Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e8982554-3ba7-40dc-8512-4f2f354e3029.roa
File:                     e8982554-3ba7-40dc-8512-4f2f354e3029.roa (raw, json)
Hash identifier:          GnUh01ZNfashFZJ0r25hhhcaAZ6HHb+uJE10tlICnAI=
Subject key identifier:   3B:5E:B6:5B:9A:3C:E6:CB:DC:0D:97:DF:98:03:44:F4:AF:1A:85:F8
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7E77D8F4E43953AF38E048AA3ECF21D2CCDC8A8B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e8982554-3ba7-40dc-8512-4f2f354e3029.roa
Signing time:             Tue 22 Jul 2025 15:01:22 +0000
ROA not before:           Tue 22 Jul 2025 15:01:22 +0000
ROA not after:            Tue 26 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        50.19.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:77:d8:f4:e4:39:53:af:38:e0:48:aa:3e:cf:21:d2:cc:dc:8a:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 22 15:01:22 2025 GMT
            Not After : Aug 26 23:59:59 2025 GMT
        Subject: serialNumber=f9682e5e993825567f554f17ffee650f44d656ca181f4f838524a785676d1bde, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:7f:d6:50:7e:a2:1a:22:a7:f4:b7:6b:f4:57:
                    d5:91:c8:39:7c:c3:e8:4f:8d:7f:60:d9:56:84:34:
                    b5:50:ba:c7:78:81:e3:d3:e2:aa:d2:1d:66:f4:65:
                    f5:da:7b:33:d8:94:2c:94:49:7a:d3:e0:b0:0f:fd:
                    11:40:5f:ba:55:10:2c:80:eb:9a:2a:1a:0f:57:7e:
                    a2:59:9a:4a:de:1f:ce:77:89:b5:ff:0a:cd:cb:a5:
                    27:59:36:03:db:6b:04:e6:8a:30:23:e2:86:d4:fd:
                    52:ab:3c:5a:18:2e:8f:fc:8e:77:12:4e:cf:bb:8a:
                    d2:20:7b:f7:bc:8f:a8:d9:c9:e7:bc:5e:e3:c4:3b:
                    b8:27:9b:4a:ad:9f:5c:bc:24:96:49:43:60:a3:ee:
                    98:ed:ab:b7:5b:48:e5:6f:8a:20:37:8d:ac:cc:e0:
                    61:a2:71:1a:4e:5b:af:f2:d5:c2:0e:06:9c:fa:ac:
                    8c:40:c2:15:0e:9b:69:8e:e7:d3:e8:e0:12:29:91:
                    ff:c3:51:3a:f8:56:c4:96:46:e8:19:af:7f:9f:19:
                    c4:66:65:1f:97:06:81:b5:f1:04:69:20:8a:6b:65:
                    8c:6a:38:b7:ff:01:4b:dd:29:37:74:3c:e6:d4:37:
                    76:54:19:6c:b2:bd:d9:0b:4e:a5:f5:d7:21:6c:39:
                    a4:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:5E:B6:5B:9A:3C:E6:CB:DC:0D:97:DF:98:03:44:F4:AF:1A:85:F8
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e8982554-3ba7-40dc-8512-4f2f354e3029.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.19.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         03:4b:7e:a6:93:32:3a:80:b4:46:be:03:5a:a4:26:21:ee:93:
         97:c1:d0:82:dc:25:da:a5:10:b6:59:e8:7c:8c:77:bd:1c:a5:
         e8:06:e0:ce:11:af:30:e5:54:ea:63:5c:cf:cf:66:54:e7:60:
         7d:73:2a:20:93:25:8f:31:b4:28:29:b7:28:82:e8:9c:2b:e1:
         b7:2c:6e:55:93:52:6d:19:e6:27:f9:58:69:ca:62:ac:d4:fc:
         cc:a7:20:2e:aa:49:f4:4b:4f:23:33:c1:d5:a1:4e:e2:a8:3b:
         dd:12:fc:71:21:e2:78:5f:fe:29:1c:4b:19:27:37:b0:58:e8:
         3e:92:f1:0d:15:5c:a8:a6:6e:7c:5a:7e:3f:ca:69:92:a6:05:
         05:86:9c:85:8f:1b:31:80:21:31:6f:6f:e5:8d:d5:87:36:29:
         f9:b8:03:6e:6c:6c:e9:7f:c1:6a:b7:5a:20:6e:6e:77:4e:1c:
         10:37:16:41:c4:b3:c0:84:31:50:36:44:dc:31:92:89:66:bd:
         0f:22:cc:76:90:dd:2a:11:7c:5a:e7:30:c2:ea:e0:f4:3e:17:
         54:7d:00:3f:7e:69:e6:96:7d:12:4a:5a:51:a8:70:2e:18:78:
         2b:7b:0a:19:af:db:ef:26:c3:bd:2b:45:ff:71:00:4b:e9:98:
         13:3e:74:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:08:35 2025 by rpki-client