Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/52b3a89e-c767-4ff9-b9db-a4b24dd9d030.roa
File:                     52b3a89e-c767-4ff9-b9db-a4b24dd9d030.roa (raw, json)
Hash identifier:          70WKujNC+ll5L0FVJPuaUU1ICzM5WI1Xu3vTRrR6+og=
Subject key identifier:   C7:F0:32:38:71:42:19:1C:55:09:46:83:24:81:2E:57:27:B6:E5:60
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7CC36AD1821429CEB0FBB91D376D10465CA7BCFB
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/52b3a89e-c767-4ff9-b9db-a4b24dd9d030.roa
Signing time:             Fri 10 May 2024 00:00:00 +0000
ROA not before:           Fri 10 May 2024 00:00:00 +0000
ROA not after:            Fri 14 Jun 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        75.45.128.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:c3:6a:d1:82:14:29:ce:b0:fb:b9:1d:37:6d:10:46:5c:a7:bc:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 10 00:00:00 2024 GMT
            Not After : Jun 14 23:59:59 2024 GMT
        Subject: serialNumber=33e8ca43df56ccb3f5457e20d1a2f68325913c0a730fc2ae5c8ab8e892b60d47, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:27:38:fd:5c:55:b9:15:f3:28:f2:08:d8:2b:
                    d1:e8:ae:08:50:d7:8b:04:4c:71:e1:0d:79:ef:72:
                    c5:7f:a1:c2:fe:0c:fe:08:c4:fa:84:2e:9e:54:9f:
                    e8:ee:d8:f0:0f:71:f7:ff:d8:c7:9f:b5:b7:00:fe:
                    c5:c6:b0:50:62:84:26:99:ca:b7:bd:d5:6c:b9:b5:
                    c6:67:f5:a9:af:88:fa:52:50:7a:a9:6f:4f:d7:a5:
                    20:3a:9a:f0:b7:98:71:c8:f0:68:f6:45:70:f4:38:
                    0b:a5:03:ad:cd:d6:09:10:0a:50:6a:b3:09:e2:d4:
                    27:22:33:ad:40:b6:7e:fa:6c:6a:a3:7c:9f:56:37:
                    62:2a:07:b3:71:3a:81:98:ab:40:17:43:f5:96:02:
                    5e:ec:35:5b:b5:f1:93:5e:51:ce:02:d7:c6:92:c2:
                    d2:e2:33:71:6f:1b:e0:93:74:a6:98:45:36:5a:5d:
                    b7:db:e2:81:30:dd:c3:77:4e:e2:72:db:08:f0:ea:
                    ca:9c:79:87:15:78:b5:c7:96:91:fa:ad:d8:3e:1c:
                    95:b1:66:31:b3:30:d0:90:82:b8:8a:59:4c:95:1f:
                    0f:bc:1f:df:8c:d4:4b:df:8d:d9:4a:f4:ac:29:45:
                    0b:fc:27:d5:5f:f0:58:a2:72:4c:8a:de:2f:49:31:
                    7f:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:F0:32:38:71:42:19:1C:55:09:46:83:24:81:2E:57:27:B6:E5:60
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/52b3a89e-c767-4ff9-b9db-a4b24dd9d030.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.45.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         56:cb:41:9b:00:82:76:87:4a:3a:2d:4d:56:25:24:ca:1f:db:
         de:c6:72:a0:5d:6e:93:b2:c2:29:20:25:92:f8:a3:d4:6a:f8:
         3a:6d:fe:33:61:96:37:8c:21:c3:75:a6:81:fa:94:2c:03:0e:
         fc:7e:d6:64:ef:6a:e9:15:cc:c4:bf:8f:c6:f6:71:3e:fd:80:
         29:23:52:f4:32:52:63:f5:3f:8f:57:39:d2:88:e3:89:04:5f:
         82:d3:1f:b5:c9:17:79:7c:54:42:34:f2:04:96:80:18:9f:27:
         1d:4a:82:74:c4:10:76:95:1d:d9:5a:22:33:ed:c3:f3:d0:12:
         47:76:47:a8:80:79:e7:f7:7e:47:f0:9b:8c:32:b2:24:d3:dd:
         24:0e:8b:bf:9b:f9:1e:cf:76:a7:fe:5d:4c:f6:04:4a:67:42:
         e0:38:f6:5d:42:83:8d:23:bc:18:0f:50:f3:f4:ca:10:f8:25:
         5d:6b:7d:60:85:41:8e:61:74:76:bd:15:c3:d6:e6:19:e3:19:
         f4:87:4f:a5:f4:f2:a1:b0:29:6f:86:1e:3f:65:d7:53:40:7c:
         dc:37:29:60:03:7b:63:0f:e9:8e:0e:2d:21:d3:6d:2b:77:4c:
         b6:29:ce:d5:02:b2:ad:21:84:b3:3c:0e:06:9e:33:f8:ec:81:
         12:15:2c:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 01:37:16 2024 by rpki-client on console-ams.rpki-client.org