Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f20b22c4-1b25-4b12-94c2-81fda3225593.roa
File:                     f20b22c4-1b25-4b12-94c2-81fda3225593.roa (raw, json)
Hash identifier:          YoaPDjdr7q/d4lwZezARamX9S/B7mwp+3p0sbhXAZmY=
Subject key identifier:   70:FB:E0:29:8C:F1:9B:24:30:95:3D:EF:7A:F4:45:AD:9C:33:CA:DD
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3EE17BAD248C0951A68DA32395817F1B18F09425
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f20b22c4-1b25-4b12-94c2-81fda3225593.roa
Signing time:             Fri 13 Feb 2026 00:50:42 +0000
ROA not before:           Fri 13 Feb 2026 00:50:42 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        50.19.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:e1:7b:ad:24:8c:09:51:a6:8d:a3:23:95:81:7f:1b:18:f0:94:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 13 00:50:42 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=fda3f86871e710407b7f35787dc0b71c96b714c275d6ac5b516d232819f373b5, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:96:fc:3b:b6:84:aa:8d:83:b4:eb:f4:b5:4a:
                    92:5f:03:16:8b:4c:e0:b7:6a:5f:aa:ea:6a:1e:20:
                    c5:1f:62:fe:80:d3:8c:e9:f4:20:ba:fc:78:c2:8c:
                    a8:44:1b:21:e4:cb:ac:55:6c:a0:dd:b8:39:06:51:
                    53:4d:a2:16:50:87:ca:92:19:e1:8b:2d:f4:a1:e8:
                    9c:68:fb:da:4b:de:7e:f2:cd:c4:4f:27:50:c7:64:
                    ff:fa:f7:d2:5d:c0:b1:71:1f:54:cc:23:09:d0:9f:
                    fa:ec:eb:23:9f:b2:21:b4:57:51:f7:d4:ec:4a:e2:
                    68:eb:78:7c:da:a8:57:5d:07:78:c9:52:d2:b6:38:
                    38:39:81:88:20:df:fb:b3:0b:4b:5f:95:2d:79:2b:
                    35:d1:c7:18:4c:3a:06:60:cb:68:b6:d1:59:65:5a:
                    03:83:89:f4:f7:ff:0e:72:4c:e5:57:c5:fa:1a:20:
                    33:c0:5e:23:42:f4:9d:6d:27:1e:49:e4:65:b8:4f:
                    25:40:95:cf:d2:64:fa:42:6d:44:d3:93:9c:a4:b7:
                    3a:ed:bf:5e:56:c0:ee:4d:d7:c4:62:12:bc:95:c2:
                    74:fc:9f:18:35:5a:bb:8f:9d:6b:89:1b:10:55:93:
                    76:21:c5:29:0b:5b:f4:53:26:14:91:b4:0d:f4:3d:
                    eb:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:FB:E0:29:8C:F1:9B:24:30:95:3D:EF:7A:F4:45:AD:9C:33:CA:DD
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f20b22c4-1b25-4b12-94c2-81fda3225593.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.19.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         18:22:0b:5e:54:4e:e9:aa:4f:58:dd:d0:12:ab:5a:92:ad:b7:
         6a:f3:26:d9:f3:14:6e:d5:8d:5c:7f:ec:25:83:69:e5:df:a4:
         cb:7b:26:ce:39:06:40:f7:d4:ac:bf:e7:98:91:45:a9:59:92:
         7c:c3:4c:7f:86:b9:01:b2:de:b8:a4:9f:64:a8:35:be:32:03:
         ac:89:fe:b2:24:47:8f:62:29:5e:d2:d1:40:c1:13:11:2d:03:
         05:00:1f:ac:40:c7:74:ce:c6:5f:85:40:3a:fe:7d:19:d1:c8:
         9b:89:36:58:eb:60:7c:ae:fa:c6:5f:77:05:74:2e:b9:bd:93:
         41:b3:78:f1:24:c7:a7:67:03:e6:e1:23:33:c7:e1:be:08:db:
         53:47:5d:d7:e5:c0:ec:b4:ec:fb:05:01:d9:b1:09:ca:9b:5e:
         15:ce:5d:e7:3b:9b:8e:26:a6:e2:63:e8:82:c1:f2:54:f1:9d:
         6c:40:d0:fe:93:c6:9d:2d:95:c1:68:3e:ca:2c:02:c5:45:04:
         02:8f:30:32:0c:f9:9e:62:8a:14:89:82:0a:1d:ea:54:f9:c7:
         f1:0c:ec:d2:a7:a7:05:11:55:d8:b1:a6:62:11:69:e9:77:12:
         2f:d9:f2:d2:3f:13:bf:da:ad:1b:93:9c:e8:64:ea:b6:b4:b3:
         b2:cb:55:09
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUPuF7rSSMCVGmjaMjlYF/GxjwlCUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjEzMDA1MDQyWhcNMjYwNTE0MjM1OTU5
WjB6MUkwRwYDVQQFE0BmZGEzZjg2ODcxZTcxMDQwN2I3ZjM1Nzg3ZGMwYjcxYzk2
YjcxNGMyNzVkNmFjNWI1MTZkMjMyODE5ZjM3M2I1MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC+lvw7toSqjYO06/S1SpJfAxaLTOC3al+q6moeIMUfYv6A
04zp9CC6/HjCjKhEGyHky6xVbKDduDkGUVNNohZQh8qSGeGLLfSh6Jxo+9pL3n7y
zcRPJ1DHZP/699JdwLFxH1TMIwnQn/rs6yOfsiG0V1H31OxK4mjreHzaqFddB3jJ
UtK2ODg5gYgg3/uzC0tflS15KzXRxxhMOgZgy2i20VllWgODifT3/w5yTOVXxfoa
IDPAXiNC9J1tJx5J5GW4TyVAlc/SZPpCbUTTk5yktzrtv15WwO5N18RiEryVwnT8
nxg1WruPnWuJGxBVk3YhxSkLW/RTJhSRtA30PesZAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUcPvgKYzxmyQwlT3vevRFrZwzyt0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2YyMGIyMmM0LTFiMjUtNGIxMi05NGMyLTgxZmRhMzIyNTU5My5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAUyE2AwDQYJKoZIhvcNAQELBQADggEBABgiC15UTumqT1jd0BKrWpKtt2rz
JtnzFG7VjVx/7CWDaeXfpMt7Js45BkD31Ky/55iRRalZknzDTH+GuQGy3rikn2So
Nb4yA6yJ/rIkR49iKV7S0UDBExEtAwUAH6xAx3TOxl+FQDr+fRnRyJuJNljrYHyu
+sZfdwV0Lrm9k0GzePEkx6dnA+bhIzPH4b4I21NHXdflwOy07PsFAdmxCcqbXhXO
Xec7m44mpuJj6ILB8lTxnWxA0P6Txp0tlcFoPsosAsVFBAKPMDIM+Z5iihSJggod
6lT5x/EM7NKnpwURVdixpmIRael3Ei/Z8tI/E7/arRuTnOhk6ra0s7LLVQk=
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:16:12 2026 by rpki-client