Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0dc15f74-b809-4877-98b6-06e1faec41e2.roa
File:                     0dc15f74-b809-4877-98b6-06e1faec41e2.roa (raw, json)
Hash identifier:          oeFQvt/93pIbRmXxd7DxwA7P4UcNTV2SdCtaZnCjqlY=
Subject key identifier:   46:EC:F0:BF:25:91:15:5E:71:18:8A:A8:60:30:21:37:EE:31:21:6A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       74648A59F43CB6AC749EB1B60BA31401597933A8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0dc15f74-b809-4877-98b6-06e1faec41e2.roa
Signing time:             Mon 15 Apr 2024 00:00:00 +0000
ROA not before:           Mon 15 Apr 2024 00:00:00 +0000
ROA not after:            Mon 20 May 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        75.47.0.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:64:8a:59:f4:3c:b6:ac:74:9e:b1:b6:0b:a3:14:01:59:79:33:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 15 00:00:00 2024 GMT
            Not After : May 20 23:59:59 2024 GMT
        Subject: serialNumber=5c69339550125c8f96a1d08e47668a60f1e321889eb0773c28031655a35ba9eb, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:09:8d:17:49:88:50:a6:cc:92:f1:08:fa:1e:
                    6c:ba:42:ef:54:a0:53:d8:f4:17:b4:c2:99:b6:26:
                    62:61:db:2e:45:0a:61:2d:0a:cf:b9:f5:b2:b8:a2:
                    ac:39:e8:1c:26:41:f8:5b:77:9b:ac:0a:1f:06:6f:
                    f2:e7:2a:ec:b1:ee:96:d5:b6:59:d0:9a:30:3b:2e:
                    29:63:8b:e8:ac:c8:95:ab:02:a5:80:3c:74:d7:d0:
                    c9:14:07:9f:e4:39:4c:2e:a2:17:6e:01:a0:e7:fd:
                    0a:de:0f:80:87:45:01:1d:85:ed:de:cb:b2:04:83:
                    09:6e:e1:fd:41:0d:dd:31:e8:f0:56:4f:d0:e6:51:
                    11:e0:98:5c:23:17:9b:05:3f:cc:1a:b3:2e:5d:9e:
                    55:c5:87:ff:98:66:6c:9d:be:da:43:b1:2a:44:1c:
                    a9:59:94:e8:02:55:7f:f5:9a:88:88:97:e3:2d:35:
                    c1:02:67:80:06:75:9f:65:83:ed:23:20:d7:1f:2d:
                    7f:af:1b:b0:d8:a7:3d:f1:7a:58:6f:a0:3e:11:23:
                    9a:63:4c:28:92:9d:fd:e9:1b:6f:cb:13:21:50:ec:
                    d6:b9:b2:c2:7b:8b:65:1b:39:e2:66:cf:59:7c:63:
                    e6:fc:09:de:a6:e3:ff:c3:5f:28:b7:46:c7:6d:e7:
                    ba:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:EC:F0:BF:25:91:15:5E:71:18:8A:A8:60:30:21:37:EE:31:21:6A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0dc15f74-b809-4877-98b6-06e1faec41e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.47.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         30:4f:1f:bf:ca:a0:6d:e3:87:66:93:52:2d:bc:72:53:ac:b8:
         ef:20:e9:54:ae:47:82:f9:2a:8c:a2:5c:79:3f:fd:c5:2b:78:
         24:05:29:50:7e:44:62:0d:07:f7:3d:7e:eb:d8:6e:ea:ae:7d:
         7e:6f:f0:07:87:53:4f:9c:5e:1b:4f:bc:7a:a9:e8:3f:31:14:
         df:75:28:9f:94:a2:b1:9a:e7:00:d9:71:59:40:f3:61:b5:da:
         3f:05:f4:a9:3a:aa:05:3f:4b:a9:81:cd:b4:0c:a0:8b:43:9d:
         d0:0d:02:1a:ee:50:e6:06:1d:94:ee:d9:fe:d5:8d:c9:ee:3e:
         58:ce:0d:ca:3e:ad:8f:8a:b3:74:a3:86:46:1f:fe:a2:c7:50:
         0e:43:9e:45:0d:3d:5f:1c:f0:34:07:8f:3d:31:d5:d6:c8:3a:
         bf:70:61:a4:35:af:3c:93:57:09:c3:d0:a6:4a:82:62:9d:3a:
         7d:ce:95:f2:94:fb:fc:d4:9d:77:2a:c9:36:84:aa:bd:d0:0a:
         34:03:53:8f:8c:ac:4c:05:dd:e8:e7:e7:b6:7a:26:8d:12:b5:
         dc:a6:23:ec:11:85:61:d7:de:35:89:73:c3:2e:82:d1:71:2a:
         1e:0d:00:50:f5:f9:6c:eb:cf:f9:d4:94:1a:3a:88:57:35:40:
         4c:ab:68:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 01:25:19 2024 by rpki-client on console-fra.rpki-client.org