Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c8384fab-b30c-47c5-9c5e-5cdf2bba1cb3.roa
File:                     c8384fab-b30c-47c5-9c5e-5cdf2bba1cb3.roa (raw, json)
Hash identifier:          ASs8kI2uRq8ejQngYwnXXzPkh6e7HzUYryypVcbbbTQ=
Subject key identifier:   ED:9B:83:EA:64:BF:B0:18:0B:63:87:9D:CE:E2:75:66:5A:D0:19:2F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       15CA12F5E5F939F06DCC3AEEA9F2A2BE5A20B000
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c8384fab-b30c-47c5-9c5e-5cdf2bba1cb3.roa
Signing time:             Fri 10 May 2024 00:00:00 +0000
ROA not before:           Fri 10 May 2024 00:00:00 +0000
ROA not after:            Fri 14 Jun 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        16.52.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:ca:12:f5:e5:f9:39:f0:6d:cc:3a:ee:a9:f2:a2:be:5a:20:b0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 10 00:00:00 2024 GMT
            Not After : Jun 14 23:59:59 2024 GMT
        Subject: serialNumber=10f6de28b2c9db6a9d0530695bf67781c824c4a6d3cf10afa578c89db839a818, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:09:11:81:d7:60:86:5d:4e:1d:04:97:c8:a6:
                    32:fe:3f:43:3a:5e:16:80:e2:f3:63:79:88:df:ec:
                    e2:42:7c:a0:22:07:a0:e6:7b:37:d4:ab:fb:14:88:
                    bf:e2:21:b7:3f:6a:ac:76:a7:e1:e4:86:6a:18:c3:
                    60:36:05:13:be:b4:74:d7:ef:9e:14:29:93:d7:0b:
                    de:19:fc:18:c9:4d:ad:f3:9d:66:cb:04:07:ba:7d:
                    c0:ce:09:c0:f2:c4:c3:06:e2:1e:59:87:54:de:95:
                    62:d2:d9:d6:81:9a:72:f6:17:ec:d4:0f:cf:1e:50:
                    05:55:f4:0c:7a:77:4a:da:20:e7:42:81:cc:27:98:
                    6f:3c:9b:aa:f3:4f:82:83:b4:c6:1d:81:12:43:7c:
                    10:85:0d:aa:a8:b5:55:5e:04:9c:07:01:2e:50:31:
                    a0:6b:32:9c:d8:d8:e1:a5:d1:58:32:fb:07:4d:f8:
                    f2:6b:c8:53:4f:0e:11:73:c3:49:ce:9a:f0:20:c1:
                    f9:be:86:c9:60:38:c7:bb:99:a4:76:99:a4:49:cf:
                    26:f5:31:1e:09:a8:67:ec:4d:24:73:36:cb:f5:86:
                    2b:22:cb:99:4e:69:71:93:8c:4f:8b:a0:76:8d:d5:
                    8a:e8:86:b2:99:da:b2:4d:c7:0f:d3:6d:ba:7f:cf:
                    bf:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:9B:83:EA:64:BF:B0:18:0B:63:87:9D:CE:E2:75:66:5A:D0:19:2F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c8384fab-b30c-47c5-9c5e-5cdf2bba1cb3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.52.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         b5:f0:e6:8c:07:1f:39:e8:30:cb:a5:8a:3d:44:ef:08:23:bd:
         5a:51:7b:dc:f6:23:00:d9:f5:55:8d:b7:5a:c7:09:d5:2a:5e:
         87:89:b9:49:34:6e:c4:8b:17:6b:e4:6d:51:5c:74:fe:4f:4a:
         51:8c:d4:64:ef:e3:fe:38:45:cc:c9:13:d6:14:e8:89:7c:dc:
         32:6f:d9:f1:67:20:c4:bf:d1:7e:7b:10:c0:a8:f7:69:77:32:
         a5:38:a0:63:6a:f4:97:a5:a1:5c:57:4c:a1:03:11:91:65:f2:
         9b:29:ba:24:8c:c6:6b:e1:74:c8:fc:b6:46:cc:d1:71:dd:c3:
         fc:90:42:dd:9b:cd:7c:3c:2a:c0:07:01:69:f6:0b:1a:59:aa:
         0b:2d:be:8a:9c:65:2a:40:d5:f3:73:85:f7:c6:0b:3c:ee:76:
         e3:85:00:5a:84:59:d4:e3:7f:e5:bb:18:0d:01:81:ca:1a:93:
         ee:49:84:dd:81:29:51:cb:3a:7d:5d:03:19:bb:fe:da:3d:a7:
         a9:b3:ca:1f:c7:5e:f5:0b:db:77:c0:52:e0:75:9e:9f:b0:46:
         bb:5b:ed:fd:ba:76:2b:3e:7b:e1:37:5b:96:8b:53:38:0a:e9:
         42:69:ea:96:2b:76:86:46:d4:b5:72:00:e2:b7:87:42:c1:4c:
         e1:aa:a0:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 02:07:03 2024 by rpki-client on console-fra.rpki-client.org