Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/f77092a1-256a-4452-84c4-0af25699a382.roa
File:                     f77092a1-256a-4452-84c4-0af25699a382.roa (raw, json)
Hash identifier:          j+iaToW4jvbMQZoJS1vIoG5oZKCOTkrxj8zK1sERrPo=
Subject key identifier:   C5:80:4A:86:BA:E3:E2:88:7A:3C:C5:E1:BC:BF:DA:91:C7:AF:91:8A
Certificate issuer:       /CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3
Certificate serial:       40C7B0DA083EFBD2DE00E890D9779E9EB2141B10
Authority key identifier: 91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/f77092a1-256a-4452-84c4-0af25699a382.roa
Signing time:             Tue 19 May 2026 00:50:24 +0000
ROA not before:           Tue 19 May 2026 00:50:24 +0000
ROA not after:            Mon 17 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        50.112.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/7188ac24-09cc-4f20-9dbd-cd9005d2797e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/7188ac24-09cc-4f20-9dbd-cd9005d2797e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:c7:b0:da:08:3e:fb:d2:de:00:e8:90:d9:77:9e:9e:b2:14:1b:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3
        Validity
            Not Before: May 19 00:50:24 2026 GMT
            Not After : Aug 17 23:59:59 2026 GMT
        Subject: serialNumber=bdcfb54adb4d674fa0d0c6e21237c9fc587e2a266caaf658f3934644fdc1beb8, CN=ddfbc97c-7bed-40df-95ca-e664b29d7b27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:36:da:6d:47:e2:78:ef:47:f2:51:d8:e1:14:
                    e6:02:68:e5:b0:b1:59:92:db:da:73:78:a4:49:b7:
                    6b:6d:9d:7e:28:c6:3f:87:87:1e:c0:b9:c5:1b:5c:
                    c3:e7:f2:cf:26:57:05:91:a8:80:4f:e5:3f:bc:be:
                    ee:e9:4f:94:03:9d:2e:02:ee:4e:1a:08:cd:77:59:
                    3a:64:9f:91:27:d3:0d:c3:5d:77:ae:31:da:fe:28:
                    86:d9:11:fd:db:42:a0:ca:3d:7b:73:e0:c9:17:b2:
                    0f:9d:55:aa:3b:93:0f:4a:00:26:d4:1a:cb:73:c7:
                    03:79:99:8c:94:13:7d:35:6b:27:08:9a:59:05:d2:
                    66:d8:61:95:6b:aa:f9:43:3b:74:0a:36:ed:90:d9:
                    df:ca:4e:24:c2:71:fe:9e:bd:1e:5c:cd:7a:02:46:
                    db:f8:fe:a5:e6:19:cf:d0:1f:a6:d1:27:9e:36:6b:
                    ee:c9:30:d8:16:4f:80:6e:78:ab:20:42:50:8a:b6:
                    83:98:9d:86:9b:b4:ff:79:be:be:39:cf:1f:ab:70:
                    d1:00:13:cc:5f:20:f4:87:5d:66:3d:57:3a:cb:84:
                    8c:34:1b:16:8c:79:71:af:ea:68:36:81:a0:9b:40:
                    8b:00:3c:8d:8f:36:31:f2:bc:3a:b8:f6:10:ae:ab:
                    fe:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:80:4A:86:BA:E3:E2:88:7A:3C:C5:E1:BC:BF:DA:91:C7:AF:91:8A
            X509v3 Authority Key Identifier:
                keyid:91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/f77092a1-256a-4452-84c4-0af25699a382.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.112.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         47:f0:fa:9a:33:8f:b5:1b:8b:4d:dc:ad:ba:01:66:0d:7e:4c:
         d5:ca:da:20:2f:e2:b0:b1:ea:51:73:ad:c1:7f:54:a4:99:1d:
         8f:b8:3d:98:9d:3a:5b:5d:a6:dd:f9:05:21:53:c4:10:c6:b6:
         8e:59:76:ba:9c:66:71:11:49:44:59:8e:bb:99:8b:2a:5d:d3:
         b4:a1:d4:22:ef:0e:f9:ad:c9:69:0b:9e:71:02:3e:c8:6d:25:
         81:8a:60:47:e4:51:92:6a:e8:37:92:dc:08:9f:c6:3c:b3:27:
         d4:4c:fc:2c:8e:ea:a4:43:8c:2d:24:58:e2:0d:07:a9:ca:33:
         5b:f7:c1:b6:fa:c0:25:6e:32:36:fb:09:c9:0f:53:ac:71:89:
         c7:e9:4d:2e:59:7e:19:be:c6:09:e8:f4:6f:fe:91:72:03:cb:
         b5:3a:7e:14:f8:3f:ce:6e:61:ea:1b:06:6c:26:d2:a5:15:50:
         7b:94:34:f5:89:1e:11:a4:75:fd:80:4f:39:6a:8a:d4:af:7d:
         f0:88:62:0f:68:00:6a:7b:fe:3b:6e:a6:41:01:1e:b9:bc:48:
         36:3c:ae:ec:8c:d3:71:cd:9b:62:51:f6:db:ae:62:90:c6:48:
         55:aa:1b:c3:0d:b0:fc:b4:0c:ae:59:e3:64:a8:92:d6:39:73:
         ba:c0:44:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:39:22 2026 by rpki-client