Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f248a53f-e5b6-4e54-bd78-942b18e4e340.roa
File:                     f248a53f-e5b6-4e54-bd78-942b18e4e340.roa (raw, json)
Hash identifier:          S6lld9yR9r85DPY1gRO5oCf3JXWYke9AhoaEYQyJDAw=
Subject key identifier:   58:58:76:BB:74:04:B4:2C:BD:26:36:33:6E:24:13:76:91:DE:93:18
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       34324CAE0F0435571472001916858CE135732760
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f248a53f-e5b6-4e54-bd78-942b18e4e340.roa
Signing time:             Thu 18 Apr 2024 00:00:00 +0000
ROA not before:           Thu 18 Apr 2024 00:00:00 +0000
ROA not after:            Thu 23 May 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        209.92.6.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:32:4c:ae:0f:04:35:57:14:72:00:19:16:85:8c:e1:35:73:27:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 18 00:00:00 2024 GMT
            Not After : May 23 23:59:59 2024 GMT
        Subject: serialNumber=0bf019f6527f222fb59fb35c0975436de0d09223b619b42a543baf5b1d420a98, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:0c:1d:79:fe:1a:54:9b:ba:a9:ed:c9:ab:e0:
                    76:6d:12:4f:e6:c7:79:67:27:42:02:9e:1b:50:7a:
                    dc:03:90:e1:70:d8:20:f0:3b:f2:ab:8c:6d:94:83:
                    e4:1c:93:8f:05:ef:ec:7a:0f:6e:98:0a:6b:b4:37:
                    ab:9e:ae:58:20:91:a7:03:01:27:9e:05:97:32:6d:
                    76:3a:f3:e5:e3:54:71:33:09:dd:2a:bb:90:4f:57:
                    75:2b:0e:c4:69:66:f0:c8:cb:5c:77:c7:5e:1c:09:
                    04:a8:41:ce:56:04:77:b6:93:c0:3a:52:ce:ef:c0:
                    eb:14:db:cc:eb:ad:46:bd:18:b5:73:95:51:0d:45:
                    37:fa:83:40:c3:50:21:69:5f:ba:d7:c1:01:ac:8f:
                    b2:85:cf:3f:79:03:e9:92:66:d3:32:a2:9f:53:00:
                    d1:34:29:84:a1:a0:46:73:e2:e7:cb:7b:2b:df:ef:
                    71:fe:ef:d5:be:37:31:23:87:7c:56:ce:35:a2:3d:
                    f4:f4:ed:c8:29:73:cf:b7:63:58:8d:b7:c9:e9:d2:
                    ac:6a:5d:c9:a3:a5:75:e9:e7:94:35:df:e7:0c:14:
                    d0:13:f4:2b:93:61:ba:c1:18:c2:ae:b1:bf:ea:8c:
                    b7:f7:4b:25:17:30:e9:81:25:c6:c7:4b:8c:a6:b6:
                    db:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:58:76:BB:74:04:B4:2C:BD:26:36:33:6E:24:13:76:91:DE:93:18
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f248a53f-e5b6-4e54-bd78-942b18e4e340.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.92.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:89:00:cb:a5:f5:28:a4:d7:62:6a:74:0a:0b:9e:bb:ff:6f:
         2e:ae:04:8a:4b:aa:83:14:1f:91:a1:e4:67:8e:55:6e:03:83:
         32:68:46:85:1a:fa:ac:05:a0:0a:fd:c0:19:3f:31:1f:6a:13:
         48:b0:d1:5d:f6:9e:08:aa:91:10:bf:fd:33:ca:e5:20:90:9c:
         5a:0c:c0:4f:d6:9f:34:a1:19:04:3b:d5:4c:91:de:64:e2:92:
         45:ad:dc:0c:2f:29:1e:be:91:0d:60:03:6b:ab:89:37:94:1e:
         39:41:32:ab:c1:db:d3:34:dd:12:d1:b1:68:bf:ba:a6:0e:b7:
         44:f7:5f:c3:61:41:d5:74:6d:8e:0e:fd:49:8c:0a:25:92:05:
         c7:72:a0:39:85:88:53:74:a5:a8:c3:08:61:b5:09:6c:4d:69:
         d6:52:4d:77:a2:e3:25:5d:dc:e1:59:17:e1:d7:21:60:34:7d:
         79:82:e6:f4:c4:ed:db:3d:44:70:21:cc:ae:d1:d8:e4:6d:6d:
         4d:f4:1a:51:b6:80:f4:fb:bf:a4:6e:a4:d2:c8:bf:af:be:b8:
         50:25:89:6b:7d:74:91:83:37:0d:f0:74:22:f2:1b:27:cb:58:
         34:20:6b:f4:9f:67:7d:0d:0c:dd:4c:e6:16:82:12:2f:f6:40:
         b4:54:a8:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 01:12:15 2024 by rpki-client on console-ams.rpki-client.org