Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/11fc2f5c-8806-4c28-8f0a-e501c4e53db9.roa
File:                     11fc2f5c-8806-4c28-8f0a-e501c4e53db9.roa (raw, json)
Hash identifier:          lxjlxtjS6y0L6puycYKaHNTxloLVC0zPz0eYqask2d4=
Subject key identifier:   D5:6B:B9:DE:11:F1:0B:0E:96:B8:7E:A3:C3:41:F6:6A:5E:19:6C:4E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6EBDC7A26B45B1F16E78E1B4BC1D6A274478C2D7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/11fc2f5c-8806-4c28-8f0a-e501c4e53db9.roa
Signing time:             Sat 13 Apr 2024 00:00:00 +0000
ROA not before:           Sat 13 Apr 2024 00:00:00 +0000
ROA not after:            Sat 18 May 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        148.99.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:bd:c7:a2:6b:45:b1:f1:6e:78:e1:b4:bc:1d:6a:27:44:78:c2:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 13 00:00:00 2024 GMT
            Not After : May 18 23:59:59 2024 GMT
        Subject: serialNumber=a448e8fd07f88fae1a3b46b71eb4ffe7de313e70ad0183652886ab44ca425727, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f6:49:90:0c:1d:aa:04:93:41:2c:23:65:1d:
                    9f:d6:0f:69:a8:c9:b9:cd:67:7c:66:8b:0a:90:2f:
                    d4:14:ad:e6:3b:94:b3:52:da:f1:43:e4:93:3f:17:
                    81:65:7a:c6:1d:56:7c:8b:d4:b3:d4:2f:e2:8a:a9:
                    cb:c2:8c:57:24:68:dd:eb:4a:f9:9e:37:e4:53:24:
                    19:41:a8:e4:fe:72:4e:74:2e:3a:02:5a:10:81:54:
                    46:d9:78:dc:49:c0:b6:30:27:0d:10:3e:69:22:45:
                    9e:7a:4b:93:3b:5c:c8:f8:d9:a9:3e:56:2d:c5:27:
                    9b:26:49:fe:2b:b4:58:ec:5f:9a:76:cc:00:74:5e:
                    01:a8:8d:14:e4:dd:18:b3:f3:9e:25:43:22:b2:df:
                    43:98:ea:88:74:93:60:b0:d6:51:58:96:6b:b8:22:
                    ae:2f:e1:bd:10:e6:1b:e0:54:77:67:0f:74:82:bc:
                    17:9e:fc:e9:52:8d:93:9a:3f:f2:3e:0d:30:89:59:
                    02:f0:fd:87:04:5b:d4:90:7e:2e:33:ca:4f:d6:e6:
                    b4:88:a2:36:b8:a2:aa:2c:6b:6c:e5:0d:d0:7d:00:
                    4a:62:04:ca:bc:f8:e6:e8:36:69:8f:59:15:60:95:
                    cd:a0:0e:6e:dc:c9:ef:7d:30:15:57:98:6b:80:60:
                    23:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:6B:B9:DE:11:F1:0B:0E:96:B8:7E:A3:C3:41:F6:6A:5E:19:6C:4E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/11fc2f5c-8806-4c28-8f0a-e501c4e53db9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.99.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         61:49:2f:d9:ba:b8:e1:29:da:66:17:92:12:51:5b:1e:5f:a8:
         a3:b0:a3:f1:31:6b:0a:60:c4:5d:31:1b:d3:3e:b4:9c:c2:58:
         49:f8:53:50:04:d2:0c:ae:10:1e:e7:01:65:7a:a2:ff:90:2c:
         a6:30:ba:e8:b4:be:6a:df:62:79:99:34:19:dc:78:96:05:99:
         d7:18:8b:b0:f3:24:67:18:25:59:bf:b7:dc:7b:5a:44:49:32:
         ef:1d:58:c4:6e:08:65:86:84:cd:be:bc:ff:d5:52:f5:ba:54:
         19:a2:3d:fa:64:58:c6:13:18:b7:a5:f5:05:db:19:92:ff:63:
         0e:1a:0a:41:e0:5e:00:fe:a3:cd:3e:fb:56:d5:d7:62:0f:19:
         9e:a1:50:54:9a:ee:b0:32:9a:6d:53:73:6c:90:06:0d:25:cf:
         f3:5e:11:22:12:0d:9d:96:db:eb:f2:50:9c:6b:9a:d1:ad:a5:
         42:6e:3b:e9:af:90:6c:7d:37:1e:b5:b2:fd:1d:b5:21:e2:01:
         46:bb:51:9e:9d:30:91:0d:69:55:31:fe:9c:84:e2:cf:ce:59:
         7f:45:ae:ed:21:e2:8c:46:e4:2a:cb:e2:30:1a:c1:d7:0c:ce:
         48:25:35:df:b2:05:62:cf:68:6c:9e:db:52:02:ca:f4:7b:b7:
         a4:08:b1:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 00:51:59 2024 by rpki-client on console-ams.rpki-client.org