Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9dcc7dbe-e6e0-4b28-b319-a161374c3296.roa
File:                     9dcc7dbe-e6e0-4b28-b319-a161374c3296.roa (raw, json)
Hash identifier:          +x+mqlxzZJATDeQDpk5YnWmP8sCX475cB1Am8Krsl3I=
Subject key identifier:   AC:FB:D7:20:AF:9F:11:DC:3C:0B:3E:3F:8D:3D:F9:38:9D:BD:5B:80
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       045B255B057841B55F0F688F3CEB33C86436EE88
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9dcc7dbe-e6e0-4b28-b319-a161374c3296.roa
Signing time:             Tue 04 Jun 2024 00:00:00 +0000
ROA not before:           Tue 04 Jun 2024 00:00:00 +0000
ROA not after:            Tue 09 Jul 2024 23:59:59 +0000
asID:                     62785
IP address blocks:        173.83.128.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Jun 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:5b:25:5b:05:78:41:b5:5f:0f:68:8f:3c:eb:33:c8:64:36:ee:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun  4 00:00:00 2024 GMT
            Not After : Jul  9 23:59:59 2024 GMT
        Subject: serialNumber=d535644da952f94761208fc6a8e0604279dabda4a87c15d2c4b99a80ee505315, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b3:41:0c:99:9a:57:4f:3d:f0:a6:f5:ed:93:
                    f3:45:bb:08:0f:0f:79:b8:bb:3a:46:70:df:7c:c8:
                    82:15:da:ba:27:0d:e0:e1:55:7e:36:ea:82:b2:19:
                    16:34:f1:d1:1b:be:00:b5:d3:03:c6:c3:d5:b7:68:
                    65:35:d0:94:fd:2e:85:d6:9b:d6:68:f4:54:1f:f9:
                    40:8b:40:67:20:f4:f9:16:81:be:26:5a:bb:21:e7:
                    a0:50:f8:ea:29:ad:ba:22:ce:df:31:b0:75:d3:03:
                    e8:13:51:d1:72:c0:fe:80:7f:7c:f3:27:54:54:e0:
                    e4:06:5e:0e:ed:15:23:f9:c3:4b:92:8c:99:c8:10:
                    29:c4:83:f0:1a:db:f2:53:b9:c0:b1:85:d3:24:5d:
                    87:2d:7b:95:3c:ff:6b:de:7d:5d:cf:3e:2f:cc:e9:
                    8b:55:d1:dd:8c:b2:61:47:7f:8f:68:d1:1d:5a:42:
                    6b:95:ca:32:c4:1c:ea:d0:2f:4e:f1:95:00:7c:a2:
                    61:ef:59:d5:b3:52:7c:bf:44:35:eb:de:5e:c4:07:
                    49:9f:66:ee:9b:45:00:a5:c0:81:ca:0e:eb:bc:99:
                    b4:c7:4f:56:c2:e9:47:f8:c3:ac:1c:bd:e1:cb:60:
                    b7:80:f3:45:33:0c:0c:cf:67:fe:a0:91:6c:45:52:
                    22:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:FB:D7:20:AF:9F:11:DC:3C:0B:3E:3F:8D:3D:F9:38:9D:BD:5B:80
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9dcc7dbe-e6e0-4b28-b319-a161374c3296.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.83.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         64:29:83:2f:63:92:57:f4:af:ef:40:0c:73:4a:09:70:76:9c:
         19:1a:e5:62:4d:e0:58:18:93:07:e9:9f:df:0c:09:88:4c:2c:
         90:6e:bc:79:49:68:31:6a:dd:64:00:b2:e9:85:0c:13:8e:03:
         83:56:ea:43:71:b1:1c:5d:e2:42:24:44:12:51:cf:6e:50:02:
         fa:82:57:87:41:df:47:d5:25:7e:98:5c:2e:41:f2:97:65:19:
         b8:4f:dd:9d:f5:12:2f:e4:fb:27:f0:79:39:05:ca:04:e0:4f:
         a6:66:42:7d:25:a3:f2:f4:3e:7c:ac:31:7f:06:b7:f6:42:a2:
         6a:25:f0:0a:a5:f3:af:2a:d7:34:6f:d1:60:0c:e1:be:a1:6d:
         09:6e:6a:40:6c:63:c3:7c:6f:2e:ca:41:92:76:77:3a:31:6d:
         49:ad:b4:56:16:ac:14:22:ae:dd:fa:f1:c1:aa:5b:10:cf:25:
         9d:d1:02:96:42:cf:61:11:02:23:f5:a2:7f:63:33:dd:dc:e9:
         df:0f:1f:66:bb:f8:64:77:ae:79:a0:52:64:0a:f7:12:f8:3d:
         8b:d8:71:bc:8c:79:a7:4e:92:de:ac:4e:4c:3f:c4:6a:39:3b:
         eb:d7:ea:48:25:de:65:75:61:11:64:9b:5a:01:67:e5:55:fe:
         d0:23:7d:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 02:09:33 2024 by rpki-client on console-ams.rpki-client.org