Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/138ff346-bb31-4ce1-bf4a-f324caf90139.roa
File:                     138ff346-bb31-4ce1-bf4a-f324caf90139.roa (raw, json)
Hash identifier:          PQHdI339ivb6q3CWr5/Eidlw6kihWgVUNoY3Y7YF/uI=
Subject key identifier:   90:C4:93:D2:6C:79:60:2A:C6:BA:27:D4:76:FE:D6:CB:A5:6C:0F:13
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       54A4AD94819B1406452A90CFFEBC005D5E85F744
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/138ff346-bb31-4ce1-bf4a-f324caf90139.roa
Signing time:             Sat 13 Apr 2024 00:00:00 +0000
ROA not before:           Sat 13 Apr 2024 00:00:00 +0000
ROA not after:            Sat 18 May 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        216.15.128.0/17 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:a4:ad:94:81:9b:14:06:45:2a:90:cf:fe:bc:00:5d:5e:85:f7:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 13 00:00:00 2024 GMT
            Not After : May 18 23:59:59 2024 GMT
        Subject: serialNumber=a058d7057bf83bf3645f00e3d759f63145562ad81b77b217463a0696fafc8b75, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:78:f2:4f:66:c1:02:7e:53:e4:f4:f4:51:47:
                    d4:69:56:d4:66:29:6f:16:41:47:00:7f:b2:b9:a9:
                    db:b3:19:de:cb:fd:64:62:ad:00:30:08:e7:5c:a5:
                    6d:84:06:20:3d:d7:83:b6:17:b4:ff:2c:bc:f5:f2:
                    d6:b8:82:fc:0f:de:9d:5d:1b:49:3e:73:ca:80:90:
                    ab:67:1d:08:22:53:09:bb:a7:c9:ff:45:2a:7b:04:
                    9b:f4:73:d3:1c:b5:54:0e:93:ae:7a:3f:b4:f0:03:
                    b0:92:f7:36:b6:a2:14:fe:ec:6a:6c:c1:d2:ff:ad:
                    91:1a:a3:5a:e5:7b:39:e4:d2:21:ca:0c:1b:43:11:
                    36:2a:54:92:f1:36:5b:75:64:ca:3f:0e:49:2f:6d:
                    77:f8:fd:72:c4:3c:95:d2:d5:89:78:36:1f:53:d7:
                    13:e4:a7:c2:1a:71:1f:99:d4:0f:dd:2e:8e:4e:68:
                    5f:01:34:85:2a:e5:8a:dc:cd:c3:41:f2:af:d8:87:
                    36:14:6b:a4:bb:55:3f:8c:25:c2:9f:e9:2b:8a:6b:
                    12:c7:ce:f6:a4:69:1a:57:4c:8b:6d:45:56:48:68:
                    ab:8c:30:37:2c:c6:1e:c0:01:92:36:2d:48:77:0d:
                    af:6e:53:da:58:47:e1:6b:39:c9:bd:62:dc:ab:cb:
                    2d:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:C4:93:D2:6C:79:60:2A:C6:BA:27:D4:76:FE:D6:CB:A5:6C:0F:13
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/138ff346-bb31-4ce1-bf4a-f324caf90139.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.15.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         a7:4f:03:d2:f7:1e:d0:85:a4:db:8f:d6:6e:b6:f3:b8:ae:51:
         be:21:c0:8e:46:60:b7:b8:67:47:40:09:f4:4e:dc:fe:43:d5:
         6e:cd:b4:2b:2e:23:22:51:16:b0:84:f5:be:17:8f:31:1f:49:
         ee:0a:72:fd:29:25:ac:cc:d8:cf:40:b2:8f:97:70:cf:ae:0d:
         7c:3e:e5:ee:ee:23:3d:b2:0c:1c:99:06:7a:99:c6:03:70:ea:
         57:a1:1e:ac:72:81:8e:19:a3:9f:37:fa:af:e6:91:0a:92:f5:
         84:4b:f9:97:8f:1e:5f:d1:b9:e2:a5:14:a5:13:fc:3b:66:95:
         aa:37:a2:07:bd:dc:31:77:ad:89:de:29:72:1e:0b:7b:66:30:
         a9:91:c3:71:ad:86:39:02:70:f2:f2:25:ee:37:b9:62:4a:86:
         cb:00:4b:6f:99:e7:99:bf:5b:25:20:9c:67:ac:f6:83:f8:f0:
         fa:fe:fa:1b:e0:e9:ff:e1:39:54:28:51:52:6f:b2:1e:77:d0:
         fd:b5:7d:6d:23:91:86:db:1b:e1:7c:ae:4f:08:54:40:b0:b2:
         72:71:f6:ed:d3:39:0c:92:ed:e0:b3:d5:36:d8:53:ea:c0:7b:
         e6:11:a9:94:2b:d0:bb:72:b9:84:79:77:9c:cd:30:ec:c1:49:
         28:7c:c4:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 11:33:10 2024 by rpki-client on console-fra.rpki-client.org