Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bd222a65-748c-46e7-882d-3919ea56fa41.roa
File:                     bd222a65-748c-46e7-882d-3919ea56fa41.roa (raw, json)
Hash identifier:          2NBqNT/P38Tmz+Sahoy9FWZSQaSgxpMV35nYJKH+Mpc=
Subject key identifier:   AA:1F:D1:03:73:47:79:3B:44:E2:39:A1:50:A3:C2:69:5E:E7:E1:63
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7F266A2F1D142E89C0B0015EF5162CF2532DA169
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bd222a65-748c-46e7-882d-3919ea56fa41.roa
Signing time:             Fri 10 May 2024 00:00:00 +0000
ROA not before:           Fri 10 May 2024 00:00:00 +0000
ROA not after:            Fri 14 Jun 2024 23:59:59 +0000
asID:                     54113
IP address blocks:        162.219.224.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:26:6a:2f:1d:14:2e:89:c0:b0:01:5e:f5:16:2c:f2:53:2d:a1:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 10 00:00:00 2024 GMT
            Not After : Jun 14 23:59:59 2024 GMT
        Subject: serialNumber=2f1121f0bee359720e7ab2ce4175d1c12a51a7bff011cafeaba5bfb0959bb402, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:2d:3e:c8:e9:c5:ca:4f:83:15:dc:ae:d7:a7:
                    29:6b:36:54:0a:46:29:2b:c2:d7:80:32:cc:4f:48:
                    02:06:66:0b:c8:81:b2:71:2d:f2:6e:a5:d1:a0:23:
                    53:a4:ed:f4:a1:94:8c:6c:67:b2:e5:8b:13:4b:eb:
                    e1:7a:0c:74:eb:58:4a:60:9c:4f:43:a2:91:33:ff:
                    dd:29:23:57:a2:b2:9f:a6:c0:5c:a1:78:ea:4c:46:
                    20:9b:79:a6:51:d5:b4:43:a4:ce:13:1e:39:0e:34:
                    03:ee:91:65:91:26:69:87:81:fd:dd:96:a8:7c:0c:
                    d1:03:bd:54:c8:36:2e:b3:ff:1e:66:38:56:78:f6:
                    79:38:34:4e:53:f8:ee:c1:d4:50:17:05:ac:5b:9f:
                    ce:b1:a4:c1:03:cd:b9:52:5a:24:13:ca:c7:78:b2:
                    d2:ac:de:da:bc:71:b6:5d:69:56:03:93:a2:ee:7a:
                    67:6c:5e:5e:9e:09:12:ae:3d:95:a8:e2:a0:4e:51:
                    42:39:1d:6e:20:5d:ba:b9:37:b5:f8:f7:cf:4c:e6:
                    80:b3:b3:b1:2f:f1:26:20:ac:c9:8b:fe:fd:5f:aa:
                    16:4d:08:f6:09:e9:b7:26:5a:96:20:4b:0d:0c:f4:
                    54:b7:42:e8:8c:70:c0:bd:7b:15:e8:dd:4f:61:1b:
                    44:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:1F:D1:03:73:47:79:3B:44:E2:39:A1:50:A3:C2:69:5E:E7:E1:63
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bd222a65-748c-46e7-882d-3919ea56fa41.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.219.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         03:ee:0f:2e:ea:40:39:f3:dc:e2:23:8e:71:a5:39:0d:38:0c:
         56:0b:4d:5f:9f:5d:ff:b0:bb:98:92:43:07:86:9d:e6:61:23:
         3b:91:e0:91:10:8b:ad:96:62:9e:bf:81:73:9c:86:9c:08:cd:
         c5:38:e4:19:6f:c3:fd:91:ff:f0:45:3b:2e:5c:91:3d:c1:38:
         5e:a6:7a:96:d3:2d:c2:e3:4e:27:08:81:fb:61:ec:fb:4d:bb:
         a0:2d:da:3e:c4:f5:8d:01:64:c1:70:25:a7:c4:b7:a5:86:79:
         40:27:bb:23:66:f0:ac:d2:3c:3f:bb:43:64:d2:ec:5b:95:38:
         a2:49:b9:5b:08:27:a2:b4:56:0e:2e:ef:1d:2b:19:f0:54:9b:
         f3:34:8d:fd:d9:38:f4:d1:1e:ea:3f:fb:d6:e2:c1:6f:fe:bb:
         dd:0a:47:f3:bf:0f:e5:e8:4e:84:68:1b:88:9f:59:59:29:33:
         3c:e4:91:87:ff:75:11:f9:2d:94:23:1f:7f:61:e5:1c:ae:d3:
         38:4c:2d:45:90:f7:dc:0c:d3:8a:73:70:f0:de:bd:b6:c8:ed:
         7a:40:a6:db:f3:4d:13:95:6e:c0:ce:6f:84:99:30:d2:18:35:
         a1:ac:89:28:1f:22:84:b5:6b:40:09:80:a4:43:20:3a:3b:a3:
         23:fe:89:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 01:37:38 2024 by rpki-client on console-ams.rpki-client.org