Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/40fca454-65e0-4072-af96-d894b6769d35.roa
File:                     40fca454-65e0-4072-af96-d894b6769d35.roa (raw, json)
Hash identifier:          D99xkP8UIwlRIMR7i0bbCTxUR4OEfLVG/t7dtqyPNmA=
Subject key identifier:   7F:B3:CB:00:60:6B:4D:83:9C:50:E0:9A:A7:3B:7B:A8:D6:B9:5D:FC
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       70ED753CAC954090169CC316D86DFD170A8BD8F8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/40fca454-65e0-4072-af96-d894b6769d35.roa
Signing time:             Sat 11 May 2024 00:00:00 +0000
ROA not before:           Sat 11 May 2024 00:00:00 +0000
ROA not after:            Sat 15 Jun 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        15.134.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:ed:75:3c:ac:95:40:90:16:9c:c3:16:d8:6d:fd:17:0a:8b:d8:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 11 00:00:00 2024 GMT
            Not After : Jun 15 23:59:59 2024 GMT
        Subject: serialNumber=3ecb8f261e9e0758c129036bc7f5579eb1f82cab77bee4aade9e77e8cd06642e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:52:a3:9b:ac:e1:d0:fb:10:41:49:e0:59:e1:
                    26:73:3a:88:62:bb:b8:49:9f:e7:2c:25:ee:90:5d:
                    97:22:e0:8d:4c:3e:96:03:78:5b:57:cc:10:2a:f9:
                    26:d6:67:9c:6c:48:7b:ed:0d:1a:be:7b:72:f3:9f:
                    7a:fb:a8:f1:88:5b:c6:b3:9c:92:30:65:26:33:7f:
                    14:db:be:52:d7:f2:f5:ac:2f:aa:9b:19:25:67:a5:
                    a2:5a:b0:ba:aa:c8:99:98:0c:a7:97:60:26:fd:f5:
                    da:b5:30:0c:83:f7:24:0d:d5:e2:f2:48:89:a5:6b:
                    d0:b6:f9:41:38:4d:a4:60:7e:47:89:14:5f:f3:3f:
                    23:b3:6b:1a:4d:b5:6e:5f:50:c1:85:03:56:6a:bc:
                    de:f9:75:5e:9f:fa:43:a2:ea:7b:7c:65:84:3d:3e:
                    32:e3:f1:72:5c:7c:51:7b:72:69:57:3c:ff:bf:95:
                    2e:dd:3c:dc:ba:6e:3d:4d:6a:9b:1f:a5:b0:c3:d6:
                    04:98:4e:69:d2:c6:07:dc:ed:0f:ac:44:6e:ed:3d:
                    f3:02:fb:fe:79:b0:6d:7d:36:9a:eb:d0:0a:af:82:
                    9d:52:5e:85:c2:0e:04:23:35:fc:e3:69:81:d9:15:
                    c9:1a:3b:65:67:0e:5e:be:51:79:49:a3:fd:ee:0c:
                    36:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:B3:CB:00:60:6B:4D:83:9C:50:E0:9A:A7:3B:7B:A8:D6:B9:5D:FC
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/40fca454-65e0-4072-af96-d894b6769d35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.134.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         b2:31:30:46:e8:5a:e8:51:58:9d:be:3c:bb:81:7d:d3:a8:5b:
         a0:86:8f:45:80:22:61:6f:c0:34:10:fc:e1:2c:a6:21:be:59:
         c7:05:06:d9:26:f3:bd:ee:c6:48:86:5f:14:99:c1:0c:2f:d2:
         84:76:1d:18:06:31:80:fe:52:d5:20:ec:99:1e:bf:6d:41:a9:
         e0:e2:f1:f1:5e:28:45:0f:ca:28:0b:c4:e7:bc:d0:d0:0d:32:
         b2:ff:eb:29:50:8e:c7:50:0a:27:44:d9:05:86:0c:7d:b1:19:
         f2:48:19:09:7a:16:38:48:f9:24:ce:4e:75:00:ae:db:97:4f:
         b2:f3:bb:d7:8a:3c:dd:38:1f:a2:46:68:52:a5:c9:65:4f:62:
         8f:3b:c1:8e:7c:c1:5f:07:6e:05:18:fe:d5:37:27:b6:ed:6e:
         d9:ad:45:84:b6:5b:10:bb:1b:e2:a1:5a:1b:63:de:fc:9c:99:
         39:dc:82:3f:e7:95:92:61:fa:53:41:9e:1b:d6:89:9f:c0:b7:
         41:08:f8:b6:88:57:3d:0c:d8:44:d9:40:6c:34:06:17:7c:23:
         4e:d6:69:e5:20:3a:f2:83:a8:b0:56:f7:53:3c:9d:29:d4:55:
         da:80:a7:50:c9:a3:ea:cd:e3:4a:d4:e6:bf:a0:7d:7d:8c:7a:
         ba:7c:75:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 01:37:14 2024 by rpki-client on console-ams.rpki-client.org