:26:28:
                    c3:a3:9f:b8:50:9b:1d:96:15:e5:e3:02:e5:f9:d3:
                    3a:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:CD:D1:5D:3B:D1:AC:E9:12:A1:84:E5:B4:FD:7A:F5:2D:7B:ED:89
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c26c0254-1071-467d-bd2c-f81f3ba6a671.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.19.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         8f:43:be:e8:1b:1a:a1:f9:29:89:11:62:b9:3c:96:97:8e:98:
         de:82:ab:80:42:e2:81:d3:8b:15:57:5a:60:67:43:f0:fd:fc:
         12:8e:bb:b5:85:b5:52:0f:0c:4a:59:0d:60:66:b0:85:93:2e:
         85:0d:e4:63:5c:0d:38:87:cd:b0:52:4d:20:16:d4:e7:e8:09:
         3e:ba:d8:eb:48:59:4a:3e:84:d2:4d:ea:49:fe:e8:87:33:f6:
         32:5c:1e:ae:21:6d:4e:bf:f5:7f:80:10:b3:f0:17:25:64:39:
         a4:4c:6f:b7:08:02:f8:fc:2b:70:2e:3b:00:73:8b:f6:eb:75:
         25:ab:4a:22:59:e1:d3:9e:fe:f8:21:01:31:21:19:3d:29:9d:
         b0:22:92:f1:cb:5f:cc:c4:c5:a1:69:91:be:dc:2d:76:84:5e:
         9e:34:5a:0b:b8:98:ac:ae:29:be:c7:12:37:02:8b:6a:57:6a:
         9a:65:95:81:88:f9:8f:8f:03:61:f9:13:13:a8:c0:f9:d0:b4:
         36:57:f5:a1:0f:0d:cd:b2:75:c2:4a:6f:29:f4:34:68:ad:66:
         ec:aa:37:c7:70:be:c5:35:a9:26:72:cc:ab:2e:b8:60:2c:af:
         7b:6b:d2:e8:5b:82:eb:38:18:87:9b:d4:b8:4e:ca:4d:ec:a7:
         3c:be:b5:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:51:44 2026 by rpki-client