Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c26c0254-1071-467d-bd2c-f81f3ba6a671.roa
File:                     c26c0254-1071-467d-bd2c-f81f3ba6a671.roa (raw, json)
Hash identifier:          wftWrA7CLrH+EJ+x8bIBzhfUn6SBuRIIgdX+i2YAht4=
Subject key identifier:   19:2D:FF:CF:C1:3B:35:FC:6E:99:A2:13:9D:E1:7C:64:8B:08:24:CF
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7C45947B55413E2FEBB2CCE9A70E351CCCE31FFB
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c26c0254-1071-467d-bd2c-f81f3ba6a671.roa
Signing time:             Mon 12 Oct 2026 00:20:08 +0000
ROA not before:           Mon 12 Oct 2026 00:20:08 +0000
ROA not after:            Sun 10 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        50.19.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Nov 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:45:94:7b:55:41:3e:2f:eb:b2:cc:e9:a7:0e:35:1c:cc:e3:1f:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 12 00:20:08 2026 GMT
            Not After : Jan 10 23:59:59 2027 GMT
        Subject: serialNumber=dd03c4d68ea66f9ae236e2c409dc33405aa1eded7cbc4397f4790e3e563f110e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e9:c6:18:5a:db:68:32:83:18:8c:ed:6c:5c:
                    43:82:93:66:1a:b1:7c:f2:e9:fb:f0:55:3e:08:56:
                    55:ae:39:ef:9d:6e:ab:ff:f9:10:7b:70:b1:31:c2:
                    6e:25:f2:33:0e:5c:3b:87:b2:e2:66:bf:b3:88:a1:
                    a7:fa:ed:b9:e1:fd:e1:f6:5c:97:f0:9a:2c:3c:25:
                    1d:5e:14:66:f4:f5:3d:1f:04:8e:7f:11:fd:cc:cf:
                    fe:67:51:70:23:95:fc:6d:29:bd:c4:df:34:f4:6d:
                    e3:98:6a:ad:2a:5b:a6:02:94:62:a5:54:aa:ac:c2:
                    77:18:dd:c7:28:a4:56:2d:c2:2e:d6:e7:db:67:6f:
                    c0:64:52:a0:04:95:a2:40:be:2c:9f:9d:b2:8e:fe:
                    f3:8f:2b:ec:a0:a6:89:95:64:5a:f8:8c:bf:62:82:
                    20:86:4f:fa:dc:6b:d6:40:ae:e9:cf:0a:97:b1:88:
                    46:c1:66:7a:e1:d3:db:ee:bf:91:38:1c:58:d7:da:
                    23:b6:82:9e:2c:91:c4:16:a0:44:9d:c3:f5:56:83:
                    a3:99:2a:1c:b5:5b:64:26:56:dd:08:95:58:43:c5:
                    a3:10:cb:23:5c:c2:59:b2:5d:2c:ab:e0:56:21:32:
                    5c:71:28:ca:d1:24:6e:03:29:f5:57:38:6f:06:36:
                    51:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:2D:FF:CF:C1:3B:35:FC:6E:99:A2:13:9D:E1:7C:64:8B:08:24:CF
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c26c0254-1071-467d-bd2c-f81f3ba6a671.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.19.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         6d:08:4e:6d:29:f8:42:e6:c9:dd:8e:e1:3b:71:23:89:38:97:
         c0:9b:55:92:a9:e3:e7:de:66:31:da:f8:70:dd:22:82:13:0c:
         11:3e:21:02:38:44:f3:e0:13:af:9e:55:bf:14:96:77:db:de:
         b0:39:4c:3e:3a:00:f8:aa:68:26:5c:2e:4b:b7:fc:09:e3:8a:
         35:b3:a6:d4:e4:68:34:53:66:b1:65:b2:bd:b2:4f:cf:1c:97:
         64:6d:38:84:e0:b4:9c:8f:84:b3:d8:86:84:e2:1b:25:b7:a1:
         49:3e:a2:c5:de:4f:bb:e6:15:48:81:c8:d0:ab:f8:81:06:21:
         7b:cf:5d:1b:2d:e2:77:33:4b:07:19:12:e8:c0:ac:f8:f8:f9:
         fe:7f:12:ac:81:00:c1:80:5c:10:9c:01:ea:2b:f1:6f:a5:9f:
         2d:65:1f:32:fa:03:1e:94:cf:59:52:93:7a:fc:7e:a3:34:0a:
         43:65:40:e0:73:58:be:14:ca:c2:33:75:52:f4:15:89:8f:e5:
         e3:0e:f2:a9:90:ab:33:68:12:11:70:d0:4f:a3:69:ed:7f:0b:
         a1:61:c3:f0:c8:f6:21:9b:e4:e7:80:ca:6f:2d:08:cb:fc:11:
         f7:d1:9e:20:25:26:9a:1e:c3:22:35:b9:35:39:ce:f4:f8:31:
         df:ca:0a:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 19:28:09 2026 by rpki-client