Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/036d88bc-feb7-432c-876d-8d9997a7b733.roa
File:                     036d88bc-feb7-432c-876d-8d9997a7b733.roa (raw, json)
Hash identifier:          M/AByX5KrthUN3GLh5ie+WHU7lBzV3S63r1Ho/PkT0M=
Subject key identifier:   AC:C7:E1:97:E0:1E:F5:4E:71:7A:75:BD:60:D2:61:8F:33:01:02:59
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0C6DAF6A1DEAA1E5FF3144002940220CA5754520
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/036d88bc-feb7-432c-876d-8d9997a7b733.roa
Signing time:             Mon 15 Apr 2024 00:00:00 +0000
ROA not before:           Mon 15 Apr 2024 00:00:00 +0000
ROA not after:            Mon 20 May 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        15.178.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:6d:af:6a:1d:ea:a1:e5:ff:31:44:00:29:40:22:0c:a5:75:45:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 15 00:00:00 2024 GMT
            Not After : May 20 23:59:59 2024 GMT
        Subject: serialNumber=6ca5270e93d7af6f1a0a8150d6c81e738f275e32776a065c85b5b2b85fee6458, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a1:50:4d:1c:6b:76:6b:24:5f:32:70:3e:31:
                    fd:96:3d:aa:7c:7a:d1:a1:c9:9c:00:a4:90:bd:0d:
                    4f:8d:c8:5a:a0:fa:df:e5:81:08:7a:b2:4b:ea:0b:
                    72:57:1d:6d:ec:3c:ba:f4:3a:0b:53:b9:1c:c2:58:
                    eb:2e:2b:3d:fc:4b:c2:1b:91:b9:ec:20:56:80:8a:
                    bb:9c:76:ae:6d:85:ad:80:aa:b8:8c:d2:e1:76:82:
                    9c:30:58:ca:71:22:77:4b:f3:54:46:c3:08:a2:00:
                    9f:0c:e8:b7:77:96:4f:b3:b5:46:80:20:88:12:87:
                    31:58:07:c2:fa:4c:4d:da:32:b0:64:66:86:ce:ea:
                    dc:c5:d5:44:95:b3:66:fe:35:75:0c:56:86:07:17:
                    c6:d9:51:fe:2e:00:fc:57:77:5a:1f:e6:52:c3:6d:
                    9e:64:91:3b:eb:01:ac:6c:42:dc:58:14:ef:70:30:
                    54:75:da:74:9f:d7:6f:bb:82:7b:de:c6:63:6a:e8:
                    48:1d:09:e7:1a:c0:01:0c:fc:9a:60:0d:af:e3:1c:
                    93:ed:f3:b9:6a:e0:aa:b9:d3:c7:38:7c:9e:b0:f2:
                    f9:44:16:4e:24:82:71:47:0b:d4:8a:07:08:ed:6a:
                    35:1f:af:72:4b:cd:c9:26:46:2c:d1:af:d6:79:67:
                    26:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:C7:E1:97:E0:1E:F5:4E:71:7A:75:BD:60:D2:61:8F:33:01:02:59
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/036d88bc-feb7-432c-876d-8d9997a7b733.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.178.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         6e:14:67:e7:da:e8:3a:eb:82:ac:00:a9:45:44:6e:08:45:0d:
         b6:57:78:da:0e:b9:51:13:65:34:fc:82:43:50:1c:97:10:28:
         72:30:95:f1:ce:a3:f6:b8:38:bd:a6:24:d2:a0:3b:4f:ea:ff:
         a1:2d:23:f9:94:dc:7d:a4:b2:b0:50:f0:bb:80:b1:cb:4b:c4:
         c0:29:e1:c8:88:e3:ba:f8:ee:f3:b0:d5:9e:3a:e3:db:54:74:
         14:1d:ca:ad:b8:75:ff:64:f2:bc:8e:3f:45:b1:d1:28:d3:53:
         e6:22:54:5f:46:58:b8:fc:23:74:ad:3b:47:f3:60:26:ca:f6:
         1a:47:38:dc:4e:35:7e:e1:2d:c1:83:0c:97:68:4b:b5:fb:1c:
         4a:b4:ad:6c:05:90:34:ed:ee:46:01:08:9a:09:b0:40:1d:e4:
         be:cc:ce:1a:34:67:7d:8a:32:63:2e:40:6d:02:ed:0d:66:03:
         cb:c0:e4:e3:55:5d:c0:35:bd:c8:d3:37:ef:19:0d:fa:16:d5:
         98:e8:c5:29:67:88:16:96:11:7e:ec:cf:46:f5:2a:3d:cd:dd:
         e7:74:ca:74:c6:19:e0:39:06:0d:98:d8:8c:35:47:e0:e0:4b:
         77:50:5b:1c:a0:c6:a3:77:e3:9a:31:af:b0:d6:21:9b:78:b5:
         0d:d0:ec:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 00:51:58 2024 by rpki-client on console-ams.rpki-client.org