Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ef2f6be0-409a-40c4-a7ea-d07d8ff48a64.roa
File:                     ef2f6be0-409a-40c4-a7ea-d07d8ff48a64.roa (raw, json)
Hash identifier:          7YuxwGsCPsmtQ33KwvMxTs6FcRW+xs57fMqLLXk1xFA=
Subject key identifier:   82:08:65:30:9B:70:7B:BB:2A:6A:B6:2D:0F:36:86:ED:A0:5F:08:E3
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0F9ABFA36B2A2F407677EC426ACA1D7C11D45C6D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ef2f6be0-409a-40c4-a7ea-d07d8ff48a64.roa
Signing time:             Sat 16 Aug 2025 00:50:21 +0000
ROA not before:           Sat 16 Aug 2025 00:50:21 +0000
ROA not after:            Sat 20 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        50.19.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:9a:bf:a3:6b:2a:2f:40:76:77:ec:42:6a:ca:1d:7c:11:d4:5c:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug 16 00:50:21 2025 GMT
            Not After : Sep 20 23:59:59 2025 GMT
        Subject: serialNumber=b801b3ed87b5e2086e420997656d4d6c31f7a2b88b649478fa7725ea55a9d17a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:8f:5d:95:52:24:04:bb:cc:6f:4b:b6:83:97:
                    67:c3:00:ae:67:ad:f7:b9:24:83:31:55:88:c3:d5:
                    83:ca:83:d3:d9:ff:de:89:08:86:f9:6f:48:ea:48:
                    61:09:fe:10:bb:73:f8:47:83:2c:40:74:bf:6a:01:
                    db:2c:51:e3:26:dc:60:22:55:29:be:3c:65:00:92:
                    d1:08:9f:ad:de:28:41:e2:0e:b5:3c:a3:47:93:22:
                    2f:ca:30:7d:77:41:d6:ad:7b:66:19:6d:fb:17:d4:
                    e3:b1:e5:be:47:88:b2:23:8b:2d:0b:5c:40:b9:41:
                    c0:7a:70:6c:a3:c3:d9:83:36:27:34:d6:c8:1f:3c:
                    29:11:b5:1c:88:89:47:1d:59:cf:4c:73:8f:9e:0d:
                    f6:2f:1a:06:26:ea:61:df:05:31:d8:27:f0:b0:11:
                    49:dd:fd:8c:ba:bc:1d:4f:bc:12:7a:1e:a4:de:95:
                    6e:d8:93:e7:54:e1:f6:56:9a:7f:75:c1:17:76:d2:
                    d4:6f:6c:85:5c:f5:54:01:1e:78:95:99:5a:33:63:
                    43:45:32:9d:95:84:36:2d:27:b4:47:a9:0f:29:a7:
                    0c:1e:7e:66:d3:b3:3f:c7:3c:89:82:ae:10:c5:33:
                    b4:84:4b:18:b2:e4:3f:35:d3:f9:b9:0f:34:83:67:
                    d1:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:08:65:30:9B:70:7B:BB:2A:6A:B6:2D:0F:36:86:ED:A0:5F:08:E3
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ef2f6be0-409a-40c4-a7ea-d07d8ff48a64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.19.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         12:73:c4:2a:a0:26:b2:33:a3:fa:82:a9:38:ac:39:82:31:98:
         b0:8f:45:d0:48:21:4d:43:ea:8d:72:b9:4a:2c:09:35:ad:41:
         0d:22:5f:6f:08:58:54:0d:cd:3c:9e:a2:f6:98:9e:47:32:ee:
         89:c8:a2:f8:3d:27:2b:56:ca:3f:a9:21:18:0a:2d:36:6b:87:
         95:00:82:e4:43:83:8e:1c:53:36:e9:0b:e8:28:f1:f5:35:e1:
         8f:b7:0c:9b:7e:5a:13:bd:2a:88:04:26:b7:f2:06:5e:fc:0f:
         b7:b2:db:df:89:2c:91:6f:9d:34:b4:3b:f1:cf:4e:63:48:70:
         fc:c7:00:4f:39:22:48:69:44:59:9b:bf:f5:92:32:02:ba:a1:
         e3:bb:f9:fb:9b:c4:da:38:86:4f:d4:a3:6b:4c:28:33:6b:65:
         d9:92:14:99:ac:61:8f:98:01:bb:5e:de:81:f7:d5:d8:d5:ea:
         8e:96:20:df:21:87:50:eb:57:a4:57:da:9a:46:e0:f8:a2:6a:
         53:3e:a0:b6:70:cf:1c:dd:c4:61:25:a6:76:e8:1a:13:5e:da:
         21:e7:10:ea:61:53:bc:db:3a:67:d0:29:36:86:2a:3d:46:99:
         48:80:e4:40:2d:9f:8c:72:6b:7e:4a:2e:d0:c2:5f:91:4b:41:
         18:8f:fe:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 06:40:09 2025 by rpki-client