Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8e068ccb-938a-469b-acfa-b7ef7943ad51.roa
File:                     8e068ccb-938a-469b-acfa-b7ef7943ad51.roa (raw, json)
Hash identifier:          nSSWRI+JssI6/9eQjkRiHxAdjliG8JwerfqFXzQpyGE=
Subject key identifier:   A5:7B:B3:BD:12:DA:B8:01:BE:BF:1E:4B:D4:67:E7:73:2C:3C:E9:CD
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4AF6265E45EFDADD779AA5E777BD0D2A49D81DDF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8e068ccb-938a-469b-acfa-b7ef7943ad51.roa
Signing time:             Fri 21 Jun 2024 00:00:00 +0000
ROA not before:           Fri 21 Jun 2024 00:00:00 +0000
ROA not after:            Fri 26 Jul 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        16.198.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Jun 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:f6:26:5e:45:ef:da:dd:77:9a:a5:e7:77:bd:0d:2a:49:d8:1d:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun 21 00:00:00 2024 GMT
            Not After : Jul 26 23:59:59 2024 GMT
        Subject: serialNumber=fd21212cd2820a9283adf840e7e5eecba4752b2e0e98bc2b77e85d73ff4474e4, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:14:0f:1f:01:48:04:ca:47:27:fb:c9:57:df:
                    b4:b1:16:18:ba:cd:78:db:6b:ce:04:af:f4:fa:d5:
                    84:84:2b:63:2b:db:76:e9:9c:d8:c5:80:1e:b2:a4:
                    9f:66:52:af:61:53:86:c9:7a:32:dd:4e:de:5d:c8:
                    28:fd:83:1b:a6:ad:61:97:e1:61:11:59:43:4b:9f:
                    dd:0b:e4:f1:39:4a:c6:01:76:1a:07:97:19:d9:2d:
                    3e:c1:8c:71:29:f5:b6:90:fb:70:b8:82:f8:23:b9:
                    d9:e7:6e:5e:05:e4:67:a5:24:5a:f5:c0:f5:19:20:
                    8c:45:90:81:b8:fb:b8:95:94:25:b6:05:48:c7:a7:
                    f9:dd:08:ee:c3:97:73:cb:9b:58:14:ac:b0:45:4d:
                    7e:b4:94:9c:83:2f:a4:89:eb:5d:84:6c:f1:33:ec:
                    be:99:b5:d9:6b:8e:ee:39:07:97:11:3d:ee:a9:a1:
                    0a:e1:07:39:2e:48:e1:f2:9c:eb:dd:8d:0b:df:e3:
                    c5:ad:e1:7b:20:6f:e7:3c:6d:40:f0:84:83:13:ba:
                    88:90:13:d5:71:a0:cc:cb:0b:ac:f8:9b:83:13:16:
                    30:6d:51:57:42:ff:10:52:41:fa:a2:12:6a:ac:2f:
                    6a:3b:f9:3c:ea:d7:52:88:94:91:ca:6f:94:f0:31:
                    3e:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:7B:B3:BD:12:DA:B8:01:BE:BF:1E:4B:D4:67:E7:73:2C:3C:E9:CD
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8e068ccb-938a-469b-acfa-b7ef7943ad51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.198.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         32:02:8b:df:72:85:23:5a:ba:c5:75:28:47:d4:9e:48:e5:0d:
         c7:51:99:13:65:4b:3f:ef:c9:da:ea:ba:2a:ff:6c:44:6d:6c:
         6e:8c:d9:9f:7e:94:50:8f:5d:de:ba:c0:54:1c:06:f5:cf:11:
         c7:c9:b0:94:64:0b:e3:89:e2:3d:3b:4e:79:c6:6c:ca:39:8f:
         a9:fc:29:5c:df:e4:86:1a:19:28:45:60:be:90:d2:d2:1d:58:
         d1:e7:19:5b:89:e5:c8:92:38:38:e2:cd:6d:01:e4:95:35:40:
         f5:5c:3c:4e:e4:cd:33:8c:0c:14:37:e7:1f:37:58:ee:16:be:
         cf:4f:18:00:a8:f5:01:23:66:d3:8e:1b:a4:c9:6d:44:68:68:
         22:f3:dd:4b:3e:74:2a:2e:3e:2f:5d:8c:08:0a:01:aa:61:b9:
         52:ec:5d:85:40:b0:de:52:0e:64:5f:14:0d:50:77:83:19:ae:
         ba:a4:1f:9a:c2:3e:fb:71:10:66:3f:3b:68:2e:13:1e:e0:01:
         64:6d:08:2f:6d:48:aa:e4:04:13:7e:06:81:f0:e0:88:98:fe:
         fc:bd:60:93:62:58:e7:8a:70:af:b7:c5:91:4d:d3:8c:07:8d:
         0a:eb:c3:92:34:7f:a4:66:47:11:89:e6:00:be:5a:2d:4a:3a:
         74:bb:6e:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 02:09:31 2024 by rpki-client on console-ams.rpki-client.org