Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0343534b-f673-4820-a35c-761953dd8136.roa
File:                     0343534b-f673-4820-a35c-761953dd8136.roa (raw, json)
Hash identifier:          SosHgQ6r0Uk16tMrCzGIl5JAdGeldp8TvTC2U9zEsCE=
Subject key identifier:   01:E2:56:4D:17:87:0D:4D:01:E2:1B:43:C2:10:A4:BC:51:3E:34:E7
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6CF850E48EFC593F32D784EDB23D1EE405CB47BD
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0343534b-f673-4820-a35c-761953dd8136.roa
Signing time:             Wed 06 Nov 2024 00:00:00 +0000
ROA not before:           Wed 06 Nov 2024 00:00:00 +0000
ROA not after:            Wed 11 Dec 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        216.73.208.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:f8:50:e4:8e:fc:59:3f:32:d7:84:ed:b2:3d:1e:e4:05:cb:47:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  6 00:00:00 2024 GMT
            Not After : Dec 11 23:59:59 2024 GMT
        Subject: serialNumber=b33ecdfcdf8211f84971bf574111412684b8cd8d5d6fc1c688c38d39a2835391, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:1b:9e:ad:02:b5:00:87:33:3d:17:8a:ff:da:
                    15:06:3c:c4:e7:01:6c:0e:1c:1b:e7:af:ac:93:de:
                    8c:6d:6b:f6:81:8f:9d:a0:2b:0e:ae:55:ff:a7:4d:
                    b9:c3:26:2a:df:9f:07:71:d9:7c:11:de:7f:61:0b:
                    79:f6:cb:3b:a9:b7:3b:0f:89:8e:64:c0:b9:28:74:
                    9a:a8:ff:52:c4:76:96:55:a6:69:60:c5:42:c4:63:
                    58:21:be:92:7c:66:1a:5a:ad:dc:ea:a9:b4:63:c2:
                    08:1a:de:1a:24:d5:1f:ad:42:9f:ee:33:49:81:df:
                    4d:e6:ec:e3:8d:67:46:5f:84:bb:94:f7:10:fd:31:
                    cd:b3:90:4d:3a:21:d5:37:6c:de:fb:15:d7:eb:04:
                    b5:b3:49:05:a8:e0:23:da:f6:58:43:5d:4c:09:a1:
                    7e:45:87:2c:02:11:14:72:74:3f:23:92:05:5d:e2:
                    5b:44:c4:83:85:b6:30:98:8f:0b:2d:63:88:0d:1f:
                    b5:a7:05:52:c5:d2:3a:7f:04:d0:98:95:33:a5:2d:
                    68:fd:2e:61:0a:31:fe:5f:d2:0d:ec:dd:67:07:a9:
                    00:a7:b6:ed:57:cb:1d:fa:64:80:d2:db:46:3e:12:
                    ff:83:57:ac:25:5a:28:86:7a:63:97:07:1b:d4:fd:
                    d1:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:E2:56:4D:17:87:0D:4D:01:E2:1B:43:C2:10:A4:BC:51:3E:34:E7
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0343534b-f673-4820-a35c-761953dd8136.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.73.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         76:26:80:fd:de:1d:bc:f3:f5:be:2d:2b:d0:68:6f:40:61:59:
         f5:97:82:15:1c:5f:f1:d3:b6:b7:73:40:07:b6:5c:99:be:ab:
         d0:3c:83:74:6e:11:51:a0:b6:10:13:41:5c:cd:f8:00:37:ba:
         2c:46:3a:db:04:47:08:c9:d2:cb:56:08:30:01:08:fe:90:6d:
         11:d0:f9:a9:10:ea:0f:d6:92:bd:e1:d5:c5:ef:9c:73:ba:ee:
         6b:60:b1:60:95:f4:d1:0c:7c:0e:14:f5:24:56:2b:d9:a5:c3:
         c7:18:51:ff:5e:03:62:09:7a:5d:c7:cd:ab:27:99:11:23:e4:
         81:b3:1e:ef:dc:17:b1:05:a2:17:2f:d7:a3:43:4e:7f:47:ac:
         c9:60:f5:26:cd:5f:ff:f5:57:02:89:75:59:2b:2c:dc:33:67:
         93:ca:d4:8b:63:2d:8f:d7:6a:df:f2:81:5b:a4:f5:a3:f2:56:
         ee:49:6d:5c:d5:62:35:7b:94:8f:b4:2d:f5:a3:0f:3d:36:6e:
         89:5b:de:39:86:ce:2f:79:20:f3:1b:d7:18:a3:55:5a:75:14:
         d2:76:74:28:a8:e6:d0:12:11:2a:eb:bd:ec:71:af:95:e7:e1:
         ab:0f:c4:81:1d:4d:db:3e:95:56:db:68:04:6d:76:a2:83:75:
         2c:2c:0d:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 02:57:13 2024 by rpki-client on console-fra.rpki-client.org