Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/07695761-8a08-4e9d-84f2-8ddd5510cbad.roa
File:                     07695761-8a08-4e9d-84f2-8ddd5510cbad.roa (raw, json)
Hash identifier:          RLbdvZP8dOwgBd2OMAn6GwvucfGPaMIJOuotzfNqLyo=
Subject key identifier:   80:C3:7C:CB:27:C2:63:6A:1E:A8:F1:C7:99:CA:28:3E:8A:34:33:58
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3A5180458A7E15FD916E8949620CA88D85DAA077
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/07695761-8a08-4e9d-84f2-8ddd5510cbad.roa
Signing time:             Mon 11 Nov 2024 00:00:00 +0000
ROA not before:           Mon 11 Nov 2024 00:00:00 +0000
ROA not after:            Mon 16 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        16.174.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:51:80:45:8a:7e:15:fd:91:6e:89:49:62:0c:a8:8d:85:da:a0:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 11 00:00:00 2024 GMT
            Not After : Dec 16 23:59:59 2024 GMT
        Subject: serialNumber=0642349004c1dd00bac9c5e577fd1dfc81fbab72cfc747de712581471c45bbe3, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:dd:84:3f:14:43:7d:ca:2a:e7:9e:41:31:f4:
                    3a:e5:ae:40:5c:38:73:53:e3:04:5c:d7:c3:9f:bb:
                    89:22:33:36:4c:8e:e9:3d:16:b7:69:ca:5a:e6:e5:
                    11:4e:0b:d6:03:d8:47:c7:30:52:77:25:08:09:5c:
                    45:e7:c0:65:29:8c:77:97:15:00:cf:65:3b:a4:55:
                    3e:ba:2d:0a:03:3e:c1:9d:c3:0c:fa:5a:a1:78:5c:
                    b8:c2:09:3e:9b:2c:4f:e6:3d:d1:c3:b2:b7:fb:89:
                    65:fe:c1:e4:d2:99:45:16:b6:6c:b5:d4:dd:52:d9:
                    95:50:22:8a:5f:86:c9:e6:57:80:06:d9:bc:14:42:
                    a5:e8:65:54:11:9d:de:1e:79:4a:b0:24:d2:c8:3e:
                    38:d8:49:3f:42:53:a4:73:5d:18:6c:e0:64:1f:ef:
                    f6:41:76:de:2a:49:2f:32:7b:c9:39:21:da:28:00:
                    84:9e:01:42:b8:17:e3:13:6d:fc:6c:1d:3b:96:e2:
                    d4:61:ba:f6:5a:70:7c:c9:6d:ba:82:29:76:89:2b:
                    dd:15:e1:47:f5:1b:97:b3:08:7f:61:fc:56:98:a6:
                    10:1e:4b:fb:1d:b6:73:ff:67:5a:c0:64:aa:c8:03:
                    41:13:c3:70:79:a4:45:16:a6:00:3c:16:71:e8:bb:
                    15:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:C3:7C:CB:27:C2:63:6A:1E:A8:F1:C7:99:CA:28:3E:8A:34:33:58
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/07695761-8a08-4e9d-84f2-8ddd5510cbad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.174.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         1b:e9:d9:3f:4c:9a:9e:39:2d:93:be:95:14:35:70:48:b3:e8:
         0d:03:c7:f2:8c:9c:7c:28:f8:2e:f2:0b:6d:a6:5a:8e:8d:a1:
         5e:4e:c3:77:d4:9b:07:5d:59:63:9c:dc:ce:af:a5:82:ae:58:
         e6:b9:e2:5a:49:ef:15:99:0f:0e:89:65:55:83:9b:6a:da:99:
         c7:5a:eb:13:2b:a4:4f:a1:62:23:7e:9f:d0:98:72:5a:f3:78:
         25:30:fd:2a:5a:3d:92:de:9e:18:78:30:d5:7f:8d:ba:f1:1e:
         04:6e:53:92:32:f2:cc:11:36:52:b3:90:57:55:a0:e1:30:3f:
         ec:f7:b3:c5:a0:f1:ea:57:ea:47:3c:a5:df:04:95:b5:17:20:
         57:b8:00:85:44:61:07:80:4c:dd:f5:e2:7f:ed:27:4f:36:e6:
         6b:a2:6c:21:75:fa:57:bf:29:56:31:39:fb:9a:b1:ec:74:58:
         73:09:6d:06:6f:c8:b0:38:8b:15:e5:a1:77:4e:d6:30:87:5d:
         b1:6a:86:b1:77:43:b0:f9:b4:75:95:82:0b:07:65:d1:b6:ff:
         b8:96:5f:bc:ca:cc:55:bd:8a:eb:97:ee:e1:93:d2:1b:7f:c0:
         e7:2c:a9:8f:19:f8:1d:5a:c6:3e:59:bc:c9:a1:93:23:06:5b:
         0e:2b:3f:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:07:39 2024 by rpki-client on console-fra.rpki-client.org