Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c96c7d16-98f4-430b-900c-b555bb1ceb1f.roa
File:                     c96c7d16-98f4-430b-900c-b555bb1ceb1f.roa (raw, json)
Hash identifier:          gDuVh/B9WQBM40SkuR5tSDfAkdwJM+zYC5mYaAv0FyQ=
Subject key identifier:   7D:B3:57:AD:EF:81:4B:F2:56:F3:48:CD:01:E0:3A:53:C9:A2:BF:4A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3AB0BB15FCB3CCDCBEE0F0C5C8E648B36DC91BBB
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c96c7d16-98f4-430b-900c-b555bb1ceb1f.roa
Signing time:             Thu 23 Jul 2026 00:10:03 +0000
ROA not before:           Thu 23 Jul 2026 00:10:03 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        50.18.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:b0:bb:15:fc:b3:cc:dc:be:e0:f0:c5:c8:e6:48:b3:6d:c9:1b:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 23 00:10:03 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=5da702a4bb4d8663a6e71e194a73b68a6e7c343e60e6e6dc2956fa5421a62249, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:fd:43:4a:e0:90:0a:cd:ff:d8:a8:3e:07:56:
                    70:06:c8:d8:27:bd:01:67:be:39:48:7d:10:57:e9:
                    d2:f1:46:d8:5d:ce:c7:54:3b:b9:95:2f:7e:af:68:
                    b3:a0:d3:06:b3:ca:f9:2a:34:f4:4b:3f:3a:c3:ce:
                    10:d1:9a:5c:17:2d:40:82:93:42:d2:0e:c7:1a:99:
                    c8:54:55:5c:48:c4:80:33:f8:92:70:fb:49:f0:d2:
                    b5:f7:6a:5e:0e:2b:7c:08:b4:5d:00:df:d7:cf:93:
                    61:a8:40:02:d1:84:8c:a7:e8:24:ca:b1:55:c7:8a:
                    a5:1e:bd:3f:4d:23:42:fd:f6:71:53:f8:00:0e:88:
                    c8:bd:b1:0e:ee:c1:ac:c5:d3:3d:9a:87:7b:a2:fd:
                    0e:09:46:8d:0f:f1:ed:20:56:79:ea:07:47:f8:98:
                    1f:37:87:0b:99:38:2e:01:00:c7:ee:b6:5f:b2:c0:
                    7f:04:d2:78:79:24:b8:52:8c:63:2f:de:85:12:d0:
                    22:75:bd:1c:85:d9:b7:97:be:3b:4f:69:9a:c3:db:
                    b0:19:41:1f:c3:d1:89:65:8e:9e:8f:52:d8:14:87:
                    f5:20:4e:74:11:5a:91:ed:4d:65:9c:80:ca:2b:c6:
                    05:ba:57:3b:41:7c:a7:7f:17:56:d7:d8:92:9a:ed:
                    27:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:B3:57:AD:EF:81:4B:F2:56:F3:48:CD:01:E0:3A:53:C9:A2:BF:4A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c96c7d16-98f4-430b-900c-b555bb1ceb1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.18.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         a8:1f:c7:6a:97:1b:47:8d:0f:10:6e:dd:e3:07:4f:be:8d:c1:
         ee:3c:cd:ec:8d:da:79:38:4d:dc:70:e5:4b:f0:f3:ef:60:55:
         59:63:c0:e6:31:23:81:ae:fc:97:ee:e4:25:97:58:21:c6:9e:
         3d:da:49:0e:7b:a3:12:41:12:bb:a5:73:97:80:dd:e7:55:6a:
         83:a8:50:64:30:4a:45:77:4a:d7:e7:33:89:c1:88:c2:fe:dd:
         88:2c:7d:24:96:04:6e:f6:9c:55:d4:ba:d9:c6:39:64:34:9e:
         ff:9d:61:18:c8:48:7e:79:ce:27:62:ec:10:39:0b:66:5c:15:
         05:00:f5:7e:dd:16:02:2a:2a:2e:53:50:ac:5c:90:94:9e:96:
         22:d3:98:c8:eb:0e:31:a9:32:61:00:93:d4:1d:65:ca:51:7c:
         e8:c7:5b:b4:7d:93:07:61:03:33:98:a1:c7:3f:18:73:01:97:
         13:55:2b:92:09:c2:bf:28:ff:92:c8:97:61:e5:37:31:80:73:
         44:0c:17:d6:d8:0b:48:83:30:a1:51:f4:f9:45:7e:fa:a8:37:
         04:ca:10:0a:55:94:a7:4a:b5:ec:b4:32:cf:0f:ca:a5:e6:7d:
         60:38:7d:a5:b2:23:2e:2e:b4:4b:f0:ae:94:f2:22:cd:54:ca:
         0b:6a:8d:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:27:09 2026 by rpki-client