Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/05b73f8e-c0f8-4c8f-864d-45c7b0cf3156.roa
File:                     05b73f8e-c0f8-4c8f-864d-45c7b0cf3156.roa (raw, json)
Hash identifier:          psub9yUJZCWa4cne74v3O4rLn69ezmGrOx1nmFBEfGs=
Subject key identifier:   99:C9:5C:30:B9:69:5F:07:BA:79:44:C4:8B:D7:4D:B6:C4:CF:04:F1
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2DE101AB4BD23FDFFBF92BE1D0BEC9BBBDF82FD1
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/05b73f8e-c0f8-4c8f-864d-45c7b0cf3156.roa
Signing time:             Wed 15 May 2024 00:00:00 +0000
ROA not before:           Wed 15 May 2024 00:00:00 +0000
ROA not after:            Wed 19 Jun 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        16.106.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:e1:01:ab:4b:d2:3f:df:fb:f9:2b:e1:d0:be:c9:bb:bd:f8:2f:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 15 00:00:00 2024 GMT
            Not After : Jun 19 23:59:59 2024 GMT
        Subject: serialNumber=e76a7ff48110bbc49d15b6b962660f2fa7aeb945d2ee7ef46b8b9005101eac1f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:39:f1:84:02:2a:54:ec:26:27:6d:db:cc:56:
                    f3:58:11:fb:f9:f0:89:7d:26:3d:5e:ae:6b:68:5f:
                    7b:d8:24:fc:8c:0d:20:35:a9:24:14:03:f5:f2:b3:
                    1d:21:d0:75:73:cf:5e:c8:53:34:a9:3c:2b:33:45:
                    05:a8:e3:c9:11:ec:29:64:d4:45:c8:36:97:ea:39:
                    1e:4f:cb:8a:f7:dd:21:18:92:f6:79:65:d4:82:d1:
                    13:6b:4f:e4:37:8a:97:15:5d:58:c8:83:c8:19:26:
                    56:64:23:de:1d:be:25:b1:8e:d0:2b:aa:26:7c:23:
                    53:17:fd:6c:22:ff:3b:c1:60:2e:82:0a:45:13:6e:
                    c7:e2:ad:69:73:de:e6:1a:06:96:99:41:41:fd:90:
                    ce:38:d3:be:6d:9e:eb:f9:e6:fb:43:c6:70:c6:2f:
                    09:6b:0b:a9:77:d7:95:17:3f:19:11:3f:d1:83:be:
                    35:63:b5:df:be:8c:7c:21:05:ff:9a:b6:cc:64:b1:
                    2c:90:e5:7e:44:24:e8:29:ee:8b:8b:20:bf:cd:f0:
                    57:ba:b7:c4:8f:40:00:40:d2:26:bc:df:63:f0:81:
                    61:68:fa:67:54:99:2f:9a:c0:ef:ec:54:92:4e:0a:
                    b8:47:2c:ae:4f:bf:3e:a8:bd:ca:b9:22:56:eb:ac:
                    1d:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:C9:5C:30:B9:69:5F:07:BA:79:44:C4:8B:D7:4D:B6:C4:CF:04:F1
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/05b73f8e-c0f8-4c8f-864d-45c7b0cf3156.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.106.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         12:be:7f:b9:09:6b:2e:15:00:4d:43:da:de:4a:30:87:2d:24:
         dd:66:9f:76:2b:20:4c:d4:01:71:9d:8f:7f:17:48:47:8c:c4:
         ee:eb:e8:f5:05:55:80:a2:15:28:9b:61:cd:9c:5e:c4:95:33:
         03:c8:33:5f:bb:79:dc:c8:65:70:20:05:a8:45:f6:ed:c9:a2:
         05:13:0b:05:5d:64:9b:b2:de:9f:6c:ec:0b:a9:95:f1:2f:f4:
         bb:71:ab:9c:8e:a0:ba:79:62:08:30:48:48:6c:fb:4b:c4:a0:
         06:1d:7b:81:b3:91:5c:2a:c2:ed:c6:e9:04:ed:ff:6a:6d:4a:
         66:23:11:cd:4d:3c:44:db:35:be:88:80:bb:74:4f:0b:ba:dd:
         5b:c8:93:b3:a4:41:22:b7:3a:87:27:f0:1f:2f:2c:41:ff:98:
         96:b1:fe:0c:a2:7b:d7:00:8f:06:63:f3:41:1f:a8:dc:b1:d3:
         cd:fc:99:bc:d4:ab:78:aa:24:2a:6a:ec:c6:68:1a:ae:9e:76:
         44:75:b2:d7:04:40:ff:06:5a:e4:9e:e3:62:e7:b3:f9:2f:d6:
         23:d1:db:52:73:61:92:15:16:8b:a5:b7:6a:ea:cc:4b:7c:f1:
         db:7d:da:ea:0b:e4:2b:5b:e2:e5:a5:71:66:ed:91:7b:32:df:
         e8:29:7a:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 01:37:03 2024 by rpki-client on console-ams.rpki-client.org