Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6a23c679-6872-4f52-ace3-b8c4e3fbc8c4.roa
File:                     6a23c679-6872-4f52-ace3-b8c4e3fbc8c4.roa (raw, json)
Hash identifier:          M97W3FQoXu0JxZvqNxlqA8pj/xAxdwr7L/H/8HUsIzU=
Subject key identifier:   63:AE:0F:04:58:9A:09:A2:7F:23:CC:38:34:FB:58:39:7C:82:53:AF
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4F1675ECF85513B74A33F757ACF93865F85FB9EA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6a23c679-6872-4f52-ace3-b8c4e3fbc8c4.roa
Signing time:             Tue 22 Jul 2025 15:01:26 +0000
ROA not before:           Tue 22 Jul 2025 15:01:26 +0000
ROA not after:            Tue 26 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        50.19.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:16:75:ec:f8:55:13:b7:4a:33:f7:57:ac:f9:38:65:f8:5f:b9:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 22 15:01:26 2025 GMT
            Not After : Aug 26 23:59:59 2025 GMT
        Subject: serialNumber=1bf019c57051c7d05c807ddf14331dfb2d088369f1407428e5c2f534df491e29, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:78:8d:91:b1:e7:1e:27:e7:86:c4:62:97:e7:
                    69:db:4b:3b:18:99:3d:51:5c:6f:6e:f3:d5:80:ce:
                    c8:75:37:0d:5f:bd:d1:1f:fe:8e:0d:6a:49:9b:0f:
                    25:59:0f:47:0e:0d:02:c7:ce:38:02:2f:a9:a6:e4:
                    44:33:58:98:fa:66:48:ca:0d:23:96:67:fb:d7:d6:
                    4c:36:c3:c1:cb:06:b5:88:6b:47:be:1b:59:63:ac:
                    98:7e:ce:8f:64:90:29:44:cb:09:02:6a:95:14:9a:
                    2d:88:19:16:03:f3:78:28:47:47:28:0d:33:cb:34:
                    b8:5c:98:ed:5e:14:43:2f:27:43:dc:6e:eb:96:62:
                    65:cd:eb:7a:4f:3d:34:0b:e6:4f:65:5a:91:57:2a:
                    7e:ba:27:0c:0e:c5:05:f9:c9:e2:8e:51:ee:90:f0:
                    5c:80:eb:11:cb:42:9f:9b:5d:36:77:cc:d3:b1:f1:
                    1c:12:10:d1:a6:db:e9:1d:85:b3:d7:83:9e:5a:0b:
                    90:2f:ec:cc:44:7d:a6:6d:fb:8e:13:4e:b2:6e:3f:
                    c0:a3:a5:92:3f:ce:01:8c:00:2e:6b:7e:6c:9a:22:
                    21:ad:05:fb:fc:f6:de:f5:1c:32:d9:d4:12:03:fa:
                    c6:5a:92:05:96:93:d6:a1:8d:98:b3:91:f2:78:08:
                    75:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:AE:0F:04:58:9A:09:A2:7F:23:CC:38:34:FB:58:39:7C:82:53:AF
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6a23c679-6872-4f52-ace3-b8c4e3fbc8c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.19.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         b9:4e:7d:2b:7f:04:cd:7f:26:57:d2:9d:e3:4e:3d:da:1d:61:
         a5:06:b8:33:3e:de:3e:3d:d3:4d:d9:29:1c:69:07:f4:62:40:
         16:05:28:5b:0b:ac:f2:9d:32:1b:cf:c3:ac:58:25:63:ac:27:
         e4:5d:32:3e:99:28:18:07:8d:7b:36:f3:f4:d4:90:41:6e:a0:
         5d:d9:47:73:6e:dd:2c:5c:0d:df:cc:68:32:54:76:f8:5b:b3:
         e4:00:de:78:7b:2b:2c:7a:19:cb:18:b8:d7:27:f0:df:99:fc:
         1a:a3:f4:56:6c:c2:6e:f7:14:95:49:20:e0:8a:4a:8a:b7:bc:
         88:e0:5d:8b:ae:b7:ee:2c:2b:9c:7e:0f:15:2a:2f:19:4e:4b:
         fb:92:e3:83:63:22:99:b4:cd:85:2a:f2:e3:2a:67:00:6d:41:
         13:b8:61:f8:9d:ac:49:e3:b2:35:bd:3a:fd:a5:97:e8:3f:2e:
         2d:00:ca:44:fe:c4:16:a8:61:8d:ac:a9:57:27:1c:24:68:2e:
         d4:27:37:71:00:d8:22:92:f4:82:ed:26:c4:13:30:0d:78:44:
         3b:ab:f2:22:ac:bf:33:6f:c4:5e:91:ac:28:18:5d:7f:1a:8e:
         79:be:22:c5:db:ac:b1:a3:97:5c:aa:0b:35:80:80:3f:42:69:
         e4:5f:48:c0
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUTxZ17PhVE7dKM/dXrPk4ZfhfueowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzIyMTUwMTI2WhcNMjUwODI2MjM1OTU5
WjB6MUkwRwYDVQQFE0AxYmYwMTljNTcwNTFjN2QwNWM4MDdkZGYxNDMzMWRmYjJk
MDg4MzY5ZjE0MDc0MjhlNWMyZjUzNGRmNDkxZTI5MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDVeI2RseceJ+eGxGKX52nbSzsYmT1RXG9u89WAzsh1Nw1f
vdEf/o4NakmbDyVZD0cODQLHzjgCL6mm5EQzWJj6ZkjKDSOWZ/vX1kw2w8HLBrWI
a0e+G1ljrJh+zo9kkClEywkCapUUmi2IGRYD83goR0coDTPLNLhcmO1eFEMvJ0Pc
buuWYmXN63pPPTQL5k9lWpFXKn66JwwOxQX5yeKOUe6Q8FyA6xHLQp+bXTZ3zNOx
8RwSENGm2+kdhbPXg55aC5Av7MxEfaZt+44TTrJuP8CjpZI/zgGMAC5rfmyaIiGt
Bfv89t71HDLZ1BID+sZakgWWk9ahjZizkfJ4CHUdAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUY64PBFiaCaJ/I8w4NPtYOXyCU68wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzZhMjNjNjc5LTY4NzItNGY1Mi1hY2UzLWI4YzRlM2ZiYzhjNC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAYyEwAwDQYJKoZIhvcNAQELBQADggEBALlOfSt/BM1/JlfSneNOPdodYaUG
uDM+3j49003ZKRxpB/RiQBYFKFsLrPKdMhvPw6xYJWOsJ+RdMj6ZKBgHjXs28/TU
kEFuoF3ZR3Nu3SxcDd/MaDJUdvhbs+QA3nh7Kyx6GcsYuNcn8N+Z/Bqj9FZswm73
FJVJIOCKSoq3vIjgXYuut+4sK5x+DxUqLxlOS/uS44NjIpm0zYUq8uMqZwBtQRO4
YfidrEnjsjW9Ov2ll+g/Li0AykT+xBaoYY2sqVcnHCRoLtQnN3EA2CKS9ILtJsQT
MA14RDur8iKsvzNvxF6RrCgYXX8ajnm+IsXbrLGjl1yqCzWAgD9CaeRfSMA=
-----END CERTIFICATE-----
Generated at Thu Jul 24 03:55:09 2025 by rpki-client