Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/07f58bfc-fbdd-45c3-a585-760fa80fd005.roa
File:                     07f58bfc-fbdd-45c3-a585-760fa80fd005.roa (raw, json)
Hash identifier:          /vQQl2/VeuZS+zAkxtLtjYw7kB1m9/vzHkuHFwDe1JE=
Subject key identifier:   48:E1:D1:4E:E5:BC:C8:98:30:CE:4C:D0:39:BE:2D:9D:BA:A8:6A:40
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5DDFF73EDA4EF64FC009F632CD36DB469D90A8CD
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/07f58bfc-fbdd-45c3-a585-760fa80fd005.roa
Signing time:             Mon 15 Apr 2024 00:00:00 +0000
ROA not before:           Mon 15 Apr 2024 00:00:00 +0000
ROA not after:            Mon 20 May 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        16.130.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:df:f7:3e:da:4e:f6:4f:c0:09:f6:32:cd:36:db:46:9d:90:a8:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 15 00:00:00 2024 GMT
            Not After : May 20 23:59:59 2024 GMT
        Subject: serialNumber=e62fff349367de4f4bbb14f9f8d4a878516b45fb314cbfd80465e29c7b7f7799, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:22:96:28:22:39:80:07:12:9d:25:12:e7:93:
                    bf:aa:a6:1c:bd:cf:74:a9:47:4c:92:f9:ca:6b:fc:
                    4f:46:9b:82:a3:82:19:f7:96:98:6c:18:b4:75:c3:
                    66:64:bb:45:d5:a3:8e:b1:b4:65:1c:ed:67:1b:aa:
                    66:cf:ca:9a:5a:aa:09:fa:f8:75:d5:86:a1:68:ff:
                    9a:9e:66:92:ce:01:7a:a3:59:d0:1c:74:8d:4e:33:
                    16:31:5c:d4:01:6e:c2:c5:e5:9e:84:37:44:5d:95:
                    44:40:35:73:85:15:ec:0b:83:95:aa:35:ef:02:1f:
                    bf:c0:dc:0c:1f:54:23:04:fc:c6:e5:68:da:49:af:
                    16:03:42:f4:71:e4:f3:91:3e:b8:49:5b:39:c7:c5:
                    cb:d5:8e:fd:c7:eb:3b:aa:80:93:af:8f:9f:00:12:
                    65:0d:ff:f6:99:da:d1:02:68:c3:98:34:84:f3:3a:
                    08:f6:00:30:76:cc:0e:26:3d:8a:30:9f:c4:08:92:
                    b2:b9:7e:eb:28:3c:4e:bd:e6:7e:0e:a6:f2:0f:6a:
                    5d:ab:08:6e:e2:03:fb:e7:e2:fa:90:8d:52:7b:06:
                    8b:4f:58:c3:5b:02:fa:d1:ec:09:79:a3:68:71:bd:
                    96:76:dc:6b:4b:18:ca:6a:06:a3:00:ba:31:23:35:
                    25:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:E1:D1:4E:E5:BC:C8:98:30:CE:4C:D0:39:BE:2D:9D:BA:A8:6A:40
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/07f58bfc-fbdd-45c3-a585-760fa80fd005.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.130.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         8c:7e:9e:0a:e9:5b:2c:2a:88:23:ad:c7:68:8f:14:3e:10:6e:
         90:08:31:4c:01:26:36:08:e6:b0:75:2b:ed:03:79:a1:6e:87:
         90:58:e5:cf:d3:f6:d2:49:fa:77:53:4b:65:b2:54:d7:cd:4c:
         7d:12:15:08:c9:58:9a:95:09:9e:cf:80:e2:4f:28:a4:53:cf:
         59:dd:ec:4b:1b:f3:ae:0c:29:74:a4:b8:e4:d3:e3:83:ef:8b:
         a0:8b:99:c0:30:04:53:da:f9:54:0a:54:b9:7f:f0:c4:e1:5f:
         83:bb:3c:13:94:ca:41:4b:ed:32:50:ea:f2:b6:bf:17:72:10:
         d9:fc:a0:cc:71:54:02:74:1d:b6:4f:56:be:dc:50:bb:78:e3:
         2e:53:3d:68:b3:7f:e1:af:f0:28:97:a8:ae:ad:f0:35:95:0e:
         b9:ac:4c:16:eb:2f:49:71:a1:5e:af:ba:25:16:2d:96:9e:2f:
         00:37:36:10:52:d9:bd:56:e8:3a:e1:28:e7:b1:81:10:56:cf:
         2f:1e:00:3a:33:d1:93:cc:bb:25:92:35:e2:42:47:d8:98:29:
         54:d5:54:3b:75:13:81:cd:cd:bb:80:26:48:b9:e5:3f:19:9f:
         78:89:ee:a3:dd:79:79:dd:4a:b8:65:c1:83:a5:ef:4d:ec:07:
         6e:db:b3:5e
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUXd/3PtpO9k/ACfYyzTbbRp2QqM0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE1MDAwMDAwWhcNMjQwNTIwMjM1OTU5
WjB6MUkwRwYDVQQFE0BlNjJmZmYzNDkzNjdkZTRmNGJiYjE0ZjlmOGQ0YTg3ODUx
NmI0NWZiMzE0Y2JmZDgwNDY1ZTI5YzdiN2Y3Nzk5MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCYIpYoIjmABxKdJRLnk7+qphy9z3SpR0yS+cpr/E9Gm4Kj
ghn3lphsGLR1w2Zku0XVo46xtGUc7WcbqmbPyppaqgn6+HXVhqFo/5qeZpLOAXqj
WdAcdI1OMxYxXNQBbsLF5Z6EN0RdlURANXOFFewLg5WqNe8CH7/A3AwfVCME/Mbl
aNpJrxYDQvRx5PORPrhJWznHxcvVjv3H6zuqgJOvj58AEmUN//aZ2tECaMOYNITz
Ogj2ADB2zA4mPYown8QIkrK5fusoPE695n4OpvIPal2rCG7iA/vn4vqQjVJ7BotP
WMNbAvrR7Al5o2hxvZZ23GtLGMpqBqMAujEjNSULAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUSOHRTuW8yJgwzkzQOb4tnbqoakAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzA3ZjU4YmZjLWZiZGQtNDVjMy1hNTg1LTc2MGZhODBmZDAwNS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwAQgjANBgkqhkiG9w0BAQsFAAOCAQEAjH6eCulbLCqII63HaI8UPhBukAgx
TAEmNgjmsHUr7QN5oW6HkFjlz9P20kn6d1NLZbJU181MfRIVCMlYmpUJns+A4k8o
pFPPWd3sSxvzrgwpdKS45NPjg++LoIuZwDAEU9r5VApUuX/wxOFfg7s8E5TKQUvt
MlDq8ra/F3IQ2fygzHFUAnQdtk9WvtxQu3jjLlM9aLN/4a/wKJeorq3wNZUOuaxM
FusvSXGhXq+6JRYtlp4vADc2EFLZvVboOuEo57GBEFbPLx4AOjPRk8y7JZI14kJH
2JgpVNVUO3UTgc3Nu4AmSLnlPxmfeInuo915ed1KuGXBg6XvTewHbtuzXg==
-----END CERTIFICATE-----
Generated at Thu May 9 01:25:18 2024 by rpki-client on console-fra.rpki-client.org