Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/025150e4-3554-46e0-b154-31e95b8e3530.roa
File:                     025150e4-3554-46e0-b154-31e95b8e3530.roa (raw, json)
Hash identifier:          Pka6LNutHVOisReyk+Ifw1fdKNWj6LYTwyBNOXF2bcg=
Subject key identifier:   1E:CE:6C:B4:60:58:F8:6A:0D:0F:85:0E:A6:91:23:04:CD:BC:C9:1C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7E73A904A4B765AEE015E2EB4E6BB7B07EC7287F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/025150e4-3554-46e0-b154-31e95b8e3530.roa
Signing time:             Mon 04 Nov 2024 00:00:00 +0000
ROA not before:           Mon 04 Nov 2024 00:00:00 +0000
ROA not after:            Mon 09 Dec 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        40.181.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:73:a9:04:a4:b7:65:ae:e0:15:e2:eb:4e:6b:b7:b0:7e:c7:28:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  4 00:00:00 2024 GMT
            Not After : Dec  9 23:59:59 2024 GMT
        Subject: serialNumber=3df1e11a4359338f328ba6f8b78d0ba31c110c6a3ad804081fd0599a66f75220, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:05:ef:4d:4f:4c:12:92:c7:50:a4:23:7b:24:
                    ef:02:9d:6a:8f:60:0b:f0:32:f7:92:e5:63:22:f1:
                    57:6a:4a:f2:31:01:15:c7:6b:80:c2:ae:14:43:1b:
                    3c:6e:79:54:ab:03:ac:94:65:e0:63:76:9c:8e:3e:
                    a7:8c:7a:d9:7f:f4:06:e2:36:f2:72:da:1b:e2:98:
                    b1:c0:68:fd:22:97:3c:03:c1:a6:2c:3d:08:07:73:
                    82:0f:08:68:a7:10:17:27:04:2b:b0:b7:0f:b8:55:
                    bc:3c:cd:9a:b6:10:1e:69:eb:24:fb:4f:2b:f2:6c:
                    8c:9b:91:22:07:52:be:69:20:2a:a1:33:d7:17:4b:
                    21:c8:91:1b:0a:b9:fb:6b:24:c4:24:05:31:ae:63:
                    aa:05:2b:28:5b:32:bf:72:c7:77:9b:c2:40:b4:bf:
                    7b:ce:52:43:8a:51:44:fe:4b:8d:40:65:79:f7:27:
                    e9:78:43:63:d4:22:ad:4c:00:4d:1a:30:ca:21:4c:
                    e8:44:59:6a:b5:ed:82:94:a9:9f:f4:43:c7:c2:e1:
                    ef:df:f0:63:62:e0:c3:0c:06:84:15:76:4c:70:ee:
                    88:dc:8d:df:7e:81:67:ef:b9:d7:e0:2e:7e:da:91:
                    d2:36:c1:fb:17:6f:58:32:2d:b6:25:13:2f:49:27:
                    e0:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:CE:6C:B4:60:58:F8:6A:0D:0F:85:0E:A6:91:23:04:CD:BC:C9:1C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/025150e4-3554-46e0-b154-31e95b8e3530.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.181.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         54:7a:42:de:1d:7a:0c:50:90:85:37:73:77:50:60:8d:50:68:
         86:85:2e:cb:4c:13:98:b9:c8:7b:a1:eb:84:65:75:84:1b:b0:
         e0:f3:b7:fc:9a:a6:ba:78:ba:20:68:b5:5a:bc:77:36:de:98:
         4e:a0:01:ef:09:99:bb:20:29:d6:a6:66:27:f3:7d:1b:80:1d:
         2b:cf:12:b9:9e:43:e4:a1:55:3d:27:cc:2a:31:63:59:5f:df:
         1b:b1:2c:8c:7a:17:bb:86:e5:1b:58:99:49:d9:e0:bf:e8:4f:
         27:b8:6a:91:31:c4:3e:b5:75:85:89:45:4e:cc:1f:fb:72:fc:
         18:d3:61:0c:79:c3:ae:07:14:1d:f6:1c:fb:0f:e3:b3:88:b7:
         72:33:52:44:a9:bc:6d:4a:53:ff:0a:2f:50:90:fd:bf:53:eb:
         94:ff:e8:f5:f6:66:b0:9a:d1:fa:1e:dc:d6:2a:bf:0f:d0:da:
         37:15:34:37:25:18:cc:70:78:f8:f0:02:58:67:3e:ba:6a:4a:
         e3:c6:c0:86:96:8e:94:29:de:74:e8:83:5e:f2:da:8c:85:85:
         8b:8a:32:1e:73:f1:42:e6:09:4f:c4:53:d2:91:96:3f:7e:4e:
         2f:50:68:40:8b:0e:b5:de:ef:3c:cb:81:67:8c:8e:ad:5d:3b:
         8e:ba:96:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:02:15 2024 by rpki-client on console-ams.rpki-client.org