Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8c83502f-2692-4a67-b6ad-c4531c7ffbac.roa
File:                     8c83502f-2692-4a67-b6ad-c4531c7ffbac.roa (raw, json)
Hash identifier:          IkptR5nPpiud/UxoUxmyjau4DuqqR3bnUKyWklZwbno=
Subject key identifier:   32:03:5A:B8:00:56:31:98:71:00:C4:06:47:80:BF:A6:A6:B0:AA:1D
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0446D96E59CC8259C40FEABF8D4F1D9F985B98A4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8c83502f-2692-4a67-b6ad-c4531c7ffbac.roa
Signing time:             Thu 23 Jul 2026 00:10:11 +0000
ROA not before:           Thu 23 Jul 2026 00:10:11 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        50.18.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:46:d9:6e:59:cc:82:59:c4:0f:ea:bf:8d:4f:1d:9f:98:5b:98:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 23 00:10:11 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=1871a5d27191b2604116fb59ab38e5392cad210033edc15abd0c4894e8ad44c7, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:29:46:c5:b3:2c:9a:82:69:ac:0f:9e:19:34:
                    95:53:78:ab:55:91:97:95:64:99:3d:a4:68:50:0a:
                    6e:fc:b9:f7:12:87:1a:d4:b1:28:83:22:34:31:9d:
                    06:5b:5f:95:92:1c:eb:ed:2d:08:a5:a9:fe:32:23:
                    1d:59:ed:20:24:15:f8:ff:12:43:6e:95:76:44:0d:
                    42:f3:eb:2f:fa:63:96:97:2c:e4:cc:9f:e1:6b:a6:
                    33:49:3f:ab:58:fb:63:dd:27:a2:1a:d0:5a:f7:b7:
                    c4:dd:28:db:e1:29:58:f6:27:52:ed:97:de:0c:ae:
                    57:ab:8f:6e:ec:39:45:0d:3b:d0:55:88:f5:ad:94:
                    59:66:44:d1:74:c0:9e:e9:ce:be:1f:c3:7d:83:7a:
                    55:39:41:f3:3a:61:1e:7c:72:41:7d:5d:4d:8a:b3:
                    01:62:72:eb:2d:27:f8:dd:4c:0a:b0:95:6d:0a:27:
                    fc:66:12:8d:cb:54:f9:cc:40:6d:29:73:4f:d7:55:
                    ad:1a:75:b7:e1:6b:52:cc:19:ef:1c:03:37:7d:9e:
                    19:5f:64:05:9d:18:7b:c2:67:7c:5f:2b:d7:c0:eb:
                    95:a6:50:16:28:e1:c1:68:80:84:50:f3:c1:d4:e4:
                    80:3b:a7:09:b5:1c:02:3f:15:6b:d8:30:20:8c:d7:
                    26:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:03:5A:B8:00:56:31:98:71:00:C4:06:47:80:BF:A6:A6:B0:AA:1D
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8c83502f-2692-4a67-b6ad-c4531c7ffbac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.18.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:21:51:0b:fd:ad:3e:3a:70:f6:f9:dd:6b:7d:3d:e5:0e:06:
         4e:ed:83:57:f0:29:85:ea:7b:49:26:ed:92:19:8b:15:d6:29:
         e9:18:67:d0:a6:d0:10:2f:2e:24:10:7f:00:09:5f:7e:8b:37:
         fc:da:d1:a8:3b:25:70:f6:e1:b2:32:60:c3:23:2e:c4:95:aa:
         cf:dd:00:4b:63:fa:ac:b9:9c:92:ed:df:f0:8d:cb:ea:04:d8:
         09:43:c1:ea:58:a1:b5:b1:03:1f:c6:e2:a7:1e:2a:2e:39:ea:
         d4:d4:ea:42:0f:bf:78:4f:8c:fa:05:17:80:4f:47:95:27:8c:
         f7:1e:e0:00:3c:c5:f6:f9:0e:f6:fb:5d:bc:e4:6c:34:b3:22:
         20:a4:ac:5a:41:d6:c5:37:45:8e:9e:65:9e:3b:08:b7:1d:47:
         a3:c7:5e:f2:7b:d5:58:00:42:fa:fe:3a:b0:b2:ec:11:e1:d4:
         ae:0d:35:4c:33:40:5f:42:29:3f:bf:96:1d:cc:a0:46:78:ac:
         a5:ec:f2:0f:25:63:71:55:ba:5f:00:10:bf:90:3d:cb:d1:d7:
         ae:34:69:1f:ec:56:cb:26:2d:bc:85:a3:f7:42:27:64:56:cc:
         b2:d1:b7:68:b5:c7:c6:c0:07:08:03:b7:25:ed:32:8e:93:96:
         2f:ba:31:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:54:11 2026 by rpki-client