Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/132da6ff-a8f0-434d-86f2-458d471a0187.roa
File:                     132da6ff-a8f0-434d-86f2-458d471a0187.roa (raw, json)
Hash identifier:          1volQZvm5KeCGzD5+A+XUngHuYwjedFzXjcRqyUSujY=
Subject key identifier:   C6:5B:33:73:53:13:BF:FC:54:F0:F8:73:A1:3C:F5:62:D8:2D:9C:A0
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       76B694C00066C690E0E719253E02466CF40420B8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/132da6ff-a8f0-434d-86f2-458d471a0187.roa
Signing time:             Mon 15 Apr 2024 00:00:00 +0000
ROA not before:           Mon 15 Apr 2024 00:00:00 +0000
ROA not after:            Mon 20 May 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        134.43.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:b6:94:c0:00:66:c6:90:e0:e7:19:25:3e:02:46:6c:f4:04:20:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 15 00:00:00 2024 GMT
            Not After : May 20 23:59:59 2024 GMT
        Subject: serialNumber=d9ecbcc1b526269e8be2b56398c336dfd7d0f123614297e7c4a9598987709136, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ae:45:56:10:81:96:f4:a4:37:ae:6a:33:87:
                    90:2e:7f:1d:84:6a:39:9c:72:82:e7:20:d2:76:ac:
                    f0:81:2a:b9:68:95:03:9d:f4:7f:b7:13:e4:08:6e:
                    8e:69:b0:a0:16:f4:9d:ec:27:c1:c8:8d:54:24:f4:
                    1d:51:22:ba:2f:54:00:f8:5e:09:85:45:ec:48:57:
                    85:49:6c:8a:10:e1:dc:3f:28:ea:aa:9b:1c:f3:a3:
                    a1:98:bd:68:1b:dc:6f:11:4f:f5:37:91:dd:b9:23:
                    4d:41:87:59:85:05:b7:11:5f:c6:5f:16:fb:77:5b:
                    a9:c6:84:01:69:ef:77:64:9b:d0:be:ab:43:69:13:
                    f6:b2:93:15:50:40:53:ff:ee:80:e9:7d:f4:ed:f9:
                    5b:0b:25:b9:71:fd:c0:61:0d:dd:da:f9:7b:db:8a:
                    31:0f:82:69:7c:30:5b:df:31:7f:2f:ce:8a:64:fe:
                    ca:ea:76:2e:48:ab:30:b5:86:ff:7c:95:d0:ea:d7:
                    20:ec:7a:59:99:8f:fa:75:0b:99:1c:fd:1a:d8:4b:
                    49:d9:2c:b2:9e:f0:b2:7e:4e:86:0d:03:f3:4e:3e:
                    a1:4a:f8:09:be:b3:3a:53:ff:5f:bf:3b:d3:7a:a4:
                    f3:63:c4:4c:75:36:bc:a0:e1:39:55:56:e1:f3:9b:
                    ae:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:5B:33:73:53:13:BF:FC:54:F0:F8:73:A1:3C:F5:62:D8:2D:9C:A0
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/132da6ff-a8f0-434d-86f2-458d471a0187.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.43.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         15:fe:82:76:85:9b:13:ba:6c:73:66:4a:1f:a4:f8:e2:cb:b2:
         8d:08:32:a0:5e:db:4d:ad:f2:9b:6b:95:a4:74:54:55:c4:d2:
         e7:85:ea:91:9f:cb:94:57:e9:93:3e:6d:b0:24:e5:0d:79:4e:
         5d:56:77:86:0e:09:3c:69:01:82:dd:1e:8b:a4:0e:24:3e:b1:
         1a:0f:b6:e3:bc:ea:57:42:1b:26:f7:63:57:a2:3a:86:0b:9e:
         84:6d:24:42:c0:99:e4:04:02:76:dd:7f:4a:e0:e6:e4:d3:80:
         9d:31:6f:c0:d9:43:74:ba:6d:e2:60:83:4a:38:6c:70:e9:7a:
         e6:d7:2e:10:7b:3b:b0:39:48:f1:1d:1a:f5:f6:cd:0b:85:69:
         dd:bd:a7:0d:7c:58:cc:90:e4:54:dd:45:5e:ab:a3:6b:0f:9c:
         bc:8f:7c:3d:0d:40:16:4d:2e:f4:24:90:12:fd:ed:67:f9:cf:
         69:77:d2:96:a7:0a:a3:84:3f:60:8b:58:6f:ea:d5:aa:8f:3f:
         04:9d:19:e5:c3:70:73:8c:74:86:ad:f8:7d:f5:3e:a9:ab:ce:
         48:7f:3e:33:1d:7c:a0:0d:67:06:54:22:86:1b:33:30:ac:41:
         1c:8b:49:e0:74:5f:24:1a:d8:c9:04:88:12:5c:0f:99:a4:13:
         7e:25:cf:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 08:50:52 2024 by rpki-client on console-fra.rpki-client.org