Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/11d86d5e-caf4-46bd-b962-a2c43ad0f565.roa
File:                     11d86d5e-caf4-46bd-b962-a2c43ad0f565.roa (raw, json)
Hash identifier:          48rdWBccGd71m07t06sVIFkgSJTaS+lYKZeQG2aCiZM=
Subject key identifier:   D0:AE:B4:47:38:9C:7B:54:20:41:0E:55:79:CD:34:DD:88:3A:DF:B9
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       44C2BBDD59319F32D63CE7A43F478F2CD2B0A46B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/11d86d5e-caf4-46bd-b962-a2c43ad0f565.roa
Signing time:             Fri 10 May 2024 00:00:00 +0000
ROA not before:           Fri 10 May 2024 00:00:00 +0000
ROA not after:            Fri 14 Jun 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        141.230.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:c2:bb:dd:59:31:9f:32:d6:3c:e7:a4:3f:47:8f:2c:d2:b0:a4:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 10 00:00:00 2024 GMT
            Not After : Jun 14 23:59:59 2024 GMT
        Subject: serialNumber=6882458b310d17f46790a7991c072677a30ebacd7e1bc66a4de2698e077c0bc9, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:76:4e:22:e0:57:01:b5:78:ac:d2:ec:ef:2f:
                    10:00:dc:e8:56:85:15:0f:51:c1:88:e3:4e:16:01:
                    22:55:26:e6:9c:fe:34:b4:e8:b1:30:5b:b7:65:6e:
                    3f:f9:20:24:c7:f8:1c:85:55:52:8b:84:23:b8:cd:
                    57:8b:28:50:69:5a:16:50:c1:3e:ec:27:64:87:2e:
                    72:57:10:dc:a9:1f:22:fc:21:69:08:2d:e5:da:8b:
                    e7:bf:86:b0:ec:f4:93:42:d5:88:f6:a0:ff:0e:d4:
                    b0:d7:67:5c:3c:d3:85:88:e2:d4:13:6d:d2:ee:15:
                    0d:e0:ba:c7:f3:ad:ad:c8:cc:96:cb:8e:60:54:76:
                    88:52:0b:0c:72:dc:fb:ef:4b:0b:dd:c2:e8:ac:01:
                    42:8f:68:c0:ef:c7:f3:90:f4:b7:e2:2a:fb:45:59:
                    ed:48:c7:4d:a1:c0:99:fc:f1:d0:3f:d8:52:1f:bf:
                    b7:63:63:09:69:5b:ce:b3:b5:31:a7:e1:e3:63:c4:
                    21:a6:fd:45:b2:86:62:d7:db:95:88:1f:4e:8c:07:
                    95:98:7a:15:ed:36:bf:05:2c:e3:0b:05:42:d2:23:
                    41:02:22:3d:dc:71:32:f2:14:83:3b:85:c1:da:af:
                    06:c9:6d:48:52:69:5e:54:4f:83:17:f8:19:b8:91:
                    6a:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:AE:B4:47:38:9C:7B:54:20:41:0E:55:79:CD:34:DD:88:3A:DF:B9
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/11d86d5e-caf4-46bd-b962-a2c43ad0f565.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.230.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         63:b3:b2:f4:ad:17:5a:5e:53:2a:42:75:64:58:f8:f0:d7:c9:
         23:28:ca:c3:d1:eb:08:f4:9b:54:df:6a:9f:35:0e:0c:dd:08:
         43:c3:43:1d:90:51:ba:0d:df:1a:ee:a0:39:42:86:4c:f2:7f:
         d2:87:7e:c0:0f:d0:f0:2e:b8:be:47:3b:ee:47:87:e6:a1:2f:
         8c:3f:0b:b3:11:a6:0a:c0:5b:84:99:4c:cd:22:b6:2c:a4:22:
         26:da:bc:4a:8a:b2:bb:d7:96:92:ca:dc:67:40:cd:23:85:f2:
         31:fc:02:b2:7d:62:d9:85:cb:1f:24:f6:60:e0:ce:78:1c:4d:
         eb:7d:f8:97:dd:f5:c9:0c:c7:96:53:e0:4f:82:3c:d0:be:dd:
         d2:6c:fc:bc:50:5d:e3:01:78:51:0c:bd:c7:6d:6a:c9:58:e0:
         9d:4e:0c:28:4b:24:9a:3f:59:db:eb:c7:0d:e1:93:6a:3e:11:
         c5:30:3b:39:a5:ec:7d:b9:8f:54:f8:7c:4f:f3:11:0f:50:66:
         c2:03:64:e8:e0:dd:7f:8e:c9:c5:78:f6:5b:74:d0:36:21:2b:
         d8:c3:69:40:1c:f3:1f:56:f0:c2:47:9c:90:7b:a9:d0:b1:7e:
         d6:0c:dd:de:97:97:82:06:ad:47:c4:a7:d9:d3:57:4b:35:f7:
         c0:be:d7:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 01:37:06 2024 by rpki-client on console-ams.rpki-client.org