Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/036329c0-71d8-455b-b274-71838bbade22.roa
File:                     036329c0-71d8-455b-b274-71838bbade22.roa (raw, json)
Hash identifier:          YOWQ+TKEi2YHW7Sim2i+Axpw/NL98/j4z0MP9fghwfg=
Subject key identifier:   F2:13:FE:9E:8E:92:80:50:CA:13:5F:93:A3:5C:51:C5:65:CB:0B:4F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7BE3AFD893030009F9A0E913A2005F38D765A1
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/036329c0-71d8-455b-b274-71838bbade22.roa
Signing time:             Tue 16 Apr 2024 00:00:00 +0000
ROA not before:           Tue 16 Apr 2024 00:00:00 +0000
ROA not after:            Tue 21 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        159.180.0.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:e3:af:d8:93:03:00:09:f9:a0:e9:13:a2:00:5f:38:d7:65:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 16 00:00:00 2024 GMT
            Not After : May 21 23:59:59 2024 GMT
        Subject: serialNumber=dcedf78aec33d4aa8fe0e59fae811e4e19ab4194c75d4efc10a8fd1e26cd3bd2, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:96:f7:86:32:a8:60:21:c4:fc:4d:17:68:74:
                    af:f1:5d:db:03:9b:a1:51:3a:7a:29:fc:b3:9d:10:
                    5d:37:c6:59:4b:0c:ca:66:4e:f1:9d:62:ec:19:92:
                    13:f4:79:a8:26:36:f2:23:a2:e7:f5:29:e3:10:1a:
                    3c:c1:32:5c:ed:b8:68:5d:4e:94:0f:8b:49:31:5d:
                    0a:79:b6:a8:2b:90:13:47:76:76:89:2c:7b:05:82:
                    a2:80:ca:ed:20:f1:4d:8d:a5:12:ec:b3:52:be:8b:
                    61:76:12:a2:7e:bf:dc:b2:af:00:db:db:6b:cc:78:
                    07:a2:6f:c3:67:fe:e7:b4:31:4b:66:96:d1:da:45:
                    b1:04:42:d4:32:60:54:55:a9:3c:ab:82:34:d0:65:
                    5b:89:8a:5c:84:cb:7b:6e:b8:9d:a7:5f:0c:1b:76:
                    e0:e6:fa:b7:6b:bb:f9:8b:24:df:83:8d:62:f9:75:
                    c6:2d:e4:56:f0:7d:f9:d0:3f:81:43:43:6a:28:cf:
                    4b:fc:f0:86:2e:72:a3:21:e1:e7:cd:41:80:57:6a:
                    28:93:09:e1:d9:ee:c9:bf:4b:8d:85:66:74:0c:87:
                    67:7c:7c:bd:59:61:a5:f2:3f:d9:d2:37:27:5e:03:
                    ce:6c:56:55:b7:23:e9:e8:fd:8c:8a:47:09:e4:32:
                    1f:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:13:FE:9E:8E:92:80:50:CA:13:5F:93:A3:5C:51:C5:65:CB:0B:4F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/036329c0-71d8-455b-b274-71838bbade22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.180.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         75:d0:0a:6c:1e:af:f3:b9:23:66:97:82:b4:82:b5:97:51:ce:
         76:a6:45:78:ca:3b:b0:2e:3e:92:80:91:7c:30:7d:8a:83:54:
         38:94:0d:46:a4:3e:e1:ac:cd:8c:bd:69:58:4b:90:5a:ea:eb:
         07:17:9c:39:ed:ae:f5:d1:51:20:8b:4a:53:29:5b:51:ed:b0:
         4f:a3:ca:d8:7b:7c:0c:9f:cc:4a:c0:b9:9e:32:a7:fd:5b:9e:
         c7:0c:c2:77:20:d4:7a:82:3a:1f:eb:82:de:2f:94:c3:c4:82:
         3a:a3:fc:39:67:c9:41:55:ff:7f:b9:62:ce:6a:94:78:e5:f3:
         0f:c0:68:91:fc:cc:c7:24:58:4d:5c:f5:d6:07:22:35:7e:f3:
         25:2b:7c:4d:2f:9c:6b:dc:e8:5a:90:06:97:81:56:ea:73:15:
         85:0a:48:fe:79:13:7b:4f:b4:e8:a0:40:1a:64:d9:58:8c:a4:
         c8:42:a9:4a:1a:d6:ba:30:82:6a:24:85:3f:9c:bf:46:77:a9:
         27:ca:1a:60:ec:92:d0:06:d0:de:2d:ce:60:9f:9e:22:68:4f:
         9f:01:6e:b7:db:2f:90:b4:a4:81:b1:d4:5c:19:51:47:d2:c2:
         95:8e:74:4d:08:3c:6d:c8:00:d4:63:6e:ca:0f:8c:6f:79:17:
         21:2d:d8:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 00:47:16 2024 by rpki-client on console-ams.rpki-client.org