Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/feee5eac-7d2c-4862-aecd-aa5d7f97c6ec.roa
File:                     feee5eac-7d2c-4862-aecd-aa5d7f97c6ec.roa (raw, json)
Hash identifier:          ehDW7u60cdLfIuyzsWJS2knEytq7aqDbFII8xtnMZNI=
Subject key identifier:   A6:62:C5:8D:C0:79:D0:5D:69:63:2F:CA:D8:59:5D:75:AB:F5:43:9C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       686448F0D09F5C2334D4CB2F0F4CC4D72727FE71
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/feee5eac-7d2c-4862-aecd-aa5d7f97c6ec.roa
Signing time:             Fri 10 May 2024 00:00:00 +0000
ROA not before:           Fri 10 May 2024 00:00:00 +0000
ROA not after:            Fri 14 Jun 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        57.180.0.0/14 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:64:48:f0:d0:9f:5c:23:34:d4:cb:2f:0f:4c:c4:d7:27:27:fe:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 10 00:00:00 2024 GMT
            Not After : Jun 14 23:59:59 2024 GMT
        Subject: serialNumber=5c80ca01c1d7b161ea3d55e45ecc78f105bd457141c048f609381f164b1e513a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:b5:a0:b8:b5:ee:4d:63:7d:56:87:4a:2f:5c:
                    64:9d:9b:55:b7:b4:0f:ef:1b:b5:a6:3a:5b:41:a9:
                    90:68:9f:a4:a0:a8:98:0c:e3:9e:cf:94:9b:2e:47:
                    04:02:a5:fa:ca:bd:ae:b4:85:ee:c2:cc:6e:56:c1:
                    8c:c2:e7:f9:d1:cd:05:07:a3:bd:d2:58:14:f5:57:
                    77:5d:3e:a7:30:18:f2:23:2b:fd:a3:51:c4:17:7f:
                    4c:6e:e7:8b:4d:02:71:a7:a0:45:c6:25:f2:a2:23:
                    cd:bc:97:4a:a2:be:bf:12:1b:49:50:e4:5d:1a:33:
                    13:b1:86:9b:fd:bc:df:a7:8e:a8:1f:88:e6:99:5f:
                    7c:9d:4b:fb:fe:69:d1:8f:a2:20:e4:45:9e:36:59:
                    8c:51:8c:14:5c:54:e0:76:6b:5f:03:0c:20:8d:34:
                    9b:b8:87:59:df:39:2a:8b:74:8a:e5:50:89:ed:67:
                    58:89:5c:53:2f:ce:36:9b:7f:a1:f6:77:42:af:fd:
                    03:5a:2b:1b:ec:49:f0:98:f5:77:e1:95:8e:7c:1b:
                    b9:4b:d6:92:89:76:cf:2d:7d:8e:07:6e:d5:02:d4:
                    ca:07:77:3c:7a:6f:e5:94:6d:eb:5c:a8:16:6b:46:
                    a9:e8:09:99:2b:05:ee:e4:42:f8:b4:1c:83:93:82:
                    33:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:62:C5:8D:C0:79:D0:5D:69:63:2F:CA:D8:59:5D:75:AB:F5:43:9C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/feee5eac-7d2c-4862-aecd-aa5d7f97c6ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  57.180.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         60:eb:d2:8a:5b:b9:f6:a1:ee:ba:ef:08:3d:e7:e2:39:57:cb:
         01:a7:a9:89:5a:9e:a7:7d:fc:0a:20:d2:a8:e7:d1:50:16:3d:
         31:09:80:83:bf:10:12:5d:56:20:81:f1:5f:84:1c:95:8e:4a:
         6d:19:c2:e4:c0:f2:fe:af:36:a3:87:23:13:0e:91:25:7b:62:
         25:9b:96:e4:b0:54:5e:85:e8:ff:b1:f9:f0:d2:67:66:3e:8c:
         b2:c9:06:e9:73:e1:95:a1:47:55:66:22:ea:b8:c9:d5:09:b2:
         de:f6:01:10:85:c5:2a:37:5d:2b:ce:b1:ad:97:38:03:7a:02:
         3e:ce:15:a9:68:e9:af:63:fb:07:54:25:1e:95:5d:4b:30:0e:
         70:5b:f8:91:7c:4f:92:c6:9f:8a:9c:db:d9:80:54:f3:fd:19:
         f7:fe:6b:08:d2:95:36:1b:08:ba:4f:98:fc:4d:c9:3f:ca:d4:
         fb:64:b4:2e:5d:f5:b6:89:6a:29:6d:f0:56:ef:71:d2:fc:ff:
         e1:5a:f5:a6:48:1d:21:2f:48:ec:35:b5:ae:58:20:28:a1:99:
         16:9d:0c:00:41:d7:92:fc:c1:19:e4:52:96:0a:63:14:0e:d0:
         59:c1:35:59:87:fd:2b:9a:9d:64:f9:39:68:5a:e9:84:0f:f3:
         54:25:3d:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 02:07:08 2024 by rpki-client on console-fra.rpki-client.org