Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d1b31785-506c-447f-b611-3ebb98f73ea3.roa
File:                     d1b31785-506c-447f-b611-3ebb98f73ea3.roa (raw, json)
Hash identifier:          of0BTrnhq69IcVT2QvUSpneicKbuBjxxzoubTAcRM8w=
Subject key identifier:   CB:E7:83:05:2B:C0:30:A8:34:5D:AE:CD:D1:65:79:0E:F9:95:45:BF
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       50DF72DE9DDD9C87B64ED5918F7FA0D8787B4E63
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d1b31785-506c-447f-b611-3ebb98f73ea3.roa
Signing time:             Fri 03 May 2024 00:00:00 +0000
ROA not before:           Fri 03 May 2024 00:00:00 +0000
ROA not after:            Fri 07 Jun 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        40.38.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:df:72:de:9d:dd:9c:87:b6:4e:d5:91:8f:7f:a0:d8:78:7b:4e:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May  3 00:00:00 2024 GMT
            Not After : Jun  7 23:59:59 2024 GMT
        Subject: serialNumber=13574c86e103343f3accd7da39aff1383bc6c4a83ee18906a5926c304088376a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:92:17:34:24:36:08:39:e4:19:e6:7a:cd:00:
                    d3:89:18:04:ba:04:3f:db:93:88:a8:b8:18:24:62:
                    e4:ea:c0:3e:42:b3:b7:1c:6a:b2:aa:f5:9c:07:b7:
                    2c:b6:ee:5f:f9:5e:79:57:19:22:fa:b6:ae:b4:cf:
                    5e:a3:45:6c:23:b8:38:1a:94:ec:7f:5d:a8:04:bd:
                    ed:6c:bd:c7:84:af:65:ff:20:17:d0:e0:40:b3:5d:
                    af:a4:db:73:0f:14:76:9c:22:7b:8b:a3:2b:47:66:
                    09:3d:12:51:98:bf:c5:42:42:bf:9e:cb:b3:af:c9:
                    02:6e:ba:52:89:de:34:41:6e:53:7f:ad:0b:a4:01:
                    42:a6:db:79:3b:33:ae:05:4f:3e:d1:33:c4:f7:93:
                    e4:89:bb:43:cb:1c:a7:d0:f1:4a:79:7c:73:05:cc:
                    52:fb:48:7b:65:69:cc:6f:a8:cf:ec:06:0d:ca:ad:
                    00:06:30:9c:68:d4:4c:c0:31:49:7e:7b:b7:ad:cf:
                    2f:51:b6:0f:a3:54:41:a6:2c:bd:93:48:9e:98:52:
                    e1:78:e0:f9:a4:f4:32:cf:5e:28:75:57:a9:0a:58:
                    2e:5e:a6:7b:19:07:f0:8b:89:53:b0:aa:42:a2:97:
                    3d:37:9d:4c:b3:3c:3c:d7:7e:6b:31:c7:98:2c:13:
                    b7:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:E7:83:05:2B:C0:30:A8:34:5D:AE:CD:D1:65:79:0E:F9:95:45:BF
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d1b31785-506c-447f-b611-3ebb98f73ea3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.38.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         06:77:09:03:60:65:15:ce:33:7d:fa:53:49:94:ea:e0:b4:9d:
         10:e2:89:70:d6:38:87:19:14:1c:cd:86:57:6a:dd:ab:9a:17:
         22:e0:18:d5:43:6d:4d:b3:d9:0c:c7:0a:3c:b9:12:8a:c2:20:
         c4:42:ca:1b:86:db:f3:83:b2:7a:28:b9:03:5a:45:56:97:89:
         75:d0:61:80:ec:75:5c:18:df:c8:9a:a7:55:49:a8:eb:2b:30:
         38:6a:56:46:0d:d2:d7:ed:01:17:04:35:57:1e:26:9c:7d:71:
         a5:2c:ba:cd:94:1d:b5:2d:ae:4f:a3:db:0f:89:ad:3d:98:6c:
         a1:2e:17:22:44:84:37:26:7a:ea:97:2a:e9:e7:fd:5a:70:85:
         30:fd:52:f3:5a:c4:c5:26:dd:c7:a9:79:20:46:31:f0:08:27:
         ac:d3:eb:f9:ab:12:01:77:b3:21:ef:e2:74:2a:c4:ed:ba:e3:
         55:df:d6:ec:da:4b:95:86:ad:48:65:6d:d0:f5:ad:ec:5b:67:
         db:c7:36:58:07:a6:54:6e:74:41:09:fe:a1:e5:05:e5:ab:d5:
         27:0c:a8:a7:b4:e3:41:ce:ba:37:c2:a5:55:72:de:de:94:7f:
         b5:38:ca:71:19:0d:36:6c:69:49:c9:19:1c:d4:81:11:a1:a2:
         46:fb:5d:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 00:46:59 2024 by rpki-client on console-ams.rpki-client.org