Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/79a485f7-efed-4648-bb1c-7bf3596b3f9f.roa
File:                     79a485f7-efed-4648-bb1c-7bf3596b3f9f.roa (raw, json)
Hash identifier:          Fszyv3KQlCodwOss8ZNWjv8Bm4bxWEBSxXEtScoAxbs=
Subject key identifier:   62:FD:3C:04:92:2F:69:09:55:4C:D4:C4:D0:63:2A:A1:B1:56:7A:50
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4CE7FB400F93B633BCDA520B9D83C09FA118BC93
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/79a485f7-efed-4648-bb1c-7bf3596b3f9f.roa
Signing time:             Mon 03 Jun 2024 00:00:00 +0000
ROA not before:           Mon 03 Jun 2024 00:00:00 +0000
ROA not after:            Mon 08 Jul 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        198.211.0.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Jun 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:e7:fb:40:0f:93:b6:33:bc:da:52:0b:9d:83:c0:9f:a1:18:bc:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun  3 00:00:00 2024 GMT
            Not After : Jul  8 23:59:59 2024 GMT
        Subject: serialNumber=b854d97997e6a630d2c81a07479abbfa6254a3769b3d450439747c50795fecb1, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ed:64:a8:76:1b:66:a4:67:d5:86:8c:0e:3b:
                    bf:59:b5:e0:bf:b9:64:89:aa:0c:6c:a4:0d:a7:ed:
                    97:79:c1:2f:0c:5b:42:d8:c0:c3:6a:38:ab:64:81:
                    f5:ea:47:96:dc:71:e1:45:95:66:94:c5:29:d4:78:
                    3d:d0:80:4b:e8:87:ba:4f:e0:3d:30:b1:b5:6e:8c:
                    e5:c2:1d:03:9c:f9:74:4d:4c:1d:94:bf:b4:b2:ac:
                    15:10:3b:42:b2:c3:09:2a:48:b8:5a:3b:82:7b:a0:
                    51:98:7e:ff:5c:eb:8c:6e:ea:b1:dc:cc:8d:fe:82:
                    80:59:93:8f:99:06:48:70:8e:bf:cd:8b:df:ed:23:
                    78:d5:c2:a3:50:33:2c:d8:07:73:45:cc:69:c0:19:
                    c0:a3:23:62:1a:78:35:8e:3e:5b:ef:a6:4a:d8:2b:
                    2c:94:ee:99:d0:81:44:a8:33:db:9d:c1:cf:3e:44:
                    5b:bd:de:88:5e:b3:80:6d:4d:a3:13:bc:a2:a0:1f:
                    31:4d:d0:12:ae:fc:e5:f9:e0:4b:59:b5:16:ea:f1:
                    0f:b6:27:bb:b2:ca:82:b2:b5:0a:15:36:b2:7e:a0:
                    5a:b9:ee:98:2a:bb:48:2e:27:d4:da:0a:14:05:7b:
                    b5:37:65:ff:09:33:94:94:21:b1:09:d8:70:b9:86:
                    88:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:FD:3C:04:92:2F:69:09:55:4C:D4:C4:D0:63:2A:A1:B1:56:7A:50
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/79a485f7-efed-4648-bb1c-7bf3596b3f9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.211.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         8a:f6:51:28:28:9b:ff:21:4a:a4:3a:09:d9:f0:d6:64:a2:d1:
         0e:97:81:07:ce:87:90:b8:f1:ab:f6:6d:48:91:2c:fc:c3:9f:
         dd:44:ee:3d:82:0d:ff:69:d4:ae:15:56:99:98:8e:f4:d6:61:
         17:48:0b:cb:0c:c4:a2:c8:53:ad:85:c4:a7:98:79:03:b2:b1:
         bd:75:69:ec:32:13:aa:f4:7b:93:2d:a4:f1:54:6d:93:31:4c:
         db:d6:a0:da:df:e1:aa:6e:f2:86:85:6a:ae:5f:fa:07:e6:28:
         28:58:d8:62:91:24:51:00:ae:ad:b5:e7:e4:34:21:7b:1f:2f:
         8b:38:bb:5f:7b:c5:1c:04:e6:ca:3e:0c:1d:35:8a:13:55:94:
         b5:07:84:4b:cd:78:1f:07:e0:6d:15:25:9a:c7:5f:e1:80:88:
         e5:56:6a:bb:02:99:7d:4b:dd:7d:8e:65:a9:e4:ac:7e:f4:88:
         c9:ff:44:4d:0d:4b:58:41:ad:7d:c8:7a:78:df:7a:5a:e6:40:
         04:94:59:86:e8:5d:a4:04:68:49:ed:34:ba:af:47:eb:52:06:
         15:0c:95:1a:9f:1a:b7:7c:47:b8:20:51:de:c5:34:e4:88:4c:
         6c:a7:e5:36:64:cb:0c:ef:a3:db:98:3d:55:18:15:4c:6f:00:
         ae:3b:ab:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 02:09:29 2024 by rpki-client on console-ams.rpki-client.org