Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/059befdb-c986-4ee7-9140-f4cc1f22c5ad.roa
File:                     059befdb-c986-4ee7-9140-f4cc1f22c5ad.roa (raw, json)
Hash identifier:          ksVtykxhp7m41tKwFoQjc2CMf4yJhsYAhrWwU7rmm44=
Subject key identifier:   43:53:27:63:84:69:86:81:93:54:8C:3F:BF:46:3D:C6:A8:F8:D1:89
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4263FA10A4214D77533E978022C244FF6B95E6A5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/059befdb-c986-4ee7-9140-f4cc1f22c5ad.roa
Signing time:             Tue 05 Nov 2024 00:00:00 +0000
ROA not before:           Tue 05 Nov 2024 00:00:00 +0000
ROA not after:            Tue 10 Dec 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        16.154.0.0/15 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:63:fa:10:a4:21:4d:77:53:3e:97:80:22:c2:44:ff:6b:95:e6:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  5 00:00:00 2024 GMT
            Not After : Dec 10 23:59:59 2024 GMT
        Subject: serialNumber=5b8f7037c4feacd04ecc8220f3a0de8c67ba5ce76b31e2e38ddfc7e659ab494e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:fe:c0:27:b5:3c:d9:89:38:ec:3c:51:16:13:
                    58:71:88:8d:8b:89:b7:a9:85:e0:a4:ea:c5:d1:68:
                    f0:a8:a6:f3:02:2d:75:79:bc:de:4b:51:ef:44:71:
                    66:68:9d:6f:56:fa:7a:28:05:09:2a:b6:ac:a3:f4:
                    45:1e:de:ea:79:cd:11:5f:fb:2e:a4:4e:35:f6:6d:
                    f0:f2:11:ff:b4:fa:ad:70:a5:3f:70:50:fa:ee:82:
                    a6:8c:0e:02:14:b5:1e:2b:22:d4:82:70:fa:bd:0d:
                    ab:a9:e6:ac:52:6d:68:fb:32:00:51:c3:6b:95:1b:
                    31:39:3b:79:92:f5:74:0d:c5:00:1e:6d:83:bc:5a:
                    5f:08:ab:5d:26:6d:3f:1f:cf:0e:c8:10:ea:77:1b:
                    90:5b:fb:31:c8:98:34:66:1a:2c:37:d6:a3:2e:7b:
                    92:70:dd:a5:68:aa:84:df:ec:a4:f5:df:19:98:29:
                    a5:7e:d5:4c:f1:b0:2d:fc:b1:08:2a:69:f0:07:5e:
                    ca:93:72:46:f3:0d:2d:81:ff:d9:0f:59:6c:5a:b3:
                    f4:79:1a:63:9b:b6:51:d8:63:c4:32:2e:2a:5f:71:
                    06:d9:f1:17:f5:2d:0a:1d:a0:4e:d6:f5:ff:ee:6f:
                    ac:e2:b8:8f:b2:06:d5:05:e8:e8:39:d9:7c:6b:32:
                    73:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:53:27:63:84:69:86:81:93:54:8C:3F:BF:46:3D:C6:A8:F8:D1:89
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/059befdb-c986-4ee7-9140-f4cc1f22c5ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.154.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         82:a8:5e:d7:af:d4:d6:33:96:ce:47:e0:07:d2:2c:2f:43:7d:
         60:5b:21:aa:bf:51:22:c2:f9:f9:bc:f8:95:5e:04:ff:e2:36:
         30:dd:45:53:f9:15:e3:27:e9:c5:39:2d:9c:d2:cf:3e:82:ec:
         c7:2b:d4:82:3e:f9:47:f6:8b:55:71:b0:74:09:9a:61:87:9b:
         cf:1b:81:4e:96:15:57:68:57:c0:35:62:ca:2f:3d:ab:fe:0b:
         f3:bd:a1:ca:7c:6c:37:b0:cf:36:0c:71:f0:12:7f:5f:54:7d:
         b3:27:16:2e:84:4e:91:89:c4:f0:ae:cf:e0:39:3c:90:0b:d6:
         e1:98:19:d5:95:af:6a:9d:0d:46:75:fa:49:c2:96:71:74:08:
         3b:8e:8f:85:10:d9:94:09:a8:a0:72:fc:c2:b8:ed:7d:36:5f:
         65:ef:c1:d4:7f:33:86:ae:97:1c:8e:02:a7:e0:7c:33:ce:4b:
         6c:c7:e3:68:04:cd:7a:1e:b0:e6:c8:0a:77:57:c7:f8:f0:88:
         13:8d:3a:af:f2:f1:df:de:ef:1b:e7:5b:18:2a:e3:96:66:32:
         fa:60:e5:43:99:29:35:5b:1c:5a:bd:6c:28:ac:93:dc:b1:80:
         31:f6:ea:6b:f9:3d:54:c9:6f:60:90:fe:d3:6d:f2:94:76:f7:
         e4:12:26:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:02:16 2024 by rpki-client on console-ams.rpki-client.org