Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a254dd8f-7d15-4a37-bf39-ccbffc34bca0.roa
File:                     a254dd8f-7d15-4a37-bf39-ccbffc34bca0.roa (raw, json)
Hash identifier:          THkCV35p4X6TacdTOguwMm2AMb6bitQMwQAQngvGVyk=
Subject key identifier:   9D:38:DA:9E:B8:B1:BD:81:71:7A:A4:96:10:8B:FD:9A:77:8D:B6:CF
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       10A8C4A8088DC332457907E4BC715740ECF7F6B1
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a254dd8f-7d15-4a37-bf39-ccbffc34bca0.roa
Signing time:             Mon 03 Jun 2024 00:00:00 +0000
ROA not before:           Mon 03 Jun 2024 00:00:00 +0000
ROA not after:            Mon 08 Jul 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        15.240.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Jun 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:a8:c4:a8:08:8d:c3:32:45:79:07:e4:bc:71:57:40:ec:f7:f6:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun  3 00:00:00 2024 GMT
            Not After : Jul  8 23:59:59 2024 GMT
        Subject: serialNumber=3cf55e2ae0a84601ef125816a69cb041702a073c6c1254bf1834275a2940d414, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:45:37:c6:a5:6b:85:49:00:d1:54:aa:6f:4b:
                    cd:f0:e1:ba:91:c1:fe:d7:4a:81:ba:25:31:45:14:
                    55:f7:40:6e:60:df:a3:5e:25:4e:5b:4c:c7:fc:12:
                    70:40:02:c7:43:6c:3c:99:29:c8:9e:48:5a:d4:28:
                    93:9e:a7:44:be:15:ca:57:6b:d8:9a:aa:4e:90:c1:
                    59:c4:17:77:8a:e1:9e:e6:fd:60:85:67:ed:0f:1e:
                    86:25:dd:5d:ad:ec:b0:b2:4c:44:18:82:1a:b7:30:
                    21:ee:e5:e0:48:30:f5:d3:be:92:c8:3f:96:33:bf:
                    0d:98:15:07:4d:30:55:d3:e6:2d:f6:b3:e1:2d:5d:
                    27:a4:49:e1:f4:c9:e8:ec:6d:cf:79:f7:b0:73:90:
                    40:9d:33:ad:d4:96:65:90:67:35:af:17:09:7a:b5:
                    54:44:c3:55:01:6b:67:27:1e:71:db:ca:af:99:ad:
                    6d:61:30:b2:fc:d2:24:a7:82:e3:9c:7e:a6:5e:db:
                    20:b9:9f:b5:eb:fc:95:b4:3d:15:bb:9e:1a:2e:63:
                    fc:2c:aa:6d:18:49:98:e7:46:ba:82:ba:d0:a4:82:
                    c2:b3:59:b6:3b:75:13:1b:48:8b:e7:6f:52:94:9a:
                    c9:a9:d8:a6:47:93:95:0a:dc:a0:76:50:62:97:d7:
                    1c:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:38:DA:9E:B8:B1:BD:81:71:7A:A4:96:10:8B:FD:9A:77:8D:B6:CF
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a254dd8f-7d15-4a37-bf39-ccbffc34bca0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.240.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         b4:7d:1f:22:de:b5:a1:21:6b:ba:b6:04:1f:2c:4b:bf:8e:3e:
         38:3d:74:5c:e4:a5:8e:f1:d0:cd:a5:83:93:24:57:23:c5:7c:
         48:18:c0:11:89:91:0a:97:b6:8f:3e:be:eb:ab:d8:30:b8:8d:
         2c:6c:4e:19:ce:bd:a3:94:ad:1a:eb:33:ca:cb:6f:08:85:ed:
         5f:e2:1d:fd:51:83:33:68:88:7a:eb:81:16:14:ad:57:4b:01:
         00:8d:94:03:9e:e4:40:ed:f7:ea:a0:c6:80:47:67:2b:75:0b:
         53:13:7c:69:0d:bf:09:7b:77:57:3c:07:2b:d3:b7:65:e2:8a:
         af:66:fd:19:37:55:92:a7:fd:6c:f1:3d:a7:2f:4e:50:6d:ce:
         3c:da:ce:23:eb:40:0f:ce:21:0b:5a:42:2b:d8:83:97:9f:39:
         8b:e1:fb:af:ee:5a:02:21:f6:cb:9b:0f:6a:2f:d1:cb:85:a6:
         7f:f4:4c:7f:56:70:ed:03:d1:d2:81:ab:00:29:77:67:45:80:
         a7:f1:62:49:20:6f:74:4a:66:4e:35:8f:8d:4c:b1:e9:2e:a9:
         8a:1b:57:58:7e:89:6e:a0:37:38:94:47:2b:d1:05:ef:6f:c8:
         09:20:5b:56:10:87:b2:e0:3f:31:cd:7b:87:4b:35:75:13:66:
         92:cc:be:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 02:09:34 2024 by rpki-client on console-ams.rpki-client.org