Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1e69f979-9607-4a08-8a0d-452152dc637f.roa
File:                     1e69f979-9607-4a08-8a0d-452152dc637f.roa (raw, json)
Hash identifier:          SsaWZsokBnE615ZlA9Gbr/fAE/0y7yrDA9jLWE1RnqA=
Subject key identifier:   C5:2A:04:22:B2:43:79:14:EA:9F:49:69:1D:3B:C0:33:50:A4:34:8A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7731DB20CD3BCBD3CEB5F61F507A75D680C2C28C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1e69f979-9607-4a08-8a0d-452152dc637f.roa
Signing time:             Thu 23 Jul 2026 00:51:10 +0000
ROA not before:           Thu 23 Jul 2026 00:51:10 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        50.19.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:31:db:20:cd:3b:cb:d3:ce:b5:f6:1f:50:7a:75:d6:80:c2:c2:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 23 00:51:10 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=671a4b318fd8b912fd9b7333623228f86f6fab419e6e555fd6bfbdfcb9c4d415, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:0d:4a:dd:78:44:b8:cf:dc:4c:54:07:fa:26:
                    b9:c6:d3:18:10:d1:4f:b8:c1:1f:13:6d:c8:e9:de:
                    4b:bc:d3:52:81:62:1d:b4:3e:73:30:38:5a:94:89:
                    18:6b:2b:55:28:ca:cb:79:86:53:3f:ef:71:ca:8b:
                    20:06:71:6a:1c:34:fd:62:c4:cd:21:09:ef:b8:17:
                    7f:88:84:95:68:2b:7b:60:2c:d7:b9:a6:fc:51:56:
                    3d:95:cb:21:02:6c:cb:8f:6d:39:8d:49:bb:90:b9:
                    84:ad:23:6e:c9:20:2b:24:b7:d0:64:b5:13:02:3b:
                    fe:60:0e:22:99:8b:8d:2d:df:de:da:f5:bb:51:c4:
                    c7:d2:ec:e3:e3:2d:fe:62:69:9c:d3:fa:2c:7b:23:
                    20:16:d5:b0:0e:88:28:43:97:11:b6:b5:b4:f1:e3:
                    13:3f:52:7d:4e:a4:d1:82:6c:8d:b4:77:ab:4d:2e:
                    8b:ab:2c:f3:1a:ec:13:7b:71:70:59:be:ca:86:f9:
                    cb:5b:26:ea:2b:b2:cd:50:20:53:cf:0d:73:dc:6d:
                    64:37:52:d2:06:a2:1e:be:57:68:7d:cf:7b:f7:8a:
                    b3:ab:44:8e:e5:2d:58:54:87:2b:af:94:03:ce:7f:
                    ec:7b:68:62:b4:fa:70:f4:ca:79:98:d9:a7:0d:a6:
                    f1:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:2A:04:22:B2:43:79:14:EA:9F:49:69:1D:3B:C0:33:50:A4:34:8A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1e69f979-9607-4a08-8a0d-452152dc637f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.19.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         3b:81:7f:13:fc:94:d8:59:17:62:99:20:06:9a:59:e5:af:b7:
         48:d6:92:4f:be:7c:01:d6:34:c6:a6:24:3d:07:11:75:28:f9:
         68:95:bc:d9:a6:72:64:0d:a1:91:4d:81:e8:68:56:53:94:40:
         38:c6:c6:c7:bd:8d:d1:1f:24:33:85:a2:21:4e:89:1f:d4:f2:
         43:f2:c9:66:82:1e:cc:60:db:da:5f:70:ee:2f:47:1e:1a:b8:
         62:38:0f:d5:6b:86:01:c3:97:10:18:d8:8d:1d:7e:3e:75:dc:
         9b:cb:eb:8b:21:29:6d:7e:2d:16:f8:f2:3e:d2:a3:0c:4c:17:
         49:bb:90:c0:3c:d7:b0:32:1f:dc:ab:07:55:2e:84:bf:8e:76:
         bc:a4:d2:01:04:7a:3d:3b:09:28:46:7b:1b:f6:8c:91:c8:18:
         98:86:0c:22:fd:ac:72:21:36:1c:1f:93:55:75:a3:dd:3a:65:
         c1:32:15:d1:df:86:fd:fc:93:f3:7c:e4:02:f2:b0:4b:e7:be:
         ac:0c:ab:d9:1c:5f:be:9f:42:0e:2d:8d:4c:20:4f:ed:98:13:
         1e:4f:2d:e5:a7:3c:d9:29:1b:51:35:5b:ac:0c:23:0c:95:4b:
         16:50:a6:eb:ba:5b:32:f1:06:d5:e0:c1:9a:29:cd:70:e5:94:
         ba:5e:0f:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:43:39 2026 by rpki-client